Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
File:                     7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft (raw, json)
Hash identifier:          lRM5wDi7zoa+JMFiBtXcZspP7LJhuVrJ2HGXng+QOSg=
Subject key identifier:   D5:1B:9D:9F:50:33:B2:1E:13:3E:CA:F4:68:90:16:9F:FE:76:60:63
Authority key identifier: EC:B0:D2:68:75:66:5E:C2:6B:31:A5:C7:66:E0:90:FC:FE:90:AE:AC
Certificate issuer:       /CN=ecb0d26875665ec26b31a5c766e090fcfe90aeac
Certificate serial:       019E1D90EE5FBBA46D526ACA91BC6BF59820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
Manifest number:          1903
Signing time:             Tue 12 May 2026 19:01:37 +0000
Manifest this update:     Tue 12 May 2026 19:01:37 +0000
Manifest next update:     Wed 13 May 2026 19:01:37 +0000
Files and hashes:         1: 7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl (hash: B/dpgj3z7JfjqAUuZA/i9mAw3BMFDlptB3LvQM0DYTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:ee:5f:bb:a4:6d:52:6a:ca:91:bc:6b:f5:98:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb0d26875665ec26b31a5c766e090fcfe90aeac
        Validity
            Not Before: May 12 19:01:37 2026 GMT
            Not After : May 13 19:01:37 2026 GMT
        Subject: CN=d51b9d9f5033b21e133ecaf46890169ffe766063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f9:de:f5:f2:73:f2:85:4b:98:94:47:1b:cd:
                    ea:22:ca:a0:a5:24:e2:64:1c:4c:36:ae:01:d2:4d:
                    ed:dd:84:a4:86:96:a4:ac:21:64:d6:77:fd:e7:9c:
                    35:a4:66:d3:52:80:b3:06:d2:ee:0d:a5:d5:97:ec:
                    4d:22:a9:8d:f4:b5:1f:de:7f:a4:60:f9:fc:f2:e8:
                    8c:9d:c0:d0:97:56:4b:21:e1:37:ea:4b:9b:1b:2a:
                    01:87:4c:24:2d:b3:b6:5e:58:40:ec:c0:5f:fc:b5:
                    77:2c:39:99:33:87:83:b5:68:3e:9f:96:9f:db:5a:
                    2e:b1:4b:52:74:3c:73:88:ff:0e:29:7d:ea:4d:1e:
                    86:4d:ff:3e:f4:6e:85:93:e2:d9:12:5c:95:83:47:
                    03:87:32:4c:88:6d:cb:b4:16:26:73:16:06:f3:5b:
                    60:fc:26:ec:7a:13:6a:2c:1e:17:14:5f:44:7f:fa:
                    9c:df:f3:43:7b:db:bf:5a:4a:cb:6d:65:d4:f3:5c:
                    df:37:0e:28:e1:43:14:73:08:dd:d1:56:b0:f8:93:
                    23:e2:54:29:48:51:c1:16:4e:84:c5:1a:46:d9:81:
                    09:a1:1e:ea:01:6b:dd:7f:66:c4:79:9d:41:75:c3:
                    aa:42:96:5b:3d:1d:4b:11:97:d8:7c:d3:51:ec:41:
                    5b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1B:9D:9F:50:33:B2:1E:13:3E:CA:F4:68:90:16:9F:FE:76:60:63
            X509v3 Authority Key Identifier:
                keyid:EC:B0:D2:68:75:66:5E:C2:6B:31:A5:C7:66:E0:90:FC:FE:90:AE:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:58:64:da:5b:98:67:30:be:44:10:49:0f:40:0b:6d:b8:7b:
         58:70:70:c6:2d:78:fa:de:12:4a:8f:07:6c:83:c5:89:da:33:
         4f:cd:e1:ff:08:28:8e:db:8d:5d:5e:93:dd:6d:c7:6e:a3:a4:
         8d:66:c7:2d:45:96:95:fb:5e:8f:17:34:ac:d6:97:d2:dd:a9:
         1a:95:d0:90:be:4f:d3:9c:62:86:d7:26:0b:a9:78:ac:5a:97:
         3f:88:f8:14:50:2b:9b:78:8e:e9:b6:98:9d:b4:67:a1:6b:39:
         59:f7:f7:d5:da:d1:83:ab:46:66:37:d7:b6:cc:85:a0:31:30:
         34:8d:af:0b:28:5e:2b:75:5e:31:9b:b5:3b:78:02:17:ae:98:
         d8:66:c8:ff:6b:c9:98:62:74:ae:67:26:37:c1:0a:39:1e:e2:
         9e:a3:68:d3:5b:74:19:67:ea:a0:c7:75:a9:4f:fb:48:d1:55:
         ed:01:81:ed:e7:0c:1d:ae:fc:f3:13:e2:26:35:2f:08:7d:bd:
         dd:a8:1c:a1:b5:1e:19:2b:6a:c4:41:e0:86:57:73:0a:ae:ee:
         af:6b:7b:c7:11:05:ff:13:7d:a8:e0:d1:83:ab:4d:1e:91:02:
         d8:77:7d:24:80:27:04:ef:5d:40:17:bd:8e:ef:55:ec:ba:7f:
         d1:1f:f9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:01:41 2026 by rpki-client