Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft
File:                     s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft (raw, json)
Hash identifier:          mVo/MH9xRVg1qneQ4ywdlxdSCN4akscam40wNHRkwr8=
Subject key identifier:   16:02:6F:57:0E:51:B8:D1:A5:CF:FC:4F:22:EE:4C:11:F6:EC:12:0B
Authority key identifier: B3:B7:7E:52:CC:77:7A:1E:AF:E6:9A:51:7F:95:D2:C2:19:C1:90:80
Certificate issuer:       /CN=b3b77e52cc777a1eafe69a517f95d2c219c19080
Certificate serial:       019E1EA2BC1E6329E7B33EEF62FD5FA79569
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft
Manifest number:          0A75
Signing time:             Wed 13 May 2026 00:00:41 +0000
Manifest this update:     Wed 13 May 2026 00:00:41 +0000
Manifest next update:     Thu 14 May 2026 00:00:41 +0000
Files and hashes:         1: hfejHEq9BfnHeerfr4ZvzfyMdD8.roa (hash: YVFjuu53xMs5opB7mdVNS/KtKWd8kSn9JmJ6kqdpWl0=)
                          2: s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl (hash: 5C8V71nibqLLTRooGzAuRJ86vO6xuzbXkRXrPg58b20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:bc:1e:63:29:e7:b3:3e:ef:62:fd:5f:a7:95:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b77e52cc777a1eafe69a517f95d2c219c19080
        Validity
            Not Before: May 13 00:00:41 2026 GMT
            Not After : May 14 00:00:41 2026 GMT
        Subject: CN=16026f570e51b8d1a5cffc4f22ee4c11f6ec120b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:99:e1:df:d2:82:12:58:52:6a:a0:01:2a:22:
                    cf:b0:c8:39:75:25:8b:95:a5:99:57:80:fd:0d:df:
                    6c:40:4d:8c:4c:f7:cd:ad:5e:6a:f5:63:f7:c7:7e:
                    37:09:f7:ac:7d:7c:f4:6d:1b:79:fe:44:92:77:71:
                    99:62:39:71:a1:b9:b1:92:a0:80:19:33:bd:c1:cb:
                    69:7f:17:4e:8a:4e:7a:aa:cc:e3:e4:41:84:5d:f0:
                    76:8e:83:a6:2e:4b:4e:20:58:a5:6c:c4:08:45:d8:
                    b3:07:cb:f3:c8:ad:7c:1a:83:1f:12:2d:fb:45:90:
                    0c:e8:a9:c6:8e:f8:31:c5:34:86:15:46:8c:e7:7c:
                    e7:a7:18:36:4c:96:68:4d:a3:63:1d:1a:a6:b6:f9:
                    8f:1e:4c:5d:24:89:38:0f:99:eb:c6:f3:dc:a2:3c:
                    ec:29:e6:aa:e6:be:53:70:d5:11:86:43:a8:a6:af:
                    06:4c:46:c4:8f:fe:0a:3c:56:9e:59:29:9c:f4:96:
                    61:7b:7f:a3:57:51:be:b1:be:c8:35:ab:35:a9:9d:
                    48:a5:13:85:08:0c:f9:48:36:c0:cb:08:c1:08:eb:
                    14:d7:03:18:8b:aa:cd:2f:eb:10:05:dd:34:46:54:
                    38:ed:9b:d5:30:70:79:a2:4c:11:9c:ad:a8:e1:13:
                    4b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:02:6F:57:0E:51:B8:D1:A5:CF:FC:4F:22:EE:4C:11:F6:EC:12:0B
            X509v3 Authority Key Identifier:
