Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File:                     7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier:          /7rYl13PQbnYFwpp+iVA0q+593VoahZ+F2TR3q01uFk=
Subject key identifier:   7B:4D:0F:A3:24:A0:06:F8:FC:43:32:9E:B6:40:1B:14:4E:56:44:47
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer:       /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial:       019D273B1D9E516C51ACE7E7D290B2932425
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number:          0519
Signing time:             Wed 25 Mar 2026 23:01:18 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:18 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:18 +0000
Files and hashes:         1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: YL7cYnOHWFZkI+yQz5utD4mbvbPJgYbTvB+V5QL8Rrg=)
                          2: 9agfB9dVL-Kd6aIq8hf6VJQFr-c.roa (hash: 0rqJmTL+IHF4zuPR+5EuCzywtP32Y0FzvoOjmasnRjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:1d:9e:51:6c:51:ac:e7:e7:d2:90:b2:93:24:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
        Validity
            Not Before: Mar 25 23:01:18 2026 GMT
            Not After : Mar 26 23:01:18 2026 GMT
        Subject: CN=7b4d0fa324a006f8fc43329eb6401b144e564447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:84:ac:d6:6a:2d:3e:50:e4:4c:92:de:e3:2a:
                    2a:99:18:b7:dc:7b:a8:1e:29:f1:0a:91:a2:cd:06:
                    1a:54:3a:2c:92:d4:56:a7:0b:cb:6d:86:9c:c5:9b:
                    00:8d:53:21:6f:f0:8e:f7:33:38:9e:7f:73:12:7b:
                    78:0a:85:29:c3:52:d3:3f:0d:0c:0a:97:f3:99:27:
                    91:c5:3f:f2:f9:42:be:37:8e:eb:7d:6f:98:20:b8:
                    bb:21:85:35:e7:9f:34:dd:d6:89:ac:26:33:a4:49:
                    05:14:94:d3:7e:be:47:14:30:2e:9e:e5:6c:23:e2:
                    dc:31:3f:11:aa:78:6d:65:6a:2a:a9:d0:79:36:c8:
                    25:15:db:da:5a:02:6a:67:2c:1e:5e:14:7d:77:a2:
                    cb:a8:46:e0:a9:07:b5:20:36:2d:76:85:ac:79:ec:
                    2f:06:d0:f5:cb:d7:a6:44:b0:d8:67:3c:a9:33:49:
                    d8:ad:4e:81:38:a2:f2:5e:be:3a:dc:70:7d:14:47:
                    36:11:9d:cc:34:86:94:b8:e6:80:d4:0d:1c:2a:46:
                    18:7f:cd:26:24:72:1b:5e:42:c0:9c:9f:57:a4:89:
                    3a:f3:3b:ab:34:aa:47:ef:e5:bc:43:2c:8d:4c:47:
                    65:89:95:96:57:10:a8:4c:f1:d7:fd:ce:b3:ba:c0:
                    2c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4D:0F:A3:24:A0:06:F8:FC:43:32:9E:B6:40:1B:14:4E:56:44:47
            X509v3 Authority Key Identifier:
                keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b4:b8:e9:ad:65:ef:80:74:fe:71:4e:af:c1:0f:79:52:6e:
         8e:7f:2e:fa:e7:33:b9:56:ca:5c:26:57:a9:f4:5b:df:b4:5d:
         47:25:47:c5:70:9b:75:5f:50:10:1c:aa:5f:5a:61:63:35:16:
         a4:13:cc:18:a6:c2:20:d0:a9:7f:69:e1:c7:c1:42:0c:de:cb:
         2e:11:f5:4d:29:cd:2c:83:77:88:d3:27:8e:18:98:ac:10:1b:
         8e:df:51:ef:5e:20:c6:b7:0c:20:a2:97:25:a3:e9:17:2d:1a:
         6f:47:62:bd:66:8e:62:a2:61:a3:a8:da:f9:ce:27:c8:60:fb:
         92:c5:82:f2:6a:41:7a:88:a0:0b:1d:2e:87:23:2c:7e:9d:6e:
         ed:eb:b7:4b:14:20:da:d7:8e:ff:ef:07:84:90:21:6f:92:4d:
         67:53:49:a8:64:a2:5d:f2:2e:5c:15:29:c6:73:95:43:bc:ee:
         89:b3:a2:df:03:e2:de:83:cf:bd:6e:c2:12:14:72:03:92:56:
         a8:ea:b3:18:fe:bf:8a:96:7c:7a:7d:9f:91:2b:a6:18:b8:01:
         94:3a:ac:13:c5:a7:75:7d:4c:a6:a5:2e:90:fe:89:8c:1a:71:
         32:46:40:f9:53:d4:11:5a:4d:f2:64:48:5d:cd:b7:65:59:8e:
         ed:18:a4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:38 2026 by rpki-client