Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
File:                     7PQndr5TK9BXUzKFXYxCxJUu2TE.mft (raw, json)
Hash identifier:          WM1NJw66+fxM+16dzlajhMS+4yHS4ylS7J9HGBBCGcg=
Subject key identifier:   CC:02:3B:F5:D0:65:99:1D:84:82:39:48:0B:0E:84:73:A4:84:B9:21
Authority key identifier: EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
Certificate issuer:       /CN=ecf42776be532bd0575332855d8c42c4952ed931
Certificate serial:       019E1D90C5DCA14AFFE3B68D789B7A8FBED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
Manifest number:          1909
Signing time:             Tue 12 May 2026 19:01:27 +0000
Manifest this update:     Tue 12 May 2026 19:01:27 +0000
Manifest next update:     Wed 13 May 2026 19:01:27 +0000
Files and hashes:         1: 7PQndr5TK9BXUzKFXYxCxJUu2TE.crl (hash: oVOsYWTISjgfMqNd1tzTgTW8sRRm8LmHXmc4NOJ+E2Y=)
                          2: FE713c5vfxbQIGSVdFNk2cWFSNM.roa (hash: JgjcAo4jgA6vPRnMC9MOKVjzjQ9dpKh8w3rh7WLC4i8=)
                          3: MzmWO7LoBcnanX-oi0jTnFog8Sk.roa (hash: 5odMEIfNAjn0z/TvPiyQ2V/cG1Zv5Ya9/4mq6vD/C1A=)
                          4: ZFxceImgdOll43mTIb-2CEd5iZU.roa (hash: LEd9mfjkTgsQciD0Ian4mosID5/HXYAOaKPSHE8Z4vM=)
                          5: gb4eoozvCl4ZVVJkvwRFKCXlEQ4.roa (hash: K81jA4IV1mFJAtA8ax5fpPdJJ+koFS4vN7Zd8+4wcqc=)
                          6: nL83DswPZjOseSZh-M_SsVEMmMI.roa (hash: +wx/HPeXcm/ZjhRslTkWTgSvYpXyWghawfhk/xaSRoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:c5:dc:a1:4a:ff:e3:b6:8d:78:9b:7a:8f:be:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecf42776be532bd0575332855d8c42c4952ed931
        Validity
            Not Before: May 12 19:01:27 2026 GMT
            Not After : May 13 19:01:27 2026 GMT
        Subject: CN=cc023bf5d065991d848239480b0e8473a484b921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c3:36:15:02:42:32:bb:b9:d1:ee:96:0b:6d:
                    1c:6e:42:c2:ea:f3:a8:f6:f5:9a:ee:6a:c4:73:90:
                    15:5a:80:d2:c8:e7:c6:ed:dc:4c:cd:e8:c7:18:4f:
                    05:bf:4c:47:62:0d:06:c2:cb:ba:bb:6e:49:59:a8:
                    f6:b6:a9:5e:5b:7e:41:58:0d:ac:06:c2:a2:83:3f:
                    12:72:c2:82:7e:88:72:79:f5:b5:e3:24:a4:70:f1:
                    c6:2b:b2:f3:ab:e2:4e:fe:ad:37:69:c0:36:96:94:
                    68:3f:fc:d0:7b:d2:78:88:97:af:27:fc:6a:a4:3a:
                    17:5c:5f:5d:bc:7f:5e:04:81:87:a0:cb:f3:da:0c:
                    b4:ab:d8:6d:2f:ee:29:b7:85:9e:44:7d:b1:c8:10:
                    d4:f6:bd:63:7f:c6:a5:2e:a8:61:ab:a2:61:80:b5:
                    59:63:87:d5:14:4d:73:e6:7b:3a:b3:c0:80:3c:e3:
                    8e:b3:ca:c9:06:b6:69:66:e6:42:80:1b:47:b8:ff:
                    34:4d:b7:e7:04:fa:45:b2:a3:5d:3c:f0:d3:1f:8d:
                    da:90:f1:dc:b8:25:b7:ec:50:0f:4d:35:3c:3c:f2:
