Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
File:                     75S8y9TC4P-PeqsEXhSjEfOy-f4.mft (raw, json)
Hash identifier:          jYSbPGelNzG2JB0hgJSGxK+Yj7uio68qWeFpwNS4CE0=
Subject key identifier:   1E:FE:60:4E:13:C0:FC:28:A5:A7:AB:17:03:7B:2F:D9:3D:C8:CD:26
Authority key identifier: EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE
Certificate issuer:       /CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
Certificate serial:       019E1EA3962607EB64AE2B7F06971FB7FA1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
Manifest number:          04F9
Signing time:             Wed 13 May 2026 00:01:37 +0000
Manifest this update:     Wed 13 May 2026 00:01:37 +0000
Manifest next update:     Thu 14 May 2026 00:01:37 +0000
Files and hashes:         1: 75S8y9TC4P-PeqsEXhSjEfOy-f4.crl (hash: wQRAq2KnpgI3IIgenq/RR8bsCyFdMMJIxs14sAK1jIc=)
                          2: T402uwWdle2-wACzD9ONw9UX7Q0.roa (hash: qH2p5m4fwAtgkEGn5eHmdKfPUlYPjTmqTH+gzJaccXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:96:26:07:eb:64:ae:2b:7f:06:97:1f:b7:fa:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
        Validity
            Not Before: May 13 00:01:37 2026 GMT
            Not After : May 14 00:01:37 2026 GMT
        Subject: CN=1efe604e13c0fc28a5a7ab17037b2fd93dc8cd26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:15:c6:83:19:86:8b:07:7e:88:ae:76:c7:40:
                    b1:89:f5:a7:08:f6:24:61:25:84:a8:39:16:d5:d3:
                    f4:96:e8:63:c7:e1:13:06:70:c3:f8:15:e9:a6:43:
                    6d:ce:fe:84:91:c5:dc:ae:2a:e9:ae:41:5c:63:f4:
                    63:29:33:8f:06:76:91:dc:93:95:08:dc:33:6c:8a:
                    e1:08:ee:c8:26:b6:d9:38:a2:7d:7b:80:b9:88:51:
                    54:12:8d:7d:db:17:74:3e:66:dc:0f:91:dc:31:93:
                    ca:ef:b7:ce:d3:45:b7:66:4d:63:35:82:55:a8:f2:
                    e6:ba:b0:89:42:ab:31:b9:7d:1b:f4:b8:ce:83:89:
                    f6:4b:57:2c:4f:35:fc:c5:02:13:c9:da:f5:68:c8:
                    b9:12:a6:a1:b3:bf:e1:44:06:21:86:ca:3b:8a:12:
                    a9:63:40:43:ec:a7:f6:51:57:ca:57:db:d8:a3:b5:
                    b4:74:c4:d8:bc:14:60:e9:2a:fd:3b:2b:1c:70:8e:
                    28:17:4b:8b:99:2a:ab:3a:78:b3:f8:99:7b:b7:22:
                    c7:63:5d:5d:38:fb:0a:3c:75:6e:b7:7d:3b:39:03:
                    24:0b:a5:b9:a6:e9:a0:a1:58:9d:18:40:54:64:2b:
                    e6:d4:bd:70:3c:b5:ee:41:7d:c3:cd:bc:64:d1:27:
                    7d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FE:60:4E:13:C0:FC:28:A5:A7:AB:17:03:7B:2F:D9:3D:C8:CD:26
