Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
File:                     63-M4hWMPflQU5Fx2exS39UVY-Q.mft (raw, json)
Hash identifier:          3OVXtQDB2aDBBhW+0CIaWHheURX6qizpJE64Vnxpirw=
Subject key identifier:   EA:92:43:4E:E7:18:DB:A6:2D:3B:CC:EC:3F:11:D5:A2:E4:57:D3:D6
Authority key identifier: EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
Certificate issuer:       /CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Certificate serial:       019E1D59BAACC6434A33354FA82D85EDAAB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
Manifest number:          0761
Signing time:             Tue 12 May 2026 18:01:20 +0000
Manifest this update:     Tue 12 May 2026 18:01:20 +0000
Manifest next update:     Wed 13 May 2026 18:01:20 +0000
Files and hashes:         1: 63-M4hWMPflQU5Fx2exS39UVY-Q.crl (hash: xEOeRVP6x9XoocjLnw62vlGpQAWDpn8QwfWnE4+E4Uw=)
                          2: NTOHIqYNPSkewapNwW2GQ_eQp9Q.roa (hash: JLUP7PxQRVwd14LjjaQL3EnNrNdoYyGJTVHvFQwAfgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:ba:ac:c6:43:4a:33:35:4f:a8:2d:85:ed:aa:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
        Validity
            Not Before: May 12 18:01:20 2026 GMT
            Not After : May 13 18:01:20 2026 GMT
        Subject: CN=ea92434ee718dba62d3bccec3f11d5a2e457d3d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e4:a8:61:8d:23:8e:1d:78:2e:16:a8:23:e8:
                    61:c8:0d:21:9e:24:e7:df:0c:4a:1c:ee:b1:d2:41:
                    fe:a4:f5:87:84:c3:b7:59:7b:94:a7:0d:77:98:d8:
                    2f:e0:11:45:89:d8:80:55:4e:1d:14:b7:43:06:65:
                    b5:04:06:d4:26:10:4b:dc:a8:ea:5b:2e:45:65:98:
                    46:16:cf:65:d9:58:2c:b1:6e:76:4f:42:64:48:36:
                    89:4b:a4:a8:14:82:c8:49:7a:0a:9b:a8:6d:8f:ae:
                    91:06:92:f3:13:56:2f:46:1a:12:b6:d9:f8:fb:e5:
                    3c:b1:6a:09:af:0d:cd:85:1b:dd:bd:08:34:78:e6:
                    bc:20:01:3b:f3:e4:2a:60:a6:b9:87:9b:de:94:1d:
                    21:bd:ad:28:1a:5b:41:a4:95:8d:42:a0:f0:12:fd:
                    f6:c2:fd:8f:d9:c4:e0:33:28:8a:4f:36:cb:c8:17:
                    c4:3d:37:a9:77:b5:b6:45:98:89:19:e7:73:ce:cb:
                    31:8c:12:e3:08:e0:58:5a:32:6f:cf:06:a0:88:b5:
                    6c:f9:8d:50:f3:77:e3:e5:ce:13:d6:61:e9:2e:c6:
                    2b:39:b9:02:43:6b:c3:19:8e:41:75:fb:06:dd:28:
                    3f:b7:5a:f9:30:fd:2c:d8:c9:09:d4:2e:02:36:ae:
                    80:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:92:43:4E:E7:18:DB:A6:2D:3B:CC:EC:3F:11:D5:A2:E4:57:D3:D6
            X509v3 Authority Key Identifier:
                keyid:EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:cf:69:34:d6:03:30:59:6d:75:46:4b:24:c1:5e:c6:90:20:
         48:27:66:29:80:84:c7:68:e6:80:76:6c:6e:47:dc:b3:85:2e:
         49:8a:88:8d:ff:f3:79:59:c0:12:12:cc:53:61:c6:a5:10:85:
         f3:94:e0:87:25:92:ff:9e:5d:3a:80:41:31:e2:0b:8f:57:f3:
         43:d1:8a:71:a3:ec:58:cb:30:c6:71:44:2a:5b:f0:66:ce:69:
         bb:63:a8:14:3d:87:0b:b6:1e:c7:da:04:28:36:6a:c1:2d:39:
         ce:1b:15:10:9c:61:11:ad:3f:ef:2f:25:b4:a4:5f:6e:b4:9e:
         4a:17:2d:d5:71:8b:bd:ba:8d:bc:7c:23:ee:9a:df:ed:03:bf:
         e3:4b:4a:7c:7d:e4:c9:64:b2:a2:72:ea:9b:55:02:cd:c6:3a:
         50:96:e7:a3:63:73:d1:76:5c:8e:85:4f:dd:a7:39:c9:16:3d:
         06:18:d8:7f:cc:7b:21:96:7f:aa:ba:fd:20:a0:11:38:da:60:
         fb:fd:0e:d4:8a:4c:e6:9a:21:09:9f:43:91:4f:2b:0f:fa:b1:
         ac:07:0b:25:e2:f6:58:14:02:a7:89:25:7a:6e:10:33:dd:57:
         c7:de:ed:e1:ef:93:16:89:19:fe:11:a9:9b:25:bc:8d:04:8a:
         a1:0f:dc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:36:31 2026 by rpki-client