Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
File:                     7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft (raw, json)
Hash identifier:          hRPr6VXzWK674RFI/bhEBTdTU9WG1tKQW2BBjGznGrw=
Subject key identifier:   3C:3A:05:A3:6D:9F:9B:C7:1F:F1:E7:CC:27:53:F1:E7:67:A8:E7:B0
Authority key identifier: EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE
Certificate issuer:       /CN=ecee470bf5109976934f51e7eaef210779a2c4de
Certificate serial:       019E1EA2F2A9325791C2425BF47AD9CF1476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 00:00:55 +0000
Manifest this update:     Wed 13 May 2026 00:00:55 +0000
Manifest next update:     Thu 14 May 2026 00:00:55 +0000
Files and hashes:         1: 7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl (hash: 84dYm2JgoYngTl47vSLFpfxbsBoFXsBWbGKalv/1Pbs=)
                          2: i9futBXgsX5FN5Oy7LRhwMH28E8.roa (hash: O7Qfk152zcRaRv43cCEp1BeLvPwD5mzKuSykiTRHSEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:f2:a9:32:57:91:c2:42:5b:f4:7a:d9:cf:14:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecee470bf5109976934f51e7eaef210779a2c4de
        Validity
            Not Before: May 13 00:00:55 2026 GMT
            Not After : May 14 00:00:55 2026 GMT
        Subject: CN=3c3a05a36d9f9bc71ff1e7cc2753f1e767a8e7b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c6:4d:61:af:69:12:18:c2:ee:81:0d:db:4f:
                    bc:88:cd:4f:c2:7d:fd:67:85:fa:85:c7:62:d5:e4:
                    09:29:4c:3a:50:c2:20:2e:83:ba:3a:c9:44:6e:3c:
                    c8:f9:78:c7:65:0c:eb:67:ec:a1:55:b7:43:3b:5f:
                    e5:29:ff:76:42:3b:54:b2:31:9e:16:94:a1:69:a1:
                    93:41:ee:3a:3f:e0:7a:f6:b6:59:2c:65:df:d5:a5:
                    54:9c:a7:60:4f:f0:1f:c1:98:e8:86:4a:76:68:79:
                    59:a9:91:d7:78:e3:10:94:0f:0e:ba:d4:c6:1a:1f:
                    ab:3d:43:e6:93:59:f9:64:da:e7:2d:22:3d:bc:f2:
                    97:39:21:13:88:da:84:91:29:e5:e4:13:36:d5:66:
                    a2:84:ca:9a:0e:f3:06:88:4e:5c:e6:20:9c:f0:47:
                    9b:75:03:52:21:85:6b:d6:89:3c:9c:bb:98:d5:d1:
                    0f:cf:1a:2c:22:fc:6f:1d:e3:77:e7:56:48:77:8d:
                    7f:60:13:de:3f:a6:47:e6:73:2a:ae:4e:3f:b4:6f:
                    99:dd:54:18:e1:7c:2b:97:78:db:ee:54:60:0b:c6:
                    ce:91:01:b0:ae:ea:c0:3b:d3:96:5e:ef:9f:52:9c:
                    5f:1b:58:c0:cd:c5:f9:78:b8:df:74:05:69:5f:cc:
                    b2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3A:05:A3:6D:9F:9B:C7:1F:F1:E7:CC:27:53:F1:E7:67:A8:E7:B0
            X509v3 Authority Key Identifier:
                keyid:EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:0f:c3:50:41:20:ce:2e:c2:93:49:89:71:d2:84:54:8a:f9:
         71:f3:09:40:9d:ed:20:7a:bf:c4:02:56:5f:32:37:be:13:a1:
         bd:1b:93:65:7a:b9:73:a7:03:ec:63:f7:c5:03:90:d2:c8:b2:
         5c:37:65:5f:3c:29:aa:db:2e:61:ed:f1:db:25:5f:33:47:28:
         d9:9c:46:4b:b2:28:ef:43:0c:65:80:1c:6f:5d:7e:4e:d3:9f:
         69:d0:74:0d:f5:e5:a8:f9:52:d7:61:40:48:c6:6f:be:7e:4d:
         73:e8:ca:cb:46:6e:3e:35:2b:72:e3:01:a3:8f:a4:de:c6:c8:
         68:d8:82:32:26:49:4f:8c:fd:9c:0b:78:b1:fc:ee:fa:45:93:
         e1:5a:bc:8b:1e:ce:6f:15:9d:85:f8:f3:f7:82:c3:50:e6:82:
         96:a7:0b:cb:d7:82:d7:ce:99:1d:96:74:e9:12:69:5c:7a:b4:
         4b:16:99:ae:e4:7a:02:3a:5a:fc:d9:f6:72:cb:bd:3b:ac:79:
         7c:6d:e2:cd:f6:13:d6:40:a5:cd:4f:2a:12:f9:21:f6:38:49:
         02:e0:92:85:52:f2:4d:4c:a8:f1:35:37:2a:f8:c1:31:3d:b2:
         a4:ff:65:7b:22:32:2e:d5:ec:02:8d:b2:db:1e:a6:14:07:99:
         e1:91:44:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:16:08 2026 by rpki-client