Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
File:                     L7oAN1bRATuUPrT1B_tOfHR3gmk.mft (raw, json)
Hash identifier:          wBfVVxQxzKuB0He9weubobzCwoimbwixE2EJOGRbOUY=
Subject key identifier:   87:93:90:CD:D7:BD:46:A3:F7:8C:38:73:93:73:29:17:7F:64:BD:EF
Authority key identifier: 2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69
Certificate issuer:       /CN=2fba003756d1013b943eb4f507fb4e7c74778269
Certificate serial:       019E1FB5E2B6B7D64D2F4B5EDF57544E6100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
Manifest number:          0238
Signing time:             Wed 13 May 2026 05:01:14 +0000
Manifest this update:     Wed 13 May 2026 05:01:14 +0000
Manifest next update:     Thu 14 May 2026 05:01:14 +0000
Files and hashes:         1: L7oAN1bRATuUPrT1B_tOfHR3gmk.crl (hash: 9JYuSBIzj+9d64+ARYdbC0XN21dwQG8KrorlpO8P/Tw=)
                          2: Qt5FyyoDlj0YHpPNUFsAKekF6tM.roa (hash: T9UiTSXHZWvGquYOfGokmG8Ee9UykPig78Bt+PH4Uss=)
                          3: elVY3vqQhqwXbGtUDC6eCusDZg4.roa (hash: /YmMz1Uwy7zMCN1Of52sW1YGZKU0QEfD3dwCbGK6wnY=)
                          4: hMXGPmesHafq1ldVlCqzO5jhnK4.roa (hash: atdNH467wE+RBwnetrSvy++hllXan+TQKM5dBpraPhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:e2:b6:b7:d6:4d:2f:4b:5e:df:57:54:4e:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fba003756d1013b943eb4f507fb4e7c74778269
        Validity
            Not Before: May 13 05:01:14 2026 GMT
            Not After : May 14 05:01:14 2026 GMT
        Subject: CN=879390cdd7bd46a3f78c3873937329177f64bdef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:18:03:cc:db:1b:55:d7:67:8f:60:a0:36:a7:
                    21:61:1e:79:5b:c4:88:fa:73:3d:0e:48:66:62:b2:
                    5b:c9:5a:af:a2:d6:a5:b6:e7:03:e4:80:94:6e:0f:
                    fd:46:42:e9:00:5f:fc:cc:20:37:4e:22:5e:09:a3:
                    9f:4b:d6:ea:d1:1d:08:cb:ae:25:34:b5:b7:af:28:
                    e1:59:ad:76:d5:e1:07:a6:09:f5:8a:77:e2:bb:9c:
                    81:77:f6:bf:e7:12:ad:67:3c:2a:02:8e:74:a8:58:
                    5f:e8:a4:fd:1e:34:9b:1b:1e:99:47:73:28:54:50:
                    bd:b8:29:66:f7:22:7b:bc:37:0d:95:35:e9:bb:0b:
                    e8:3f:f4:8f:7e:d3:49:b1:1a:f5:ed:81:62:25:b9:
                    eb:6d:a7:d5:1a:08:14:0d:4e:8e:d1:6e:33:16:ea:
                    d5:c0:f2:c8:9f:f3:19:55:43:ad:f4:cf:aa:ce:bd:
                    a5:13:dc:8c:24:70:b9:99:81:ea:bc:54:5a:eb:40:
                    21:b9:c9:87:c6:8a:46:cc:23:2e:b9:e9:a5:37:f9:
                    c0:99:a7:53:f7:cd:c1:a0:a2:1b:7d:df:fa:3d:e8:
                    cb:e1:51:b6:de:ee:58:b6:68:eb:0f:69:dc:fd:88:
                    b0:49:c9:fd:97:a1:3e:76:6a:6a:e4:5d:e0:77:5c:
