Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
File:                     7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft (raw, json)
Hash identifier:          xEHF8e3UIBvARz0f68QXKlL2dQB35khxxDymT0nE6rE=
Subject key identifier:   3D:82:BD:33:31:C9:B0:AF:BD:9C:7B:B8:AF:7E:7D:24:CB:CD:68:AB
Authority key identifier: EC:E1:50:63:CB:0B:3E:78:88:8C:B4:D0:F2:2A:04:A1:93:DD:67:06
Certificate issuer:       /CN=ece15063cb0b3e78888cb4d0f22a04a193dd6706
Certificate serial:       019E1EA3C82793416EA2016D826700CB75BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
Manifest number:          011E
Signing time:             Wed 13 May 2026 00:01:50 +0000
Manifest this update:     Wed 13 May 2026 00:01:50 +0000
Manifest next update:     Thu 14 May 2026 00:01:50 +0000
Files and hashes:         1: 2gPdkQWW9jUCbizX1SsNX62y_98.roa (hash: VSRNfwKyTAYD9LB8Wv+fsBtowZBw7KWBvIp7E5dQ+Cg=)
                          2: 7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl (hash: fPHbtsbrMxk/lTsmCRtuDt7I6j/59cuXKxBTPv4ddE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:c8:27:93:41:6e:a2:01:6d:82:67:00:cb:75:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ece15063cb0b3e78888cb4d0f22a04a193dd6706
        Validity
            Not Before: May 13 00:01:50 2026 GMT
            Not After : May 14 00:01:50 2026 GMT
        Subject: CN=3d82bd3331c9b0afbd9c7bb8af7e7d24cbcd68ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f2:1b:c7:37:fe:52:3b:3e:ba:02:61:21:99:
                    4b:c0:ac:ab:6d:2c:0b:a6:fd:7c:90:b4:6a:41:f1:
                    32:a6:78:ec:82:d4:85:5f:d0:99:3e:50:52:54:ef:
                    2b:dd:a5:71:a9:0f:9c:1c:00:5e:79:91:bf:a4:45:
                    3d:f6:9f:7e:ef:30:95:ef:85:f0:bd:e6:45:1a:8e:
                    6b:7a:28:43:d0:74:29:fc:89:40:a2:a4:16:d6:ca:
                    7f:50:dc:8d:d4:0c:4d:cb:b5:ba:19:cd:10:f6:2e:
                    a1:5a:74:5f:0a:99:9c:3b:90:50:11:b2:8e:09:35:
                    30:6f:5d:e0:80:e9:ab:d0:c4:ad:5b:d2:31:d0:8a:
                    db:12:ae:e9:4c:33:78:fa:84:2a:ff:f3:b4:73:3e:
                    bc:82:f5:3c:0f:f9:1c:f4:5f:98:cc:b3:37:13:40:
                    a8:90:e3:5e:e3:1d:28:b6:55:02:3e:07:8e:68:10:
                    a9:f8:fb:4e:14:95:e1:b3:5e:50:21:ea:27:c0:e2:
                    f1:76:1a:74:c2:0c:38:ae:17:59:77:1d:b2:e9:f3:
                    0f:b3:b1:d0:a1:49:5a:51:13:2b:a9:b6:d7:01:c1:
                    cc:77:ec:9d:6a:e7:1e:42:88:76:e2:ce:a7:85:91:
                    bf:15:92:c9:3c:ec:6f:ee:90:8c:27:f3:2d:55:22:
                    b2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:82:BD:33:31:C9:B0:AF:BD:9C:7B:B8:AF:7E:7D:24:CB:CD:68:AB
            X509v3 Authority Key Identifier:
                keyid:EC:E1:50:63:CB:0B:3E:78:88:8C:B4:D0:F2:2A:04:A1:93:DD:67:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:21:35:ae:cc:a0:d9:66:dd:c0:d6:59:17:33:20:49:c4:8d:
         14:a9:ce:42:d9:a4:53:b0:a0:ff:92:47:a0:bf:08:dc:95:00:
         8a:72:70:a9:0c:93:b0:9f:03:c0:2d:24:fb:b7:9d:e0:55:07:
         87:ed:5f:b1:d4:6e:24:a2:4f:b3:1e:8d:f6:ba:0c:ec:62:69:
         b0:c4:08:de:92:f2:0f:85:ba:e6:a4:46:57:10:65:bd:c7:73:
         dd:5b:7f:b1:c7:04:d7:7e:c0:96:6f:f8:d5:63:c0:df:36:1c:
         bf:a7:cb:12:e9:15:30:25:25:5b:48:56:aa:f1:8c:62:a2:4c:
         62:ab:09:98:e2:f8:df:cc:1f:40:ec:af:e1:a3:3d:ec:12:06:
         cc:70:64:28:a4:18:70:5d:0d:91:0c:90:71:4f:1a:49:ac:7c:
         8a:54:44:ae:5d:46:15:2a:70:38:23:fe:d5:28:86:6a:a0:bd:
         d6:b7:98:e2:99:df:19:e9:eb:68:8c:3f:4e:2f:f3:96:df:96:
         89:c8:e7:c4:77:38:09:cc:8b:00:ce:fa:51:81:2d:39:61:50:
         59:2a:ef:65:a2:de:c7:9f:ca:1c:2b:15:6e:dc:86:ef:10:1f:
         70:65:81:a2:7c:c1:cc:a4:d1:82:74:db:15:cd:34:58:f4:13:
         09:4c:c5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:14:29 2026 by rpki-client