Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
File:                     mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft (raw, json)
Hash identifier:          8t/nBKmqWv0gOEMlxlJWEvorOOqKhVt1zov5W0CL3SA=
Subject key identifier:   4A:DC:A1:13:98:E3:67:0A:49:12:AC:18:CD:46:F8:13:F1:58:AA:F5
Authority key identifier: 98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC
Certificate issuer:       /CN=98466aec752928b6d4865b99e8608c4aec4b78ac
Certificate serial:       019E1C7DC2247D3E501083F38D838006AB5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
Manifest number:          02E7
Signing time:             Tue 12 May 2026 14:01:03 +0000
Manifest this update:     Tue 12 May 2026 14:01:03 +0000
Manifest next update:     Wed 13 May 2026 14:01:03 +0000
Files and hashes:         1: mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl (hash: O5zRC/XeiAHPpSL9t8u4vhINx9kQYxdyMc4LjxFKR8I=)
                          2: nXPV6vL9Myf87iwdt8oMBUpIgzI.asa (hash: jq25H7X+5Q2wBhKdDZk+7MpbH+S6ejGtNRjeRxPO9HA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:c2:24:7d:3e:50:10:83:f3:8d:83:80:06:ab:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98466aec752928b6d4865b99e8608c4aec4b78ac
        Validity
            Not Before: May 12 14:01:03 2026 GMT
            Not After : May 13 14:01:03 2026 GMT
        Subject: CN=4adca11398e3670a4912ac18cd46f813f158aaf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:78:06:3d:5c:b0:a5:d3:a2:e0:03:b7:77:39:
                    74:03:6a:f7:af:41:11:84:50:95:f0:12:b9:3e:62:
                    e4:63:80:d4:a1:64:45:b0:86:75:ab:51:a1:58:2f:
                    cb:76:2a:8a:f6:27:c0:7c:5e:37:b2:26:e0:15:74:
                    63:b2:3c:9c:2d:51:1c:5b:f7:00:f3:dd:63:2d:75:
                    1a:ae:07:7c:7e:e2:8a:f2:e3:1a:2a:a2:3b:84:0f:
                    91:36:a4:87:98:86:bd:e8:83:4a:26:86:8c:ab:f9:
                    96:de:b0:08:5e:b3:fd:b5:be:ca:fd:55:5c:3f:e3:
                    4a:54:10:62:21:3d:eb:52:52:44:cd:62:c7:b5:09:
                    85:99:e4:18:03:39:22:f5:e7:4c:c7:81:cb:92:92:
                    c4:d1:80:6c:01:87:da:48:92:c4:0b:a1:bb:3c:36:
                    bf:9b:13:91:db:55:3d:4a:07:f9:84:c0:78:bc:41:
                    3f:97:2c:62:c7:bf:a2:d8:97:6c:d2:a4:73:b1:79:
                    f1:28:39:f9:fd:2b:d4:1f:1f:2f:76:b1:54:6d:ba:
                    9c:b2:1e:55:cd:94:38:37:97:cb:e7:aa:5c:50:c2:
                    eb:de:b6:4b:f9:c3:f0:79:71:fb:82:06:41:4e:ec:
                    ad:c8:6a:e1:62:63:97:1c:a1:e5:15:9b:8a:8e:3c:
                    b1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DC:A1:13:98:E3:67:0A:49:12:AC:18:CD:46:F8:13:F1:58:AA:F5
            X509v3 Authority Key Identifier:
                keyid:98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:de:3d:5e:08:06:1e:ba:aa:7c:77:6f:d1:c4:50:17:65:4e:
         48:64:ca:b2:28:7f:59:eb:e1:20:04:43:65:7e:7e:e9:cd:cc:
         60:1b:26:94:41:34:b7:df:71:9b:6b:50:83:45:0f:4b:ed:e3:
         23:86:f0:39:e9:cd:e0:09:6d:2d:fe:1a:06:5f:a7:6c:e5:75:
         d3:2f:e8:5e:11:9f:d9:48:74:d1:29:c3:9c:ff:b9:5b:77:8b:
         b0:1c:de:10:db:a6:0e:7f:10:94:05:b8:d2:57:81:e6:45:31:
         83:3b:32:6c:b7:cb:b6:1c:b3:83:82:46:1d:9a:4a:37:68:89:
         59:76:d6:08:95:e1:0b:e0:2f:ba:3e:69:d3:2d:ed:8b:d5:79:
         1a:44:64:93:24:d5:18:01:94:bf:ac:8b:b7:be:07:5e:9d:4a:
         b9:cb:6d:8c:90:91:0e:7a:87:74:79:57:e9:85:32:84:ef:5f:
         5c:f0:6d:d0:49:a2:3d:43:66:7c:8f:a1:fc:db:f0:89:9e:00:
         cf:02:1f:42:61:8c:36:00:2a:2b:69:71:61:49:7f:84:8b:ff:
         ec:b8:f5:0a:8f:ca:a7:da:4b:dd:cc:f0:bf:dc:ee:c2:2d:24:
         1c:83:84:11:e7:3b:0e:06:f4:01:43:5d:9e:47:d2:f7:99:34:
         02:59:40:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:23:45 2026 by rpki-client