Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
File:                     7D09fly_GK9mt_W0peCsGezTmHY.mft (raw, json)
Hash identifier:          OjwDvcJohVF1AW8Nk4v7oy3Nonab7h1sOjF+ng4dNmU=
Subject key identifier:   25:D9:5B:7E:FA:3E:B3:F8:29:93:64:48:2B:C1:E5:63:C8:75:CE:93
Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
Certificate issuer:       /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Certificate serial:       019E311742578967D2CABEBE54840FD26D9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
Manifest number:          190E
Signing time:             Sat 16 May 2026 14:01:08 +0000
Manifest this update:     Sat 16 May 2026 14:01:08 +0000
Manifest next update:     Sun 17 May 2026 14:01:08 +0000
Files and hashes:         1: 7D09fly_GK9mt_W0peCsGezTmHY.crl (hash: kC5TyNjJkHqy0gewUHqptUWCuB94aPUwfgWYp04q/lY=)
                          2: dZLilwWHDcTBgw2vlgqQEo8wXmI.roa (hash: vNrKzB7jLGfmCB0/mX4ygPzITD3M9syDqPUvmlc8/PY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:42:57:89:67:d2:ca:be:be:54:84:0f:d2:6d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
        Validity
            Not Before: May 16 14:01:08 2026 GMT
            Not After : May 17 14:01:08 2026 GMT
        Subject: CN=25d95b7efa3eb3f8299364482bc1e563c875ce93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:ca:15:da:84:c5:5d:96:92:55:cf:ff:24:
                    d7:8b:c5:d4:c6:bf:ab:21:39:34:00:f9:cf:32:e5:
                    3a:6f:d5:84:89:4e:33:f5:61:e3:f3:25:a8:0b:e1:
                    79:e4:02:43:4a:be:75:84:91:3d:20:92:01:44:76:
                    f7:fa:61:e1:77:8a:4b:fa:5a:11:d9:52:ed:d9:a4:
                    e5:24:f7:32:ea:fc:8f:01:f5:83:4c:a7:df:e6:44:
                    7e:c6:5e:a6:3f:09:b4:52:cc:24:7d:6d:90:5d:49:
                    5f:b6:17:17:5f:87:f1:f2:57:a4:01:20:e0:22:13:
                    e8:8b:22:83:9e:2c:a8:f7:ec:de:c8:b7:57:7f:ef:
                    97:16:8c:83:89:bc:8a:dc:8a:16:30:99:c6:3f:e4:
                    07:3a:76:c9:53:b0:44:98:8f:33:cc:78:86:8d:88:
                    bd:00:3e:59:ca:ad:66:e8:42:77:0f:48:d5:22:cb:
                    ec:77:1b:f6:cb:e2:5d:cf:49:aa:21:50:58:14:82:
                    ca:25:0e:10:6f:c7:8c:96:70:77:64:05:2a:7e:ad:
                    06:c4:72:9a:fb:c2:03:28:c1:5b:ba:6e:b3:f7:e1:
                    df:d8:09:c4:74:ae:63:80:cc:d6:b8:ec:fc:a6:97:
                    c7:91:e1:0e:2d:3b:24:94:79:4c:6c:c8:a5:41:e3:
                    ae:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D9:5B:7E:FA:3E:B3:F8:29:93:64:48:2B:C1:E5:63:C8:75:CE:93
            X509v3 Authority Key Identifier:
                keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:bf:09:b5:fb:6d:8d:d8:fb:76:33:1b:ad:58:7f:3c:a3:ee:
         8d:fd:3f:21:13:f4:64:e2:64:cd:cb:b8:7e:56:b6:85:0c:12:
         12:04:26:0a:6d:75:c7:df:d2:58:67:d8:1c:f0:2e:80:c4:9e:
         d0:d1:0d:4e:c4:c9:ee:13:80:89:ce:36:53:98:77:b3:54:64:
         e1:da:0b:43:a9:2e:fc:0d:8d:8a:c6:a0:b3:2b:a9:e9:dc:55:
         ee:3b:a0:5e:17:0b:ae:02:2f:a6:06:b7:b9:31:26:50:3b:a3:
         94:e7:e2:cf:23:f6:8d:56:e2:82:03:41:c2:c2:2e:ee:60:dd:
         4b:7e:d0:37:57:59:24:b4:26:31:d5:80:96:16:9a:b0:6b:38:
         8e:01:17:5f:64:72:1c:51:e0:3c:23:16:ef:a7:f7:5a:44:97:
         b3:56:44:74:a8:24:89:2e:6b:d4:00:83:6d:9d:a1:e7:c2:33:
         41:dc:67:e5:1b:cc:77:dc:aa:16:e2:1b:4f:33:8d:d7:0b:c3:
         ef:e0:8a:9b:14:e7:37:9e:94:d1:9e:e8:3c:cb:ad:da:3d:9f:
         97:91:ce:d4:b8:99:62:2a:f3:f4:24:d8:09:6e:f9:2a:56:81:
         31:8c:6b:db:f4:24:e6:af:a1:62:8c:41:11:f1:5c:d4:79:db:
         a7:34:1f:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xF0JXiWfSyr6+VIQP0m2dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjM2QzZDdlNWNiZjE4YWY2NmI3ZjViNGE1ZTBhYzE5ZWNk
Mzk4NzYwHhcNMjYwNTE2MTQwMTA4WhcNMjYwNTE3MTQwMTA4WjAzMTEwLwYDVQQD
EygyNWQ5NWI3ZWZhM2ViM2Y4Mjk5MzY0NDgyYmMxZTU2M2M4NzVjZTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqrKFdqExV2WklXP/yTXi8XUxr+r
ITk0APnPMuU6b9WEiU4z9WHj8yWoC+F55AJDSr51hJE9IJIBRHb3+mHhd4pL+loR
2VLt2aTlJPcy6vyPAfWDTKff5kR+xl6mPwm0UswkfW2QXUlfthcXX4fx8lekASDg
IhPoiyKDniyo9+zeyLdXf++XFoyDibyK3IoWMJnGP+QHOnbJU7BEmI8zzHiGjYi9
AD5Zyq1m6EJ3D0jVIsvsdxv2y+Jdz0mqIVBYFILKJQ4Qb8eMlnB3ZAUqfq0GxHKa
+8IDKMFbum6z9+Hf2AnEdK5jgMzWuOz8ppfHkeEOLTsklHlMbMilQeOuXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXZW376PrP4KZNkSCvB5WPIdc6TMB8GA1UdIwQY
MBaAFOw9PX5cvxivZrf1tKXgrBns05h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0QwOWZseV9HSzltdF9XMHBlQ3NHZXpUbUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iNjU5ZmMtNmI5Yi00ODQ3LWI2YTMt
NDY2MGZhZDgzOTg1LzEvN0QwOWZseV9HSzltdF9XMHBlQ3NHZXpUbUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9iNjU5ZmMtNmI5Yi00ODQ3LWI2YTMtNDY2MGZhZDgzOTg1
LzEvN0QwOWZseV9HSzltdF9XMHBlQ3NHZXpUbUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAob8Jtftt
jdj7djMbrVh/PKPujf0/IRP0ZOJkzcu4fla2hQwSEgQmCm11x9/SWGfYHPAugMSe
0NENTsTJ7hOAic42U5h3s1Rk4doLQ6ku/A2Nisagsyup6dxV7jugXhcLrgIvpga3
uTEmUDujlOfizyP2jVbiggNBwsIu7mDdS37QN1dZJLQmMdWAlhaasGs4jgEXX2Ry
HFHgPCMW76f3WkSXs1ZEdKgkiS5r1ACDbZ2h58IzQdxn5RvMd9yqFuIbTzON1wvD
7+CKmxTnN56U0Z7oPMut2j2fl5HO1LiZYirz9CTYCW75KlaBMYxr2/Qk5q+hYoxB
EfFc1HnbpzQfbA==
-----END CERTIFICATE-----
Generated at Sat May 16 15:40:02 2026 by rpki-client