Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
File:                     7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft (raw, json)
Hash identifier:          M25dt1VPZoxFTrljgjpF64bB1dV4oXxBsSmKjK2/L98=
Subject key identifier:   C0:7A:A9:D6:5B:46:C4:A6:8D:F9:51:3A:E8:78:81:A1:25:4A:79:01
Authority key identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
Certificate issuer:       /CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Certificate serial:       019E1D225A21EEAAA3A3F31B45E1F1AB5845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
Manifest number:          06C4
Signing time:             Tue 12 May 2026 17:00:51 +0000
Manifest this update:     Tue 12 May 2026 17:00:51 +0000
Manifest next update:     Wed 13 May 2026 17:00:51 +0000
Files and hashes:         1: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl (hash: 6hLiK2hPzWW2nA24XPoBGbMIkzmihwQdKSYOXXKcUvE=)
                          2: DBz0WhaRA9wNrK9K1etEW30ajBM.roa (hash: TIvrus04yBKxsgpsBLzS8XeHM34FR+aAzVV81lSqNzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:5a:21:ee:aa:a3:a3:f3:1b:45:e1:f1:ab:58:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed900a55518b679edc78faa9883ec6e6035ae71c
        Validity
            Not Before: May 12 17:00:51 2026 GMT
            Not After : May 13 17:00:51 2026 GMT
        Subject: CN=c07aa9d65b46c4a68df9513ae87881a1254a7901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3f:c1:4e:b7:90:8b:66:18:11:24:ec:44:2a:
                    81:90:31:9f:40:1c:77:f7:01:e1:81:db:69:2f:1c:
                    a3:cf:14:5b:38:a6:0d:27:78:82:5b:8d:85:57:60:
                    7e:a9:c7:97:8c:22:26:b1:a5:77:bb:e9:00:6d:93:
                    fe:12:10:e2:ea:38:74:44:b3:1e:3a:4e:df:0c:1d:
                    30:7e:b0:92:85:8e:0e:9c:b8:00:ee:65:aa:46:7e:
                    f4:25:b4:64:e4:18:c8:76:57:f8:63:d8:f6:f1:41:
                    04:b6:53:a6:1e:91:3c:fb:58:58:51:aa:c1:e6:18:
                    e2:d0:bd:75:82:a2:81:bb:f2:2e:46:19:75:d1:22:
                    9a:75:fa:53:ee:28:9b:b1:ec:dd:30:3d:82:a7:34:
                    d8:fd:82:8c:fa:25:83:6a:8f:d0:3c:e7:8b:14:31:
                    f4:4d:d1:55:80:f2:23:a8:1c:f2:78:8a:27:f9:b3:
                    c5:fa:54:df:46:11:74:cc:8f:38:78:6d:6f:1b:9b:
                    68:34:4e:b0:9e:3c:9d:19:81:a7:d2:f7:f1:e7:df:
                    5e:0c:ee:b8:88:d3:5a:c0:9a:71:fa:0a:9e:5d:27:
                    96:97:0a:ac:42:29:1d:a0:c4:c6:8d:9b:29:72:eb:
                    ef:b4:9c:b9:b8:2c:37:ed:8e:a5:a1:08:82:74:48:
                    1c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7A:A9:D6:5B:46:C4:A6:8D:F9:51:3A:E8:78:81:A1:25:4A:79:01
            X509v3 Authority Key Identifier:
                keyid:ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ef:87:2b:d7:32:4c:31:1f:45:66:cb:34:0b:2b:93:32:17:
         2b:da:3e:84:41:dc:98:b9:b4:05:44:d2:24:7b:85:67:9e:63:
         81:98:eb:3e:42:9e:4d:2a:2a:70:f7:de:21:ec:11:52:8e:05:
         b0:1c:d4:6c:e8:1e:dc:38:19:8a:01:c2:94:4e:5d:99:09:04:
         37:d9:22:6d:96:52:ad:fa:9c:cb:3b:4f:dc:c8:9c:d7:5e:7f:
         fe:be:0e:14:e6:9d:47:ae:f9:d8:90:a8:91:9f:71:b4:b5:71:
         2c:c2:ca:47:ab:90:e9:06:68:98:46:d2:d1:ee:06:71:ae:78:
         86:b3:10:aa:81:d5:3f:0a:d9:63:48:da:18:27:b1:15:1e:9c:
         bf:8d:bf:b9:b4:15:62:0a:73:41:a0:a8:cb:58:72:3d:f4:fb:
         e4:d8:0d:8f:38:e7:d1:fb:07:8b:5a:5a:f5:bd:2f:47:da:69:
         75:d2:78:4c:7f:3f:b3:0b:81:fd:7b:8c:2c:dc:81:64:bd:fd:
         2f:f8:10:e9:c8:a8:f8:c1:55:8a:50:7b:5d:3b:de:06:d3:d2:
         c3:33:b6:ed:4d:7e:62:f4:23:fa:70:da:41:f6:b3:2f:a5:51:
         f4:be:87:95:71:97:5b:45:ad:f0:26:b1:3e:bd:86:f2:65:7f:
         1e:e7:d7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:50:00 2026 by rpki-client