Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
File:                     793Ia4IAX_jHwmSi4GcDemCLSB8.mft (raw, json)
Hash identifier:          N+oVxzDJWBJ2IHDnJF0/jjtrc30EL40cVsUdQgZjiTI=
Subject key identifier:   75:2B:11:F9:19:A2:57:FF:E9:AE:A9:3B:98:02:32:A1:36:4A:6A:49
Authority key identifier: EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
Certificate issuer:       /CN=efddc86b82005ff8c7c264a2e067037a608b481f
Certificate serial:       019E1C47874702049A6AEC3D0FA25C0A7F56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
Manifest number:          1901
Signing time:             Tue 12 May 2026 13:01:50 +0000
Manifest this update:     Tue 12 May 2026 13:01:50 +0000
Manifest next update:     Wed 13 May 2026 13:01:50 +0000
Files and hashes:         1: 793Ia4IAX_jHwmSi4GcDemCLSB8.crl (hash: f79bLvvQKTvLF9l0X7WrgFpnQGml7F/Ra1EEEcBhEzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:47:87:47:02:04:9a:6a:ec:3d:0f:a2:5c:0a:7f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efddc86b82005ff8c7c264a2e067037a608b481f
        Validity
            Not Before: May 12 13:01:50 2026 GMT
            Not After : May 13 13:01:50 2026 GMT
        Subject: CN=752b11f919a257ffe9aea93b980232a1364a6a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:aa:6b:b8:44:09:22:6c:39:1b:3b:8f:4a:b0:
                    26:de:26:22:98:93:52:a8:97:ec:e6:df:c1:10:f3:
                    bf:f2:59:9c:f2:cb:88:1a:17:a6:c3:71:cf:f2:35:
                    d7:32:f0:21:bd:59:57:7d:ac:4f:66:15:df:3b:e7:
                    a2:60:3c:2b:c5:0c:a1:e7:75:65:69:be:36:b8:ad:
                    fb:a4:2e:43:7c:2c:71:1a:cf:94:3b:9d:a9:94:53:
                    14:72:4c:c2:14:40:f7:94:56:d8:83:24:68:7c:6e:
                    a1:f7:68:54:29:9a:e7:35:f1:8c:8a:94:8e:2b:57:
                    37:64:0e:82:e6:7f:10:0b:46:c2:50:30:62:32:39:
                    24:75:77:f4:fb:1d:92:fc:58:0c:40:3e:cd:ba:85:
                    5e:76:dc:fa:fa:88:12:f0:25:1d:09:05:73:2a:44:
                    e4:12:9e:d0:c2:1d:4b:24:f3:08:1c:2f:10:25:87:
                    f4:ec:d6:8f:fa:b0:a2:03:9d:0c:af:74:7e:34:db:
                    cc:5d:6b:35:d9:81:c8:86:ac:94:01:a2:ec:57:88:
                    f6:3c:98:9d:93:c2:84:8e:8b:3e:ff:89:46:8c:d1:
                    ec:2e:46:c1:fa:6c:76:3e:f9:96:5d:80:31:24:e0:
                    e7:9b:38:f3:35:a5:e2:66:87:2a:b6:51:6e:6d:bc:
                    00:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2B:11:F9:19:A2:57:FF:E9:AE:A9:3B:98:02:32:A1:36:4A:6A:49
            X509v3 Authority Key Identifier:
