Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
File:                     59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft (raw, json)
Hash identifier:          rHuz0A5HjVASZdFrkteDuUHOgaz/+SNcn5LiiU80+wg=
Subject key identifier:   22:2A:73:DC:1C:EB:B5:CA:BC:AC:BD:33:03:EC:CF:B4:7E:2B:09:43
Authority key identifier: E7:D1:9A:8F:D9:85:41:ED:89:17:0A:90:40:19:77:A4:BE:0B:EC:37
Certificate issuer:       /CN=e7d19a8fd98541ed89170a90401977a4be0bec37
Certificate serial:       019E1CEBF64D5E46964AB5CEFC4FE14F60E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
Manifest number:          AA
Signing time:             Tue 12 May 2026 16:01:26 +0000
Manifest this update:     Tue 12 May 2026 16:01:26 +0000
Manifest next update:     Wed 13 May 2026 16:01:26 +0000
Files and hashes:         1: 59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl (hash: 1qtABQCwO30DJW79oWY/1xNk8NlmMjL4wFtbM/fwmQI=)
                          2: Pzk4TDA-h9RVuxch0U3icXkl6Rw.roa (hash: oUr86fQqVuN8AdhLCsQUi45dZ5KEwK640rHZ20VyoXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:f6:4d:5e:46:96:4a:b5:ce:fc:4f:e1:4f:60:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d19a8fd98541ed89170a90401977a4be0bec37
        Validity
            Not Before: May 12 16:01:26 2026 GMT
            Not After : May 13 16:01:26 2026 GMT
        Subject: CN=222a73dc1cebb5cabcacbd3303eccfb47e2b0943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:44:25:ad:1e:18:53:b1:56:19:80:98:c9:32:
                    f8:b4:2c:65:87:3d:cc:80:a0:aa:12:ee:06:fe:8c:
                    8d:70:52:c8:d0:87:3a:53:b3:a8:fa:0d:3a:b4:24:
                    4d:57:a6:24:70:d4:98:23:07:4f:5e:8d:0a:b9:8a:
                    4b:99:cb:41:d6:e8:5a:b0:a2:69:1e:1e:4e:f7:cd:
                    22:d9:aa:86:49:9c:9f:c0:b3:1d:ea:cf:8f:dc:2e:
                    ec:11:20:37:0a:5f:b6:f8:df:31:17:50:5c:b7:3c:
                    b6:50:59:f5:77:1d:8e:6d:37:30:48:df:56:f5:66:
                    4d:38:34:0c:aa:df:67:8b:d4:d0:db:e9:48:7c:ff:
                    41:80:53:69:40:cd:28:8c:b6:7b:64:8f:68:72:bf:
                    a9:7d:2d:a2:67:f1:df:52:ed:0d:5c:17:5c:94:d4:
                    eb:ab:06:8e:09:25:65:8c:4a:bf:d0:a5:8c:46:4c:
                    d2:cc:2c:4d:3c:8f:35:28:47:3a:30:35:ab:35:e6:
                    b0:06:fd:85:9c:53:31:53:a8:f6:90:7f:74:bd:8d:
                    7c:cf:6a:6c:8f:4f:50:e6:82:6a:ac:3a:61:ae:4f:
                    2b:9e:af:01:94:45:21:bc:63:86:1b:67:9f:1a:03:
                    2d:29:e2:1a:55:68:5e:4e:7d:bb:59:34:50:6f:e2:
                    e7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2A:73:DC:1C:EB:B5:CA:BC:AC:BD:33:03:EC:CF:B4:7E:2B:09:43
            X509v3 Authority Key Identifier:
                keyid:E7:D1:9A:8F:D9:85:41:ED:89:17:0A:90:40:19:77:A4:BE:0B:EC:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:80:69:a2:da:ed:f1:a2:51:c9:3a:47:05:c3:3b:16:f7:61:
         fc:7e:7d:11:c5:78:35:76:12:e8:cd:c0:7d:ec:f9:3d:a6:85:
         d3:09:e0:5c:7c:88:99:73:c9:84:c6:8c:a7:29:e8:1a:10:c7:
         35:f1:7d:dc:4d:28:f6:82:5f:a7:93:f2:c0:cb:48:5a:88:e5:
         25:87:3d:96:2b:26:bb:08:4c:f7:9e:be:d8:c2:d3:bb:f2:8c:
         04:e6:a8:15:9d:51:88:00:f3:f4:ec:08:39:d0:01:f4:65:e4:
         7d:2d:3a:42:46:0d:30:5e:52:32:65:4a:61:04:89:67:6d:e2:
         fc:84:c6:b7:2a:6e:e1:13:5b:51:9a:92:45:fa:4c:74:65:85:
         0e:6e:fe:a6:58:da:19:8b:a8:ff:5b:46:90:5a:eb:64:ab:4f:
         07:4e:66:26:09:8b:d4:94:8c:5c:a4:be:3b:b0:c9:79:0b:5d:
         fa:3e:32:64:cc:58:a6:c9:b4:bf:cd:fb:ea:33:ef:7a:d4:56:
         99:a0:54:0b:2c:a1:78:7f:f1:19:25:02:42:11:3c:4b:3e:13:
         64:e4:25:bf:66:89:52:ac:e9:9b:65:d1:7c:af:19:7a:64:6a:
         aa:90:3f:c0:61:16:9e:14:b2:ab:f0:61:73:b6:c3:81:67:1f:
         f1:38:64:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:47 2026 by rpki-client