Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft
File:                     7uNuuo1bP-lfMgGrLRFnXqAceBw.mft (raw, json)
Hash identifier:          Y/Kq2BaFJa0wXjEOddMARyB+Ex1/EAHM12SO7AaoegY=
Subject key identifier:   A6:7D:D9:F7:71:62:4F:32:F9:F5:C8:0C:B3:C0:C0:1D:6C:86:C4:08
Authority key identifier: EE:E3:6E:BA:8D:5B:3F:E9:5F:32:01:AB:2D:11:67:5E:A0:1C:78:1C
Certificate issuer:       /CN=eee36eba8d5b3fe95f3201ab2d11675ea01c781c
Certificate serial:       019E1CB4EBA44B5A553267B6088722A375A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft
Manifest number:          03BE
Signing time:             Tue 12 May 2026 15:01:19 +0000
Manifest this update:     Tue 12 May 2026 15:01:19 +0000
Manifest next update:     Wed 13 May 2026 15:01:19 +0000
Files and hashes:         1: 7uNuuo1bP-lfMgGrLRFnXqAceBw.crl (hash: XfzgA/R1dJt0FAGCG7n+1w5fVJ0q92WeJiHdsnwFugM=)
                          2: rPzbphQ7hSaP-mBEYCTEXpwW11Q.roa (hash: lLarn7yxxi9uME4ugayt7nYIZmjyTGZ3vzJyeQkWW7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:eb:a4:4b:5a:55:32:67:b6:08:87:22:a3:75:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee36eba8d5b3fe95f3201ab2d11675ea01c781c
        Validity
            Not Before: May 12 15:01:19 2026 GMT
            Not After : May 13 15:01:19 2026 GMT
        Subject: CN=a67dd9f771624f32f9f5c80cb3c0c01d6c86c408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:da:c9:8f:5e:0f:37:c3:e3:17:c9:0d:55:
                    ed:3f:59:b9:47:9b:3f:18:24:c6:af:73:53:8a:13:
                    2e:76:ff:df:4f:ad:ec:97:01:a0:ec:60:cb:d7:81:
                    9b:a1:38:82:01:3d:0e:47:e6:b4:12:9f:fc:dc:b8:
                    be:30:1c:44:d5:fe:4f:62:89:da:ca:33:3e:1a:61:
                    ed:97:fe:f9:7f:a7:9e:55:36:f6:46:9a:bd:aa:b8:
                    8a:38:02:69:7e:24:12:f6:fc:00:e2:7f:e6:c6:ba:
                    e6:f5:a8:df:a5:f4:e0:80:a0:49:ee:6a:c4:c6:d3:
                    9b:06:33:9f:b4:01:c1:14:40:f8:f6:87:82:08:af:
                    03:9d:63:aa:79:14:9d:e4:9c:68:2a:bc:62:a1:2c:
                    fc:9c:94:56:52:de:c6:32:a1:de:9d:0f:07:ac:b7:
                    10:47:d7:8e:1d:82:1a:e2:bb:7b:4b:9e:6d:96:ad:
                    07:ba:7a:d4:89:a2:e1:a7:86:cc:ee:13:65:65:72:
                    4c:cc:6e:db:82:db:4b:aa:64:1d:21:9b:18:d0:cf:
                    c1:ef:8a:90:ab:72:67:de:38:30:3a:5e:29:eb:f8:
                    70:8c:df:9e:b4:3d:27:d3:55:d8:82:19:8b:00:1b:
                    e6:76:89:26:f8:7f:63:cb:5e:0c:d7:87:47:c8:19:
                    f2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7D:D9:F7:71:62:4F:32:F9:F5:C8:0C:B3:C0:C0:1D:6C:86:C4:08
            X509v3 Authority Key Identifier:
                keyid:EE:E3:6E:BA:8D:5B:3F:E9:5F:32:01:AB:2D:11:67:5E:A0:1C:78:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:31:8f:99:19:f6:29:91:35:15:d8:3f:91:15:7b:9d:c5:6b:
         c3:30:cc:20:0b:4a:c3:e1:64:0a:d8:be:e0:7f:75:fe:b7:2b:
         d3:9e:8f:91:7e:d4:45:34:8a:e2:f2:3c:b5:d0:c3:a4:19:1b:
         2c:35:98:48:83:eb:07:89:47:3b:1f:a6:7f:00:71:d6:53:8a:
         09:bc:e1:53:c7:6d:ae:d6:8e:6a:81:fc:f0:13:a8:22:5b:a5:
         68:10:6d:14:fd:59:bb:16:20:1d:02:22:e6:56:84:7b:3c:79:
         82:0e:56:9b:2c:a6:df:72:35:03:fb:6c:20:6b:b5:cf:e5:e5:
         82:64:9f:cf:4f:51:e3:b7:ae:df:43:09:79:c1:4d:01:58:d1:
         de:1c:28:d6:93:68:e1:a2:6d:ad:ac:bb:5a:e1:45:e2:80:78:
         86:75:e4:e2:81:eb:e6:08:4c:0d:d6:b4:10:5a:e2:84:10:16:
         7a:be:38:22:11:3e:f9:b5:68:52:d4:ac:e2:ea:4e:13:8b:e5:
         2e:3a:9b:51:6a:a9:8d:18:82:0a:0d:7d:ea:82:ac:5f:8f:ec:
         2f:2f:c0:0f:3d:22:4a:e7:dc:cb:a8:11:e8:da:76:eb:2d:15:
         ff:30:e5:7a:a9:32:d1:a2:b3:f2:96:c1:ec:a9:21:14:8f:09:
         d4:0d:de:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctOukS1pVMme2CIcio3WhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZTM2ZWJhOGQ1YjNmZTk1ZjMyMDFhYjJkMTE2NzVlYTAx
Yzc4MWMwHhcNMjYwNTEyMTUwMTE5WhcNMjYwNTEzMTUwMTE5WjAzMTEwLwYDVQQD
EyhhNjdkZDlmNzcxNjI0ZjMyZjlmNWM4MGNiM2MwYzAxZDZjODZjNDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq3ayY9eDzfD4xfJDVXtP1m5R5s/
GCTGr3NTihMudv/fT63slwGg7GDL14GboTiCAT0OR+a0Ep/83Li+MBxE1f5PYona
yjM+GmHtl/75f6eeVTb2Rpq9qriKOAJpfiQS9vwA4n/mxrrm9ajfpfTggKBJ7mrE
xtObBjOftAHBFED49oeCCK8DnWOqeRSd5JxoKrxioSz8nJRWUt7GMqHenQ8HrLcQ
R9eOHYIa4rt7S55tlq0HunrUiaLhp4bM7hNlZXJMzG7bgttLqmQdIZsY0M/B74qQ
q3Jn3jgwOl4p6/hwjN+etD0n01XYghmLABvmdokm+H9jy14M14dHyBnyOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZ92fdxYk8y+fXIDLPAwB1shsQIMB8GA1UdIwQY
MBaAFO7jbrqNWz/pXzIBqy0RZ16gHHgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3VOdXVvMWJQLWxmTWdHckxSRm5YcUFjZUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iMDZlMDctMDFmNS00M2RjLWI4MGIt
ZTVjOGNjODZhYmQyLzEvN3VOdXVvMWJQLWxmTWdHckxSRm5YcUFjZUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9iMDZlMDctMDFmNS00M2RjLWI4MGItZTVjOGNjODZhYmQy
LzEvN3VOdXVvMWJQLWxmTWdHckxSRm5YcUFjZUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTGPmRn2
KZE1Fdg/kRV7ncVrwzDMIAtKw+FkCti+4H91/rcr056PkX7URTSK4vI8tdDDpBkb
LDWYSIPrB4lHOx+mfwBx1lOKCbzhU8dtrtaOaoH88BOoIlulaBBtFP1ZuxYgHQIi
5laEezx5gg5Wmyym33I1A/tsIGu1z+XlgmSfz09R47eu30MJecFNAVjR3hwo1pNo
4aJtray7WuFF4oB4hnXk4oHr5ghMDda0EFrihBAWer44IhE++bVoUtSs4upOE4vl
LjqbUWqpjRiCCg196oKsX4/sLy/ADz0iSufcy6gR6Np26y0V/zDleqky0aKz8pbB
7KkhFI8J1A3e4g==
-----END CERTIFICATE-----
Generated at Tue May 12 23:23:53 2026 by rpki-client