                    fb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:93:90:CD:D7:BD:46:A3:F7:8C:38:73:93:73:29:17:7F:64:BD:EF
            X509v3 Authority Key Identifier:
                keyid:2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:8a:64:90:43:9e:ba:7e:95:1b:35:67:df:62:85:ba:18:1f:
         fb:a9:cf:7f:92:1a:f7:61:c6:0e:b3:bb:74:d7:c8:a4:09:d1:
         74:c5:e7:05:26:61:12:71:75:23:8f:90:9d:47:79:eb:a9:07:
         e4:02:52:0c:7d:db:79:fa:57:5a:ed:99:3a:a5:ae:bc:b3:2b:
         c4:92:a5:e0:1f:b1:61:5e:6d:ed:3b:b0:e4:96:cc:e8:1e:4f:
         ce:ec:2e:13:2a:60:a0:8b:91:df:6d:95:92:bf:3d:aa:1a:e9:
         6b:4d:d7:07:fe:b0:e3:d4:9b:38:09:c4:00:b9:09:ab:cd:12:
         9d:67:3a:44:55:4b:5a:5f:32:e3:13:1c:68:cd:26:5b:a6:57:
         9f:f2:1a:04:76:36:69:8b:a7:27:42:0b:38:dc:f0:01:ad:a0:
         03:70:15:c5:58:8f:76:11:01:90:76:36:f6:d7:02:b9:b4:91:
         c2:7b:14:f5:1e:02:a3:6b:05:6b:a6:3e:d0:02:b3:d8:88:4b:
         d4:8b:e0:fd:1f:3f:d7:a1:ec:b3:2a:09:f2:66:ae:ad:18:a3:
         b4:a8:ae:e8:fa:e1:0d:66:16:4e:c3:1b:66:ed:37:ca:91:67:
         40:00:ba:53:91:9a:2b:23:44:ba:82:2f:06:87:1d:03:4d:5b:
         16:9c:76:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fteK2t9ZNL0te31dUTmEAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYmEwMDM3NTZkMTAxM2I5NDNlYjRmNTA3ZmI0ZTdjNzQ3
NzgyNjkwHhcNMjYwNTEzMDUwMTE0WhcNMjYwNTE0MDUwMTE0WjAzMTEwLwYDVQQD
Eyg4NzkzOTBjZGQ3YmQ0NmEzZjc4YzM4NzM5MzczMjkxNzdmNjRiZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxgDzNsbVddnj2CgNqchYR55W8SI
+nM9DkhmYrJbyVqvotaltucD5ICUbg/9RkLpAF/8zCA3TiJeCaOfS9bq0R0Iy64l
NLW3ryjhWa121eEHpgn1infiu5yBd/a/5xKtZzwqAo50qFhf6KT9HjSbGx6ZR3Mo
VFC9uClm9yJ7vDcNlTXpuwvoP/SPftNJsRr17YFiJbnrbafVGggUDU6O0W4zFurV
wPLIn/MZVUOt9M+qzr2lE9yMJHC5mYHqvFRa60AhucmHxopGzCMuuemlN/nAmadT
983BoKIbfd/6PejL4VG23u5YtmjrD2nc/YiwScn9l6E+dmpq5F3gd1z7hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeTkM3XvUaj94w4c5NzKRd/ZL3vMB8GA1UdIwQY
MBaAFC+6ADdW0QE7lD609Qf7Tnx0d4JpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy82MjJmZGItMGU1Ni00Yzg3LTg2NmIt
YjMxZjI1MmYxOTY5LzEvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy82MjJmZGItMGU1Ni00Yzg3LTg2NmItYjMxZjI1MmYxOTY5
LzEvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZopkkEOe
un6VGzVn32KFuhgf+6nPf5Ia92HGDrO7dNfIpAnRdMXnBSZhEnF1I4+QnUd566kH
5AJSDH3befpXWu2ZOqWuvLMrxJKl4B+xYV5t7Tuw5JbM6B5PzuwuEypgoIuR322V
kr89qhrpa03XB/6w49SbOAnEALkJq80SnWc6RFVLWl8y4xMcaM0mW6ZXn/IaBHY2
aYunJ0ILONzwAa2gA3AVxViPdhEBkHY29tcCubSRwnsU9R4Co2sFa6Y+0AKz2IhL
1Ivg/R8/16HssyoJ8maurRijtKiu6PrhDWYWTsMbZu03ypFnQAC6U5GaKyNEuoIv
BocdA01bFpx2Dg==
-----END CERTIFICATE-----
Generated at Wed May 13 12:38:58 2026 by rpki-client