Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
File:                     x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft (raw, json)
Hash identifier:          bWFFlLHHuXFuHweIozCxbC4aOPjhDxQ8s5cepdUiyWM=
Subject key identifier:   46:F8:BA:21:E0:4F:06:C6:86:6A:1D:E1:78:37:9A:7C:48:2F:B1:0A
Authority key identifier: C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
Certificate issuer:       /CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Certificate serial:       019E20FFD8A979E4F92744BCD7C890BDF4F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 11:01:38 +0000
Manifest this update:     Wed 13 May 2026 11:01:38 +0000
Manifest next update:     Thu 14 May 2026 11:01:38 +0000
Files and hashes:         1: wWaQX5rvrS24Hznd7N3fDWXJd9I.roa (hash: fT4yvetY/MA9WwLBmvhYQk4S1AH3yU1r+ty6ON2yEVY=)
                          2: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl (hash: cg4kdj/GLB8KGi0eup6MxJ/3F6FCPAKvJiII8EGVIqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 11:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:d8:a9:79:e4:f9:27:44:bc:d7:c8:90:bd:f4:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
        Validity
            Not Before: May 13 11:01:38 2026 GMT
            Not After : May 14 11:01:38 2026 GMT
        Subject: CN=46f8ba21e04f06c6866a1de178379a7c482fb10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5f:30:41:0e:c8:57:12:ca:a9:bc:c9:b5:ce:
                    56:54:1a:dc:53:52:6d:cd:ec:ac:8c:11:ff:52:3f:
                    c2:d8:41:19:97:84:dc:35:51:cc:5d:16:5c:8d:ba:
                    c0:50:97:6e:2a:73:8a:ed:06:e5:c9:76:f5:05:6f:
                    67:e7:14:8c:4e:60:a5:8a:c8:e1:4a:84:b3:7c:ba:
                    ce:9d:ba:b3:53:b0:27:e8:46:5d:c1:ba:2f:ae:e9:
                    94:ec:b1:78:40:aa:5a:60:dd:c9:94:88:e1:36:22:
                    68:bb:04:1d:53:2d:e1:08:2b:1a:b5:3b:1d:9f:a7:
                    09:ed:e3:37:70:67:83:8e:08:1d:44:b9:ea:5d:65:
                    77:db:89:e3:f8:ee:e4:b2:c4:9a:42:ae:19:b6:41:
                    18:95:32:17:d6:2d:1a:f3:e3:c9:25:00:90:15:1b:
                    50:50:fe:31:88:3d:d2:72:26:42:18:40:e4:fa:07:
                    ce:c3:07:29:0b:b3:26:9b:a3:aa:72:69:f2:b8:9d:
                    4b:72:00:db:05:d7:bb:38:59:ad:35:70:ba:a4:68:
                    2b:ed:9b:fe:73:52:33:94:0c:47:c3:f3:dd:0f:b9:
                    66:18:50:79:a9:8e:6c:2e:a3:d1:5e:79:3a:1a:ac:
                    81:e0:f7:04:92:41:a3:63:51:69:b9:35:55:40:a2:
                    43:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F8:BA:21:E0:4F:06:C6:86:6A:1D:E1:78:37:9A:7C:48:2F:B1:0A
            X509v3 Authority Key Identifier:
                keyid:C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ac:ef:69:44:64:2c:28:be:d4:82:8a:68:78:84:aa:d6:ae:
         ab:bd:12:d1:75:7a:de:44:0c:17:37:76:39:c5:67:2e:74:b2:
         06:61:e8:d3:b7:26:e6:93:b9:dc:7f:36:6e:8b:49:1e:56:7c:
         cf:bb:52:03:34:ef:2a:4f:e7:73:bf:2e:4c:a1:31:65:cc:0e:
         16:c5:84:85:a7:76:b1:96:c9:98:2d:1e:c2:20:a5:8d:93:60:
         f3:c2:7b:25:1d:3b:88:09:b0:93:b9:97:bd:62:3a:bb:ac:35:
         16:2c:34:fe:bc:13:79:92:1a:56:c7:f0:b8:10:4c:37:5c:0b:
         57:8f:8c:0c:61:a2:56:bc:41:4b:10:a2:b4:f1:39:62:15:c0:
         2e:99:85:74:3a:d2:3d:90:fd:09:48:88:27:8b:36:eb:c4:77:
         b1:20:dd:d7:47:61:29:23:96:c6:2f:6b:25:72:ee:22:42:65:
         32:db:c6:64:c4:7b:bc:26:44:e8:46:e3:27:da:8d:b7:78:ed:
         0a:b2:ba:eb:70:15:ec:da:ac:84:0c:16:63:7a:d7:00:86:fd:
         6b:7f:e5:37:0d:16:36:c7:11:fe:e4:a5:15:89:a1:b6:a5:a6:
         27:9b:ae:a7:f7:30:29:be:02:13:49:a9:f4:4b:71:59:3d:46:
         a3:00:08:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:43:09 2026 by rpki-client