            X509v3 Authority Key Identifier:
                keyid:EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:32:be:01:11:4a:a2:9e:01:a3:38:aa:d8:4d:2c:8d:bf:d2:
         18:73:0e:6d:97:86:11:bb:03:62:f1:68:77:5a:d9:88:27:4c:
         ab:7a:6b:68:e0:26:82:ef:43:28:22:e2:ea:3b:1d:f6:f9:e0:
         80:7c:08:99:7c:06:b1:45:8c:19:b6:d6:4d:c6:fd:be:a4:9b:
         f8:b3:b9:b2:8a:dc:66:eb:9b:18:c3:04:2e:f2:48:5a:52:ac:
         73:e2:f2:dd:7c:b8:28:46:0a:04:1f:2a:8d:62:f5:eb:66:57:
         f2:f9:55:ad:08:99:86:1b:48:e4:55:22:84:ff:a3:98:34:21:
         2f:30:29:c9:ba:9c:26:4d:6c:79:5f:aa:ff:3a:89:29:cf:da:
         ce:7d:f7:ec:02:31:78:84:3b:b0:68:67:28:00:2a:da:18:75:
         47:82:63:a9:95:94:4b:06:dd:c3:79:9f:3d:79:e5:ad:f6:ab:
         60:15:6e:68:01:50:e8:af:93:93:70:08:b8:7c:d2:61:10:08:
         78:4e:7e:88:1d:5c:15:7f:f7:6e:ce:c6:3d:2e:e7:b7:65:56:
         48:9e:8f:77:e6:f9:9f:31:4b:47:49:e6:93:27:50:38:54:5a:
         da:b0:b4:20:83:8a:2e:9a:21:b3:4a:c4:52:54:51:4b:1d:f1:
         1d:5a:98:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo5YmB+tkrit/Bpcft/oaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmOTRiY2NiZDRjMmUwZmY4ZjdhYWIwNDVlMTRhMzExZjNi
MmY5ZmUwHhcNMjYwNTEzMDAwMTM3WhcNMjYwNTE0MDAwMTM3WjAzMTEwLwYDVQQD
EygxZWZlNjA0ZTEzYzBmYzI4YTVhN2FiMTcwMzdiMmZkOTNkYzhjZDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRXGgxmGiwd+iK52x0CxifWnCPYk
YSWEqDkW1dP0luhjx+ETBnDD+BXppkNtzv6EkcXcrirprkFcY/RjKTOPBnaR3JOV
CNwzbIrhCO7IJrbZOKJ9e4C5iFFUEo192xd0PmbcD5HcMZPK77fO00W3Zk1jNYJV
qPLmurCJQqsxuX0b9LjOg4n2S1csTzX8xQITydr1aMi5Eqahs7/hRAYhhso7ihKp
Y0BD7Kf2UVfKV9vYo7W0dMTYvBRg6Sr9OysccI4oF0uLmSqrOniz+Jl7tyLHY11d
OPsKPHVut307OQMkC6W5pumgoVidGEBUZCvm1L1wPLXuQX3Dzbxk0Sd9LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7+YE4TwPwopaerFwN7L9k9yM0mMB8GA1UdIwQY
MBaAFO+UvMvUwuD/j3qrBF4UoxHzsvn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZWMyNTMtOWMyOS00NzhjLTk3MTEt
Y2I2M2Q2ZmJiZmM3LzEvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iZWMyNTMtOWMyOS00NzhjLTk3MTEtY2I2M2Q2ZmJiZmM3
LzEvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjK+ARFK
op4Boziq2E0sjb/SGHMObZeGEbsDYvFod1rZiCdMq3praOAmgu9DKCLi6jsd9vng
gHwImXwGsUWMGbbWTcb9vqSb+LO5sorcZuubGMMELvJIWlKsc+Ly3Xy4KEYKBB8q
jWL162ZX8vlVrQiZhhtI5FUihP+jmDQhLzApybqcJk1seV+q/zqJKc/azn337AIx
eIQ7sGhnKAAq2hh1R4JjqZWUSwbdw3mfPXnlrfarYBVuaAFQ6K+Tk3AIuHzSYRAI
eE5+iB1cFX/3bs7GPS7nt2VWSJ6Pd+b5nzFLR0nmkydQOFRa2rC0IIOKLpohs0rE
UlRRSx3xHVqYkA==
-----END CERTIFICATE-----
Generated at Wed May 13 04:28:14 2026 by rpki-client