Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
File:                     etB83meC_U_FaIV-hIRlW1AkhxA.mft (raw, json)
Hash identifier:          nJKlxVsdErlOwC/EGk3x6AwWIkWEhp/vn8w9axngTqw=
Subject key identifier:   7E:6A:6C:DE:09:52:57:DA:82:96:0D:9D:BD:54:50:7E:2F:94:89:13
Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
Certificate issuer:       /CN=7ad07cde6782fd4fc568857e8484655b50248710
Certificate serial:       019E1EDA4E01ACBEC2B4A84E89791A930C8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
Manifest number:          071B
Signing time:             Wed 13 May 2026 01:01:23 +0000
Manifest this update:     Wed 13 May 2026 01:01:23 +0000
Manifest next update:     Thu 14 May 2026 01:01:23 +0000
Files and hashes:         1: eCo9qXRcDZLgJlgoHLS9NExTbx4.roa (hash: BYg8Ba7NDfA7mgNndMx+S8c/mZhCBPail+1jI3QYxnk=)
                          2: etB83meC_U_FaIV-hIRlW1AkhxA.crl (hash: IAi0uLM98SicguneqehkIuFlqBKwpm9cFvTZqp+deFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:4e:01:ac:be:c2:b4:a8:4e:89:79:1a:93:0c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710
        Validity
            Not Before: May 13 01:01:23 2026 GMT
            Not After : May 14 01:01:23 2026 GMT
        Subject: CN=7e6a6cde095257da82960d9dbd54507e2f948913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:50:6b:2d:04:cc:2e:99:0c:c6:a8:27:89:
                    e8:e6:75:b9:a0:ca:d6:8d:15:08:a7:f8:48:ce:1e:
                    7b:8a:09:99:56:50:ea:69:6b:70:d7:71:49:8a:4b:
                    b2:7f:aa:cc:13:27:1f:01:5f:45:25:77:98:1e:22:
                    90:c1:02:84:12:a2:ea:60:24:61:47:2a:23:60:60:
                    f6:b5:54:5c:af:ca:f0:d5:ea:9a:88:cd:63:3e:9a:
                    67:39:23:6a:1b:c5:3c:42:d1:50:a7:e9:9e:da:61:
                    b9:60:45:8a:1f:70:30:26:68:5e:5a:45:f3:a0:d9:
                    0c:ee:bb:1d:7f:c3:55:c5:68:2a:33:8a:75:19:49:
                    15:5b:3f:32:e7:20:5f:fe:6d:a1:07:62:6f:c8:64:
                    58:1d:88:62:07:5b:50:11:bf:8f:49:f5:c4:5f:c6:
                    b4:f1:aa:a0:b5:e7:4b:c7:d2:ef:2d:ef:0a:6e:39:
                    2b:b8:4d:6b:33:4c:ac:6a:3a:d3:ea:94:4f:db:d1:
                    91:89:0a:59:48:2c:08:bb:2d:45:b9:59:ef:fd:c5:
                    01:bd:c3:7e:0c:19:fa:51:a4:a7:89:28:2f:7f:ef:
                    b1:18:41:24:7b:ed:55:32:24:41:77:6d:8e:ad:46:
                    04:ed:75:71:03:87:7f:83:58:38:07:34:66:69:e0:
                    c1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6A:6C:DE:09:52:57:DA:82:96:0D:9D:BD:54:50:7E:2F:94:89:13
            X509v3 Authority Key Identifier:
                keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:96:82:22:11:02:ea:09:2a:50:b3:45:ef:3c:71:f1:1b:6a:
         39:13:04:b8:ee:6e:31:0a:08:38:26:6a:d8:a4:1f:37:05:f4:
         f9:0a:19:b6:f5:1c:d6:33:54:2a:d7:78:49:74:a3:a7:39:04:
         7d:76:01:2d:6c:b4:54:5f:c8:7b:3b:54:e3:52:e7:63:89:45:
         ff:e4:b0:de:93:78:9e:52:0e:d6:0a:f1:da:f8:10:e3:f3:66:
         4e:ed:c4:77:48:36:c6:f6:1f:48:da:6b:74:9e:a4:46:db:aa:
         84:10:fa:ba:2e:58:2d:08:b1:b1:dd:21:22:ac:2e:e7:40:c1:
         d5:d0:f3:ed:b8:01:2f:8d:5d:64:2e:fa:f5:fe:f2:43:20:b9:
         4d:43:ae:44:4c:2b:5f:b1:4b:ff:0f:d4:b8:d7:83:2e:3b:71:
         27:17:62:24:b6:dc:b6:20:27:ae:8d:b8:e6:71:d1:5f:c4:a8:
         e2:89:28:5c:f9:e6:bd:d5:70:14:e6:3a:ec:9e:aa:ac:15:7f:
         82:a0:8e:c5:41:63:d0:21:69:0c:64:34:7f:00:1c:43:37:5e:
         48:8e:f9:7a:5a:1c:6c:31:5a:df:29:fd:ed:e1:13:d8:8a:f3:
         c7:42:c0:bf:f0:73:06:66:c9:50:59:62:76:c5:86:e2:40:23:
         a7:28:6e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:33 2026 by rpki-client