Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
File:                     7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json)
Hash identifier:          SsxQyVxMvq3aQAB5QlwJ5p4uU6ImSsTXTGc9weTffac=
Subject key identifier:   7E:16:60:18:1D:9E:09:54:C4:3D:4D:AF:84:19:3A:84:0A:A6:DE:11
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Certificate issuer:       /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial:       019E1DFE132E2DD95E5ABD7377843AA05EE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 21:00:50 +0000
Manifest this update:     Tue 12 May 2026 21:00:50 +0000
Manifest next update:     Wed 13 May 2026 21:00:50 +0000
Files and hashes:         1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: v76XEnzsaQRCfMB5st/Loz6zWf9X0dYA/EHFZtnXBwM=)
                          2: sl-nYt82qhzHyv-nkhEpEqMcJKY.roa (hash: q2Tif7W7uSE6r0l0RzQYoGnDEkiYUnvvVbum3TT4DDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:13:2e:2d:d9:5e:5a:bd:73:77:84:3a:a0:5e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
        Validity
            Not Before: May 12 21:00:50 2026 GMT
            Not After : May 13 21:00:50 2026 GMT
        Subject: CN=7e1660181d9e0954c43d4daf84193a840aa6de11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:55:70:4e:d5:99:df:51:d0:c8:81:4d:7f:67:
                    dd:96:36:9e:a5:27:e9:25:b3:ef:6f:0a:32:8a:ac:
                    29:4c:54:16:52:70:35:27:b0:9b:68:58:e9:e6:e7:
                    09:4c:1f:e3:48:64:28:66:35:aa:eb:ab:41:2a:17:
                    17:39:92:69:e6:20:9e:32:c5:3a:b1:97:82:d8:c5:
                    d5:ef:22:5d:41:80:85:9e:ee:5c:0a:56:f5:d2:9c:
                    1f:a4:a0:fc:72:b9:d9:52:c1:55:59:e3:0f:43:57:
                    ed:19:e6:b0:97:b1:70:43:cf:2d:e3:91:af:e6:a5:
                    d7:cd:69:f5:c5:b5:95:10:d0:ff:49:36:88:9d:63:
                    dd:84:67:72:20:d5:4a:32:91:99:27:dd:e5:54:61:
                    e4:28:86:40:e7:75:74:dd:f8:74:dc:43:7c:5d:c6:
                    81:95:a2:eb:10:58:eb:dc:e2:a4:33:b0:7d:da:e1:
                    52:d8:b3:b2:1b:26:1d:07:f5:b4:37:cc:ab:ef:59:
                    c6:0f:e4:ff:8d:87:21:a8:6e:71:1f:1d:51:1c:d9:
                    4e:f8:b9:92:e0:f4:09:d3:c4:68:68:86:bc:b2:6a:
                    ff:a6:63:49:b1:78:2b:92:41:0c:b2:f9:bc:19:e9:
                    2c:70:57:24:bb:f3:df:e2:de:5d:2d:e7:46:b3:83:
                    16:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:16:60:18:1D:9E:09:54:C4:3D:4D:AF:84:19:3A:84:0A:A6:DE:11
            X509v3 Authority Key Identifier:
                keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:4a:50:d6:53:17:be:be:2e:ee:53:a3:24:1c:d4:3b:53:7d:
         ca:a6:11:db:94:76:3c:ca:2e:c9:f0:c4:5d:f8:fc:46:ce:01:
         23:62:4e:cc:ab:ac:5b:a1:c9:98:11:68:9e:8d:c7:69:ef:37:
         fe:75:2f:6f:04:9f:f7:89:1e:d3:e1:44:56:00:91:6e:b8:c4:
         95:de:1a:c2:ad:04:7f:58:0b:cb:88:59:1a:97:34:f7:2a:11:
         79:f8:4c:3c:97:8d:85:1b:25:c4:b7:76:ca:d7:cc:62:56:42:
         3d:86:33:fa:4d:3b:84:47:5f:a3:02:1f:c5:84:af:e4:8f:ce:
         f9:9a:07:84:a0:51:90:ca:40:bb:54:ca:a1:4a:83:0e:16:46:
         49:7b:26:67:3b:42:7e:8a:de:cf:97:09:34:1b:0d:78:53:54:
         99:5d:e4:88:55:b6:56:9c:ab:07:a8:4d:66:17:0a:5d:8d:40:
         89:56:f8:6a:b5:24:13:b9:9f:7c:a0:b5:2f:6f:28:16:03:12:
         16:80:cf:f3:35:47:7f:70:35:25:4b:86:28:17:f5:eb:06:c9:
         b3:ea:dc:f0:ce:15:a4:d0:cd:6d:06:3e:f3:c6:af:03:b0:ff:
         66:64:0b:5a:54:98:b5:35:36:81:7e:64:b2:8e:bd:06:21:92:
         61:03:79:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:52:43 2026 by rpki-client