Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
File:                     7HfzJj_jSKssjTaEdda8BHpql2o.mft (raw, json)
Hash identifier:          cIuUu1nIZ0UEzish+trnacXms8pQoVtyK5zRUgt4+rc=
Subject key identifier:   07:53:74:A9:4D:9A:66:5F:D1:83:1E:78:8D:30:E8:97:28:41:2B:D0
Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
Certificate issuer:       /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Certificate serial:       019E1C466CD3CD1A8F3BCDDD3A27A30F39AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
Manifest number:          0799
Signing time:             Tue 12 May 2026 13:00:37 +0000
Manifest this update:     Tue 12 May 2026 13:00:37 +0000
Manifest next update:     Wed 13 May 2026 13:00:37 +0000
Files and hashes:         1: 7HfzJj_jSKssjTaEdda8BHpql2o.crl (hash: DnxDwBul1LH8o3sTnzc/WeVZ9NnLBQZL+5tP94lpqY8=)
                          2: Ane3kVXJDwOnCcrwevPbQSwdhlM.roa (hash: GcB+WQ8GGExoABfliUP8dcPeehhXNomt7lmTMnKvHmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:6c:d3:cd:1a:8f:3b:cd:dd:3a:27:a3:0f:39:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
        Validity
            Not Before: May 12 13:00:37 2026 GMT
            Not After : May 13 13:00:37 2026 GMT
        Subject: CN=075374a94d9a665fd1831e788d30e89728412bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:42:53:89:60:3f:e4:19:e2:82:93:e9:d3:56:
                    79:74:1f:16:a7:5b:e5:bc:77:e2:fa:79:2b:04:56:
                    cc:79:e3:02:52:55:5b:03:a3:f9:71:2e:c6:44:37:
                    f2:3d:f4:10:7f:46:70:11:60:0c:fb:8a:f4:fb:7a:
                    9f:4c:f9:5e:18:30:38:90:81:36:ec:6f:69:ff:1d:
                    70:df:08:0e:66:42:97:19:df:6e:f4:4a:95:64:a9:
                    1c:f3:2d:5b:9b:2a:71:e3:3d:c1:a5:02:d9:d2:76:
                    a6:1e:35:1f:dd:9c:2b:8b:6a:e1:70:e9:5d:62:33:
                    78:71:e5:18:a8:e2:13:33:72:be:61:e2:0d:0e:61:
                    d0:03:ef:30:4a:fa:47:59:3e:2e:f1:3f:26:b8:87:
                    78:0f:56:1a:7f:f6:48:b1:8f:ea:cf:23:b4:02:a0:
                    6c:ba:75:a3:ef:7c:9a:ca:67:dc:e8:6a:c2:34:8a:
                    0d:a0:90:6e:62:18:c5:a1:6e:49:52:6b:5d:0f:c1:
                    0c:cd:cf:52:b6:05:09:8b:c7:b7:c4:51:f4:1e:d6:
                    31:61:3c:52:c0:15:f3:fc:f1:33:66:c4:a6:db:cd:
                    29:ba:fa:6a:a4:b1:64:4f:0a:8e:85:03:2a:c7:52:
                    71:1a:c5:45:b9:25:b1:16:e3:aa:c9:54:af:1c:4b:
                    09:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:53:74:A9:4D:9A:66:5F:D1:83:1E:78:8D:30:E8:97:28:41:2B:D0
            X509v3 Authority Key Identifier:
                keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c6:2c:a9:f6:df:6a:94:74:29:d3:14:6b:30:7e:d6:08:93:
         b2:1e:21:67:86:bb:73:a2:57:9b:58:5d:40:79:2e:1c:6e:ee:
         5c:b9:27:5c:dd:06:15:66:76:4c:e0:ad:37:cc:84:45:98:9f:
         09:82:2b:10:85:c0:82:3e:0c:7e:4b:94:bf:69:8f:4e:33:1b:
         35:1e:71:fe:e1:5d:98:36:6b:d3:c5:b0:97:0a:1c:aa:88:b3:
         2d:56:13:8e:3b:c3:3c:50:f8:4c:eb:39:0c:6e:43:dd:ac:99:
         65:0f:4e:74:f1:2d:79:33:13:f5:7c:70:a4:23:d0:45:70:2e:
         0d:38:8b:88:9d:d6:7b:67:50:41:fe:4b:f6:df:cb:6c:6b:f0:
         9f:00:a1:5a:3a:e6:c4:24:3b:86:37:40:c5:fd:51:89:43:9a:
         87:f9:ab:83:f1:40:b2:f7:92:db:bd:6a:61:75:51:e5:6b:89:
         01:3e:9f:a5:75:9e:8a:20:db:87:e8:33:77:e4:72:a8:5e:db:
         67:4c:26:33:6c:9b:90:6a:82:23:a6:03:86:a8:21:4e:5d:56:
         d9:88:ac:74:02:72:09:9e:29:25:fb:4f:f7:0d:40:20:d1:db:
         36:97:4e:1c:f2:f7:87:02:ba:f0:8e:00:84:73:ac:64:d1:fd:
         63:a0:ca:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:38 2026 by rpki-client