Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
File:                     7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft (raw, json)
Hash identifier:          1kJFv35wqQnwtfTMv9sMEoTTzjtosB2LzgFQ91MSAeg=
Subject key identifier:   14:11:EE:13:46:BF:46:CB:56:24:A0:F9:E5:31:A9:F9:75:A6:29:95
Authority key identifier: EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA
Certificate issuer:       /CN=ec917c0afda449ecc0429c046df50fbc959b4eea
Certificate serial:       019E1D91172BAB02D34EE3CBCE8EEC07ADD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
Manifest number:          1881
Signing time:             Tue 12 May 2026 19:01:48 +0000
Manifest this update:     Tue 12 May 2026 19:01:48 +0000
Manifest next update:     Wed 13 May 2026 19:01:48 +0000
Files and hashes:         1: 7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl (hash: SOJm8Ua2tTrCOcx1OkgTLb7iOysvnj2tlllGDSolNUk=)
                          2: eZj5aI-pFV4NqPbPLKEKvj8QCIY.roa (hash: Ql1Y8D/xx7OIIHVESezWmyzRYEY4CZx9sPnyUIH5jGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:17:2b:ab:02:d3:4e:e3:cb:ce:8e:ec:07:ad:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec917c0afda449ecc0429c046df50fbc959b4eea
        Validity
            Not Before: May 12 19:01:48 2026 GMT
            Not After : May 13 19:01:48 2026 GMT
        Subject: CN=1411ee1346bf46cb5624a0f9e531a9f975a62995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:36:5c:3b:ba:51:29:aa:07:34:c2:eb:e5:6e:
                    f7:11:0b:8d:bc:dd:59:5f:b3:72:b3:2b:8c:3e:63:
                    8a:14:8f:d2:75:b3:8e:37:a3:6b:27:92:03:36:e1:
                    ea:7c:5f:c3:b4:91:36:e1:78:12:26:7b:97:24:19:
                    6d:86:c0:a9:12:2f:8e:24:0e:65:61:2e:d8:9d:3d:
                    0d:be:07:06:84:38:e5:c8:5f:ec:4f:94:5b:6d:8e:
                    99:a7:27:20:41:08:e8:85:ac:aa:de:94:ee:8b:94:
                    dd:e8:1f:e4:24:6b:b6:e0:8a:1c:dd:39:49:4e:77:
                    50:0b:89:8a:55:98:53:3d:5c:f2:2d:77:2b:6d:1e:
                    1d:cc:3d:91:3b:10:1a:45:75:2d:15:31:f2:9e:c4:
                    56:b1:40:cd:87:4c:03:15:6f:b1:f4:c8:72:ed:da:
                    28:24:f3:8f:40:fd:37:be:76:9a:bf:05:ec:69:88:
                    09:1f:77:db:8d:50:94:0f:27:3f:23:2c:7a:6d:e7:
                    5e:12:fd:44:2c:b7:c7:4f:0e:37:2f:3b:84:df:c9:
                    6c:b4:43:8a:99:0c:f0:7b:53:48:f8:cf:41:0a:5a:
                    26:0c:ed:4c:e3:25:3f:f0:21:4d:f6:17:2b:07:d4:
                    22:ac:50:2c:af:70:a7:9e:28:18:17:39:db:62:b0:
                    12:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:11:EE:13:46:BF:46:CB:56:24:A0:F9:E5:31:A9:F9:75:A6:29:95
            X509v3 Authority Key Identifier:
                keyid:EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ad:1e:b9:4f:77:59:0b:7d:1b:15:f4:a2:ba:2f:69:d9:37:
         2d:49:7a:41:7a:6a:85:72:1a:c9:b6:f6:50:95:42:9a:4c:e9:
         6c:36:57:ee:fb:9d:c6:ec:61:2b:9f:17:f9:f4:c1:43:38:2c:
         a6:11:c9:15:5c:00:ba:e4:9e:18:02:ed:c4:b3:30:17:33:6a:
         31:c0:76:8d:b1:c4:fc:aa:f3:67:8b:ad:1c:6d:9a:66:ce:7c:
         ff:d9:a9:d4:53:85:9c:ff:47:a3:a0:49:03:e8:c2:fe:63:b5:
         b8:07:19:95:cd:46:4a:20:6c:ef:83:c8:5b:5a:eb:87:13:3c:
         3b:6d:c7:06:b2:32:96:40:a0:d0:0d:29:3c:49:7e:47:8f:96:
         74:2a:33:42:3d:cf:3d:7a:e1:80:16:17:f1:74:25:81:bf:7b:
         ff:f8:31:3c:18:58:04:45:de:1a:d3:dc:93:29:21:1b:b3:fd:
         09:85:bc:9d:c1:ab:69:61:51:58:4a:ec:1d:4c:fb:9e:d3:21:
         4f:a4:6c:06:0e:99:74:b4:dd:d8:69:18:01:6e:66:1f:66:91:
         41:d9:88:62:df:c2:09:14:ac:aa:22:48:13:43:0e:85:14:85:
         68:05:69:5e:c5:2e:9c:60:21:b1:d0:0e:26:72:8d:9d:29:25:
         98:e0:87:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:02 2026 by rpki-client