Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
File:                     7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft (raw, json)
Hash identifier:          5OBssh7GPFTUpixZ+yu01ilvmP/BDyy7gpm55VWKBVE=
Subject key identifier:   64:08:E7:37:8F:CF:BE:EB:09:E5:D8:C5:37:52:8D:11:FB:FC:B2:E4
Authority key identifier: ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
Certificate issuer:       /CN=edff0ab25662757afb831675319296f63d989b69
Certificate serial:       019E1D59267A793BF52D62764FE069AC1195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 18:00:42 +0000
Manifest this update:     Tue 12 May 2026 18:00:42 +0000
Manifest next update:     Wed 13 May 2026 18:00:42 +0000
Files and hashes:         1: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl (hash: pt7cIDyOONcMU2KaeidDWA3qeQ8DdcYHVdUbzg14EqM=)
                          2: SO4ODwKZaMZRbg45FP2nZyJ5JQk.roa (hash: qBOkD1BZLnNRkElqmAEiwmS3WVpC4bigU1naLXiimqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:26:7a:79:3b:f5:2d:62:76:4f:e0:69:ac:11:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff0ab25662757afb831675319296f63d989b69
        Validity
            Not Before: May 12 18:00:42 2026 GMT
            Not After : May 13 18:00:42 2026 GMT
        Subject: CN=6408e7378fcfbeeb09e5d8c537528d11fbfcb2e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0f:fc:23:15:c8:aa:cb:32:8e:b9:b4:5a:21:
                    4a:11:91:66:80:2f:b1:7a:a8:56:0f:65:4f:41:8d:
                    ef:c5:cd:b9:ed:d3:33:24:07:8a:77:e3:82:42:1b:
                    0a:d9:00:4c:16:80:0c:de:6b:a9:95:e7:aa:ca:17:
                    3e:1a:e1:89:2b:cc:f0:de:ae:0d:a3:d2:5f:b5:e2:
                    9a:35:6c:41:7a:6d:b2:53:00:4c:14:8d:99:e9:96:
                    a3:5e:31:d4:69:6c:4e:3d:a0:c4:83:7a:3d:46:cc:
                    1c:37:49:86:e9:e5:ae:83:a6:b6:ae:e2:6b:e3:eb:
                    e8:0f:06:44:d5:a7:cb:f2:ba:51:5a:e6:f5:10:98:
                    88:22:04:d6:b5:b3:99:83:9f:42:67:37:7c:cd:28:
                    07:5e:6c:e2:f9:42:34:8b:84:62:e6:20:41:19:96:
                    8d:38:ff:73:4f:1f:71:f9:55:d9:fe:d1:6d:40:19:
                    82:23:e9:e0:2f:c2:fc:ad:d6:ff:03:7b:c6:65:29:
                    f5:6c:b5:1b:3d:27:b1:26:b6:90:cb:b3:2e:a9:83:
                    33:0e:e5:76:65:d4:7c:11:41:e6:99:a8:68:38:ac:
                    44:b6:53:98:47:52:11:d2:1e:db:c1:5b:82:47:ad:
                    6b:2d:ea:e7:ec:51:14:2c:2e:e9:05:b4:28:9f:bb:
                    e6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:08:E7:37:8F:CF:BE:EB:09:E5:D8:C5:37:52:8D:11:FB:FC:B2:E4
            X509v3 Authority Key Identifier:
                keyid:ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:2c:6a:9c:7c:b1:b9:bc:08:0a:fd:8c:fd:34:01:32:b0:24:
         3c:0b:f3:d2:af:2b:b6:89:a8:c0:b2:53:6f:3a:a9:ec:d0:08:
         ff:51:c3:bd:8b:09:3d:a9:13:8a:9f:95:6c:f7:93:44:c1:f9:
         f2:7d:21:16:05:11:92:05:cd:ff:87:1c:7e:29:5e:43:3f:cb:
         6c:d0:c3:9f:5a:f1:da:52:ce:99:28:56:99:23:47:90:17:dd:
         c4:a0:03:3b:c7:14:e2:6a:d7:4a:c7:3b:d5:dd:f8:b9:e7:93:
         00:6c:5c:2e:fb:d7:b4:41:d0:b4:5b:d2:d6:b6:8b:00:50:80:
         a0:f6:cb:79:3a:cf:3d:9f:83:91:b9:3b:ed:58:f3:a3:4a:ed:
         34:d1:89:ae:86:98:1f:de:eb:75:15:00:3c:4e:94:db:47:5f:
         70:c3:e0:7d:7b:58:46:20:28:e4:62:17:ca:ce:5c:03:28:33:
         b7:6d:82:5a:fb:87:67:c1:24:86:d9:56:f9:19:88:41:02:dc:
         25:ec:3c:4b:dc:c2:cd:5d:75:e3:90:23:d0:7f:63:60:a1:27:
         dd:74:2b:ce:e2:46:1e:dd:79:17:8c:38:d6:9e:63:6f:ce:ef:
         61:1f:51:1a:eb:87:b3:b6:58:d6:53:4c:1a:f4:2d:07:44:02:
         01:46:c4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:18:15 2026 by rpki-client