Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.mft
File:                     enzxoqqDsSb_TO70c6Rzl6v4_w0.mft (raw, json)
Hash identifier:          SGsY48bKlYf1FBbEQ+UER1aZaokwJnvPp1Z+mPH7rhI=
Subject key identifier:   BD:1E:B2:C1:F3:9F:2B:0F:DB:93:44:0E:63:AB:00:C7:86:19:F1:57
Authority key identifier: 7A:7C:F1:A2:AA:83:B1:26:FF:4C:EE:F4:73:A4:73:97:AB:F8:FF:0D
Certificate issuer:       /CN=7a7cf1a2aa83b126ff4ceef473a47397abf8ff0d
Certificate serial:       019E1F47B060E84FC2458A0C818DDC9A910B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/enzxoqqDsSb_TO70c6Rzl6v4_w0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.mft
Manifest number:          15F7
Signing time:             Wed 13 May 2026 03:00:52 +0000
Manifest this update:     Wed 13 May 2026 03:00:52 +0000
Manifest next update:     Thu 14 May 2026 03:00:52 +0000
Files and hashes:         1: ckQTnkSUQPsSdshk8Omus99xebQ.roa (hash: MhtseyAntznzcttGsRLktO2yJXlkXfQDzN8JLV5mmTY=)
                          2: enzxoqqDsSb_TO70c6Rzl6v4_w0.crl (hash: 640hbx1a9wawrJVhaqaP3woJI1yvlCTYvF9gjMmr6GM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/enzxoqqDsSb_TO70c6Rzl6v4_w0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:b0:60:e8:4f:c2:45:8a:0c:81:8d:dc:9a:91:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a7cf1a2aa83b126ff4ceef473a47397abf8ff0d
        Validity
            Not Before: May 13 03:00:52 2026 GMT
            Not After : May 14 03:00:52 2026 GMT
        Subject: CN=bd1eb2c1f39f2b0fdb93440e63ab00c78619f157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4b:fd:20:f6:44:10:94:32:40:33:29:04:ed:
                    2b:8b:65:da:1a:41:89:96:7c:95:d4:22:9a:82:5d:
                    50:be:75:64:3c:42:4d:22:dc:c4:cd:0b:1e:f9:c2:
                    b0:7b:62:de:a4:e5:ea:52:c0:80:17:a3:28:d9:88:
                    e5:6d:5c:3f:f0:47:0c:e7:6d:12:34:3f:fb:bb:b9:
                    24:d7:7d:9d:0e:38:8e:a7:e5:6e:ff:0b:6d:8a:a5:
                    5e:1d:89:30:7d:6c:4c:33:b6:02:62:cc:4e:a1:24:
                    30:57:9e:f3:38:c1:a6:51:5d:fb:16:44:b6:21:c6:
                    cf:b3:9f:4f:ac:c7:02:1d:df:c1:10:32:6f:5a:49:
                    c2:b3:e3:41:ed:a4:22:16:91:b5:74:ef:e5:a1:2e:
                    97:ac:e7:9d:3a:8e:1c:45:14:2c:97:e0:bc:6b:b9:
                    90:16:24:2a:c8:96:ac:83:8b:b2:51:49:b6:23:e5:
                    f1:63:04:7f:53:ac:58:a7:a6:8e:b9:13:4b:57:45:
                    d6:53:32:5f:f1:18:cb:c6:78:2c:5f:20:41:ef:f5:
                    30:85:2d:54:7c:aa:62:33:e1:4e:21:c3:0b:0a:27:
                    4e:07:1f:a1:35:b0:0c:4e:cc:04:90:15:3f:87:9d:
                    25:8a:e8:65:eb:49:0b:5a:0c:90:a9:62:ee:34:c8:
                    bb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1E:B2:C1:F3:9F:2B:0F:DB:93:44:0E:63:AB:00:C7:86:19:F1:57
            X509v3 Authority Key Identifier:
                keyid:7A:7C:F1:A2:AA:83:B1:26:FF:4C:EE:F4:73:A4:73:97:AB:F8:FF:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enzxoqqDsSb_TO70c6Rzl6v4_w0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:20:95:b5:67:1f:57:91:42:27:93:d7:3e:db:97:70:0d:66:
         11:a2:d4:e4:1d:11:7d:20:b5:fd:93:7a:b1:ff:f8:53:95:96:
         3e:82:81:7b:f0:59:20:f5:5e:4b:0f:25:b6:25:f0:aa:5b:df:
         06:c7:08:4f:ae:79:04:c8:36:94:3e:43:82:3e:ec:ab:15:6e:
         8d:b5:6b:77:07:c6:9e:de:44:85:3c:69:e1:c4:13:06:31:67:
         41:6d:b9:43:5a:6f:c8:1c:29:e1:85:24:88:9d:44:aa:83:04:
         e1:73:98:22:1e:ce:d3:e0:e3:9a:11:4c:4d:51:ef:5b:af:28:
         7f:c7:d4:ca:44:34:0a:fb:01:f1:23:8a:2f:9b:0b:cb:da:79:
         82:f1:2b:5c:8d:05:be:20:4e:bc:14:df:f1:60:a0:f9:9c:ee:
         ce:af:bc:45:99:70:bc:20:98:8b:a7:03:e5:41:4d:f7:90:9d:
         49:7b:5d:d4:8f:84:a0:c5:45:41:df:d2:66:0e:38:02:1c:14:
         16:8e:10:47:9d:45:7a:e1:b1:e1:6e:45:58:50:6b:3e:fa:1b:
         e3:d2:3e:56:6f:36:d2:44:8d:3d:31:a8:a8:57:ea:1e:22:a2:
         2f:78:e8:42:20:9d:3c:70:a7:dd:e7:7f:4d:dd:f5:ad:22:cb:
         76:7b:50:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:53:40 2026 by rpki-client