Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.mft
File:                     7rv5EjKoEhLjtEz74e4pjGKaZk8.mft (raw, json)
Hash identifier:          yYCJqH6X+1D3UMZgIoIiisbfFcp1JtRNHBbaDrdwRsk=
Subject key identifier:   2A:B7:45:65:AA:CF:8E:8C:B6:6A:6C:A0:89:9B:1E:CF:17:6E:77:B0
Authority key identifier: EE:BB:F9:12:32:A8:12:12:E3:B4:4C:FB:E1:EE:29:8C:62:9A:66:4F
Certificate issuer:       /CN=eebbf91232a81212e3b44cfbe1ee298c629a664f
Certificate serial:       019E1C46847566F0A215F14072B555C0FD27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rv5EjKoEhLjtEz74e4pjGKaZk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.mft
Manifest number:          012F
Signing time:             Tue 12 May 2026 13:00:43 +0000
Manifest this update:     Tue 12 May 2026 13:00:43 +0000
Manifest next update:     Wed 13 May 2026 13:00:43 +0000
Files and hashes:         1: 7rv5EjKoEhLjtEz74e4pjGKaZk8.crl (hash: 2wQGxtmWO9eMfSVR4Z1MYuuqaUFx2vsnl2LTfBFk3tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rv5EjKoEhLjtEz74e4pjGKaZk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:84:75:66:f0:a2:15:f1:40:72:b5:55:c0:fd:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebbf91232a81212e3b44cfbe1ee298c629a664f
        Validity
            Not Before: May 12 13:00:43 2026 GMT
            Not After : May 13 13:00:43 2026 GMT
        Subject: CN=2ab74565aacf8e8cb66a6ca0899b1ecf176e77b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9c:a3:a0:a6:98:8a:19:8f:6a:56:46:6e:92:
                    d0:f0:88:5f:23:bf:91:3c:0e:02:b6:dc:a9:16:d6:
                    49:cd:f1:31:ca:3f:f6:d1:24:29:57:44:ab:76:ba:
                    26:5f:f3:32:37:1f:71:15:be:e8:55:5b:26:e8:8f:
                    d9:10:a6:d8:75:c8:03:8d:7f:b2:3e:94:6a:67:7d:
                    61:bf:79:13:75:3f:f8:d1:ad:ee:c0:95:df:d8:fa:
                    9e:c8:77:fb:5f:05:0c:9e:ac:2c:5a:0b:81:99:67:
                    aa:aa:5c:d7:1b:c1:87:60:53:55:05:cd:b0:b1:e3:
                    fb:df:94:b7:c0:3e:ab:c2:06:5c:96:8d:f8:de:83:
                    5d:5d:b4:84:46:71:ce:54:3d:09:aa:cf:be:86:23:
                    a4:93:07:75:01:74:87:ef:2a:d2:8b:61:3f:0b:d5:
                    4b:75:cb:a6:b0:67:be:4e:25:95:0b:a3:53:fc:03:
                    e2:0c:ca:12:6b:a9:ea:5d:6a:d2:72:84:36:12:c5:
                    00:1f:38:6d:c8:9b:c7:30:55:b5:e2:4c:ff:27:fc:
                    c5:b7:ec:bd:2b:18:7a:bb:87:9b:cd:1a:2a:25:f3:
                    62:ee:ef:37:7f:b2:40:e3:ae:04:55:ce:75:32:86:
                    d0:48:ac:78:e9:d6:5a:39:2d:68:f0:1b:c1:b1:50:
                    ae:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B7:45:65:AA:CF:8E:8C:B6:6A:6C:A0:89:9B:1E:CF:17:6E:77:B0
            X509v3 Authority Key Identifier:
                keyid:EE:BB:F9:12:32:A8:12:12:E3:B4:4C:FB:E1:EE:29:8C:62:9A:66:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rv5EjKoEhLjtEz74e4pjGKaZk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:6d:af:41:2f:85:fc:dd:68:18:4d:2a:9d:3d:0e:31:d9:66:
         39:4b:e2:94:1f:f9:0d:d4:39:f8:7f:6a:ff:ac:46:35:63:73:
         24:8b:12:d7:42:69:8a:f3:f5:3b:b5:5e:0a:39:23:a9:23:2b:
         f5:6d:58:be:8c:53:4d:34:b4:2b:32:f7:7c:a0:82:db:3b:d8:
         fa:09:e0:8b:12:43:f3:26:37:76:c0:37:1c:ff:48:fc:b8:c1:
         d7:3a:75:5c:31:81:72:e2:7a:50:40:d6:12:c2:bf:41:97:e8:
         7d:bf:35:f3:54:94:51:65:55:14:ff:8d:c3:b2:0b:7d:5e:d1:
         ee:e0:36:79:d3:05:8b:83:5c:4f:7f:41:4e:e5:0e:f5:32:8e:
         ec:8c:f4:15:b4:5f:23:68:a8:ed:69:86:70:3f:f4:27:37:f4:
         bf:b9:2e:1d:ed:84:3d:ee:a3:10:fd:9e:bc:f3:10:00:16:3a:
         88:d8:75:dd:c3:6a:7c:ca:0c:b7:10:65:ee:de:b4:57:15:49:
         79:f6:ea:25:9d:39:1d:5b:9b:23:e6:8e:8b:8e:f0:cd:d5:66:
         6e:30:fb:98:d5:39:e0:7e:c0:eb:07:e6:de:02:3f:dc:dc:67:
         7d:2b:a2:25:67:6f:98:6b:60:5d:8c:16:cd:81:8e:f1:f1:48:
         fb:dd:3d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:34 2026 by rpki-client