                keyid:B3:B7:7E:52:CC:77:7A:1E:AF:E6:9A:51:7F:95:D2:C2:19:C1:90:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:37:4f:01:0c:87:d3:51:70:7d:5f:24:bb:f3:b6:3d:cc:22:
         21:c1:2b:5d:0f:cb:54:65:ec:25:50:bd:da:3e:54:89:68:fa:
         e5:88:39:7a:82:ec:22:e5:df:d6:38:db:f4:92:8d:44:4a:34:
         3c:02:74:99:80:2c:38:86:eb:22:57:2f:0a:65:89:d0:92:7f:
         a6:41:09:aa:6a:76:6c:46:9e:8d:df:01:ba:65:86:d2:4d:cc:
         6a:5c:f3:64:76:be:02:29:0b:ba:0d:9a:bc:46:0a:03:ec:e9:
         de:b6:ea:7e:ae:b5:f8:3b:df:91:c8:72:e1:f2:08:c8:1b:e1:
         9a:a7:03:3b:b8:39:af:2a:00:62:41:3c:a4:5b:91:be:b6:3c:
         68:0e:09:2b:1c:a9:5c:a8:ab:94:13:7f:01:e0:2f:8c:13:3d:
         15:0b:71:3b:9a:77:47:85:76:b6:20:09:f1:57:4d:ca:fb:c7:
         18:3f:7c:09:48:6d:f3:53:e6:90:cd:0b:85:9b:c2:fe:3c:d0:
         65:40:2c:99:5e:a4:54:9f:b9:1d:d8:f8:ac:01:ce:44:7b:13:
         a1:01:bb:40:9b:69:8e:32:a2:f5:1e:4b:8a:d4:e3:a2:24:3f:
         0d:5f:5a:fe:b5:2b:82:aa:84:f1:09:32:2c:e6:84:d2:94:fe:
         a2:1c:a2:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eorweYynnsz7vYv1fp5VpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjc3ZTUyY2M3NzdhMWVhZmU2OWE1MTdmOTVkMmMyMTlj
MTkwODAwHhcNMjYwNTEzMDAwMDQxWhcNMjYwNTE0MDAwMDQxWjAzMTEwLwYDVQQD
EygxNjAyNmY1NzBlNTFiOGQxYTVjZmZjNGYyMmVlNGMxMWY2ZWMxMjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpnh39KCElhSaqABKiLPsMg5dSWL
laWZV4D9Dd9sQE2MTPfNrV5q9WP3x343CfesfXz0bRt5/kSSd3GZYjlxobmxkqCA
GTO9wctpfxdOik56qszj5EGEXfB2joOmLktOIFilbMQIRdizB8vzyK18GoMfEi37
RZAM6KnGjvgxxTSGFUaM53znpxg2TJZoTaNjHRqmtvmPHkxdJIk4D5nrxvPcojzs
Keaq5r5TcNURhkOopq8GTEbEj/4KPFaeWSmc9JZhe3+jV1G+sb7INas1qZ1IpROF
CAz5SDbAywjBCOsU1wMYi6rNL+sQBd00RlQ47ZvVMHB5okwRnK2o4RNLWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYCb1cOUbjRpc/8TyLuTBH27BILMB8GA1UdIwQY
MBaAFLO3flLMd3oer+aaUX+V0sIZwZCAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdkLVVzeDNlaDZ2NXBwUmY1WFN3aG5Ca0lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83NzI0NDAtODc2Yy00MmQwLTgwZjUt
YjRhZWU4YzVkNDhlLzEvczdkLVVzeDNlaDZ2NXBwUmY1WFN3aG5Ca0lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My83NzI0NDAtODc2Yy00MmQwLTgwZjUtYjRhZWU4YzVkNDhl
LzEvczdkLVVzeDNlaDZ2NXBwUmY1WFN3aG5Ca0lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDdPAQyH
01FwfV8ku/O2PcwiIcErXQ/LVGXsJVC92j5UiWj65Yg5eoLsIuXf1jjb9JKNREo0
PAJ0mYAsOIbrIlcvCmWJ0JJ/pkEJqmp2bEaejd8BumWG0k3MalzzZHa+AikLug2a
vEYKA+zp3rbqfq61+Dvfkchy4fIIyBvhmqcDO7g5ryoAYkE8pFuRvrY8aA4JKxyp
XKirlBN/AeAvjBM9FQtxO5p3R4V2tiAJ8VdNyvvHGD98CUht81PmkM0LhZvC/jzQ
ZUAsmV6kVJ+5Hdj4rAHORHsToQG7QJtpjjKi9R5LitTjoiQ/DV9a/rUrgqqE8Qky
LOaE0pT+ohyiQQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:39:28 2026 by rpki-client