                    18:76:63:4d:91:28:d3:bd:6a:5a:03:29:fb:66:1b:
                    c0:74:1b:0c:57:2a:db:49:71:16:85:8e:54:48:7b:
                    7a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:02:3B:F5:D0:65:99:1D:84:82:39:48:0B:0E:84:73:A4:84:B9:21
            X509v3 Authority Key Identifier:
                keyid:EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:5e:6b:67:68:82:00:e4:30:26:d9:7c:df:d0:07:f6:d4:23:
         a0:49:94:e4:13:12:ad:bc:4d:1c:7a:31:a9:aa:bc:bc:16:a0:
         37:a5:bc:e4:52:bb:16:1f:7d:77:b8:17:4e:0f:e7:48:3a:03:
         01:bf:f3:6d:11:a5:9e:74:9c:ba:42:63:b2:d1:2b:f1:a2:f4:
         41:61:f2:8f:72:d4:5d:c7:8e:10:43:4a:af:86:27:48:43:10:
         ba:a6:ff:43:7e:80:85:07:36:e7:1e:9d:d3:b0:22:64:b7:d6:
         0d:a5:ca:bb:f5:04:fd:c8:ad:1e:8e:bb:59:fa:c0:d9:4f:11:
         8b:20:ba:e9:db:c9:14:9f:2e:e6:64:d7:84:1f:b7:61:fa:d4:
         06:a3:d6:c2:9c:14:31:c3:36:02:52:94:ea:47:8a:88:e7:f2:
         5d:5f:4d:18:2e:ea:21:78:03:28:75:44:f4:f4:ce:3c:f7:0f:
         e0:4f:d3:84:48:77:ac:32:8a:1c:ac:48:c5:83:5f:65:f6:a9:
         5d:24:e5:b8:0f:17:cb:d0:90:2b:88:d7:36:f3:b8:dd:b6:4f:
         d8:93:02:55:7d:00:17:32:cd:2d:aa:25:59:ae:2d:6e:34:a3:
         88:95:bb:ce:dd:82:ca:e7:15:af:30:af:e0:06:b2:9f:c3:10:
         ba:78:23:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkMXcoUr/47aNeJt6j77SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZjQyNzc2YmU1MzJiZDA1NzUzMzI4NTVkOGM0MmM0OTUy
ZWQ5MzEwHhcNMjYwNTEyMTkwMTI3WhcNMjYwNTEzMTkwMTI3WjAzMTEwLwYDVQQD
EyhjYzAyM2JmNWQwNjU5OTFkODQ4MjM5NDgwYjBlODQ3M2E0ODRiOTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MM2FQJCMru50e6WC20cbkLC6vOo
9vWa7mrEc5AVWoDSyOfG7dxMzejHGE8Fv0xHYg0Gwsu6u25JWaj2tqleW35BWA2s
BsKigz8ScsKCfohyefW14ySkcPHGK7Lzq+JO/q03acA2lpRoP/zQe9J4iJevJ/xq
pDoXXF9dvH9eBIGHoMvz2gy0q9htL+4pt4WeRH2xyBDU9r1jf8alLqhhq6JhgLVZ
Y4fVFE1z5ns6s8CAPOOOs8rJBrZpZuZCgBtHuP80TbfnBPpFsqNdPPDTH43akPHc
uCW37FAPTTU8PPIYdmNNkSjTvWpaAyn7ZhvAdBsMVyrbSXEWhY5USHt6+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwCO/XQZZkdhII5SAsOhHOkhLkhMB8GA1UdIwQY
MBaAFOz0J3a+UyvQV1MyhV2MQsSVLtkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lYmQ0OWYtZjU2OS00MTUyLWIwYjgt
NWU1M2MyM2I1NWIwLzEvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9lYmQ0OWYtZjU2OS00MTUyLWIwYjgtNWU1M2MyM2I1NWIw
LzEvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVl5rZ2iC
AOQwJtl839AH9tQjoEmU5BMSrbxNHHoxqaq8vBagN6W85FK7Fh99d7gXTg/nSDoD
Ab/zbRGlnnScukJjstEr8aL0QWHyj3LUXceOEENKr4YnSEMQuqb/Q36AhQc25x6d
07AiZLfWDaXKu/UE/citHo67WfrA2U8RiyC66dvJFJ8u5mTXhB+3YfrUBqPWwpwU
McM2AlKU6keKiOfyXV9NGC7qIXgDKHVE9PTOPPcP4E/ThEh3rDKKHKxIxYNfZfap
XSTluA8Xy9CQK4jXNvO43bZP2JMCVX0AFzLNLaolWa4tbjSjiJW7zt2CyucVrzCv
4Aayn8MQungjjQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:33:09 2026 by rpki-client