                keyid:EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:7e:68:d4:85:3a:4c:39:51:3a:ae:98:47:9c:8e:78:bd:e1:
         61:18:cf:49:5f:92:de:1e:f5:c8:d4:22:e7:85:14:af:b3:f8:
         55:52:04:66:1f:47:7a:d6:86:30:90:de:66:a8:7a:c1:4c:41:
         e3:c6:75:94:45:02:ed:56:6b:ff:98:4f:e4:a0:66:dc:84:cd:
         69:54:a7:c4:73:54:fc:b6:ba:3a:5f:ff:c5:b8:b9:86:2d:ad:
         88:0d:ae:e7:3d:61:aa:5d:b8:7d:93:9f:65:b0:39:9c:2d:71:
         5a:0d:15:1a:98:e9:e4:6c:4a:e7:e6:1d:6f:69:44:a0:4d:67:
         2d:f4:1f:ee:c6:3e:f7:27:85:8e:d1:a9:3a:d5:76:34:01:a0:
         c0:c8:3a:f1:b0:dc:1e:e2:77:6f:63:5e:96:08:b4:af:1d:e6:
         ec:73:0a:87:cf:ce:f8:86:a4:21:75:92:30:91:93:01:eb:4d:
         6f:dc:76:a4:22:95:a3:61:68:32:b0:d6:04:11:3c:73:07:db:
         34:6b:9f:5b:59:5d:96:dd:0b:88:f1:4f:64:9c:d7:08:27:8f:
         63:c0:f2:78:f3:c4:e4:4d:2e:eb:05:f5:fc:ad:ea:80:5a:98:
         8b:05:e4:c5:41:02:57:ae:73:ef:0d:05:4c:5a:6d:47:d0:6f:
         04:e2:2b:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cR4dHAgSaauw9D6JcCn9WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZGRjODZiODIwMDVmZjhjN2MyNjRhMmUwNjcwMzdhNjA4
YjQ4MWYwHhcNMjYwNTEyMTMwMTUwWhcNMjYwNTEzMTMwMTUwWjAzMTEwLwYDVQQD
Eyg3NTJiMTFmOTE5YTI1N2ZmZTlhZWE5M2I5ODAyMzJhMTM2NGE2YTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6pruEQJImw5GzuPSrAm3iYimJNS
qJfs5t/BEPO/8lmc8suIGhemw3HP8jXXMvAhvVlXfaxPZhXfO+eiYDwrxQyh53Vl
ab42uK37pC5DfCxxGs+UO52plFMUckzCFED3lFbYgyRofG6h92hUKZrnNfGMipSO
K1c3ZA6C5n8QC0bCUDBiMjkkdXf0+x2S/FgMQD7NuoVedtz6+ogS8CUdCQVzKkTk
Ep7Qwh1LJPMIHC8QJYf07NaP+rCiA50Mr3R+NNvMXWs12YHIhqyUAaLsV4j2PJid
k8KEjos+/4lGjNHsLkbB+mx2PvmWXYAxJODnmzjzNaXiZocqtlFubbwAFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUrEfkZolf/6a6pO5gCMqE2SmpJMB8GA1UdIwQY
MBaAFO/dyGuCAF/4x8JkouBnA3pgi0gfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzkzSWE0SUFYX2pId21TaTRHY0RlbUNMU0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS83ODk4NTEtNTdjMi00YTU4LWEwNmMt
M2ViMTQ4OGNlOGUxLzEvNzkzSWE0SUFYX2pId21TaTRHY0RlbUNMU0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS83ODk4NTEtNTdjMi00YTU4LWEwNmMtM2ViMTQ4OGNlOGUx
LzEvNzkzSWE0SUFYX2pId21TaTRHY0RlbUNMU0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGX5o1IU6
TDlROq6YR5yOeL3hYRjPSV+S3h71yNQi54UUr7P4VVIEZh9HetaGMJDeZqh6wUxB
48Z1lEUC7VZr/5hP5KBm3ITNaVSnxHNU/La6Ol//xbi5hi2tiA2u5z1hql24fZOf
ZbA5nC1xWg0VGpjp5GxK5+Ydb2lEoE1nLfQf7sY+9yeFjtGpOtV2NAGgwMg68bDc
HuJ3b2Nelgi0rx3m7HMKh8/O+IakIXWSMJGTAetNb9x2pCKVo2FoMrDWBBE8cwfb
NGufW1ldlt0LiPFPZJzXCCePY8DyePPE5E0u6wX1/K3qgFqYiwXkxUECV65z7w0F
TFptR9BvBOIrSQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:44:09 2026 by rpki-client