Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
File:                     b7u17BJ6BjLSJq8H-snE0oS9G6w.mft (raw, json)
Hash identifier:          cuZ2a3TrkqTSRrXW+kr61JKsyshdE1fDa2YcXS+py4Q=
Subject key identifier:   38:7D:E6:8D:E5:B6:42:20:53:0A:3D:44:1E:43:81:D3:81:79:E3:9D
Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
Certificate issuer:       /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Certificate serial:       019E1FB5A93A743B7C43996F86DD48634984
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 05:00:59 +0000
Manifest this update:     Wed 13 May 2026 05:00:59 +0000
Manifest next update:     Thu 14 May 2026 05:00:59 +0000
Files and hashes:         1: QowN0LD_MpyH9XeoraRCQC23xeg.roa (hash: hLxc7NbhUpaHA5kGsA3jfQYRDHphB6U/6NiFfrvj7Nw=)
                          2: b7u17BJ6BjLSJq8H-snE0oS9G6w.crl (hash: DHCKhUYdqdwxN2gCpNFcDwtoTRuuvCp76jd1+kHwi/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:a9:3a:74:3b:7c:43:99:6f:86:dd:48:63:49:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
        Validity
            Not Before: May 13 05:00:59 2026 GMT
            Not After : May 14 05:00:59 2026 GMT
        Subject: CN=387de68de5b64220530a3d441e4381d38179e39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:09:16:93:07:a9:90:2f:cc:69:94:f4:9a:
                    e7:cb:0e:ba:2d:91:34:78:42:6c:3f:d4:ed:34:2b:
                    70:ba:b7:cc:4c:a2:72:10:d0:cf:a1:41:5a:2f:49:
                    84:79:ed:c5:ec:3e:03:61:93:b0:ca:cb:0d:43:c8:
                    36:88:c5:07:53:bb:fd:38:23:a3:5b:fb:fc:ef:64:
                    e9:b9:69:a0:28:0c:0b:b3:8c:e5:f4:43:fa:38:4d:
                    21:ff:53:83:91:7b:b0:a8:97:aa:5c:31:97:9c:d3:
                    32:e2:0b:b4:00:8a:c2:58:8d:e2:2a:79:85:e0:aa:
                    be:15:83:75:ee:0d:08:ed:b6:c6:32:85:15:72:4c:
                    10:1b:b4:42:2c:0d:d4:d7:e4:b7:96:75:ab:2b:d7:
                    a6:d2:ca:a9:a3:d8:dc:88:ad:33:01:73:44:70:a1:
                    5a:6a:8e:f2:ee:15:5a:bc:7e:5d:0a:ff:08:13:8e:
                    b1:b2:61:fe:41:54:c0:d3:af:00:18:00:76:5b:16:
                    ab:33:0b:a8:76:44:5c:5c:45:02:28:96:f9:b6:8c:
                    c2:f1:3b:e4:92:1e:9f:83:4b:9b:ff:8d:57:45:66:
                    11:ce:48:e9:e4:db:4c:6e:82:d0:b3:57:b7:61:8d:
                    6d:7e:78:85:39:5d:7e:d0:97:97:6e:eb:72:1b:e9:
                    ff:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7D:E6:8D:E5:B6:42:20:53:0A:3D:44:1E:43:81:D3:81:79:E3:9D
            X509v3 Authority Key Identifier:
                keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:28:fd:54:f7:da:04:52:cf:f7:5c:9e:55:25:6e:2b:12:3c:
         7f:eb:de:30:9f:48:24:87:75:b9:83:70:2e:81:8b:76:8a:da:
         76:20:d9:9d:a4:3d:a9:b6:75:c8:29:05:07:9a:46:f4:95:82:
         3b:44:6e:1d:19:46:dc:a5:33:ed:67:5b:eb:d4:47:fe:7d:5a:
         f1:4e:80:ce:3f:72:fd:08:c6:7e:6b:27:d3:5b:a9:74:3f:84:
         84:31:7f:3d:8d:af:1e:55:ef:e4:c3:af:04:04:2c:95:d8:69:
         21:bf:87:ae:b0:70:ec:c7:0a:03:a2:b9:56:67:da:4c:3f:c8:
         98:af:dc:a4:0a:09:21:07:82:c8:55:17:58:3b:d4:a4:41:94:
         0d:09:51:f0:86:c8:94:f2:ad:4f:20:59:d5:8d:b7:a3:d5:6c:
         36:cb:20:f2:31:60:79:d6:b3:11:3b:62:b1:11:ec:0f:9a:37:
         e3:87:75:2e:8e:30:85:5c:7a:52:6a:ff:b6:cc:9b:d4:7d:51:
         1d:13:60:e3:10:c4:5a:83:de:05:6b:62:99:c8:f8:ad:50:ee:
         4e:26:eb:ea:c8:49:7b:8c:b0:15:dc:8d:8b:51:3e:05:fd:d3:
         b5:46:a4:7f:ac:1b:0e:3f:48:73:27:de:46:0d:42:e8:21:12:
         ea:71:6b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:49:37 2026 by rpki-client