Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
File:                     E7myHACB0jxKIfYKCEp1y1-VvqI.mft (raw, json)
Hash identifier:          MKelZF6t6R3ECZwu04gR6AL58FqM0mvbTpfAeV9vmus=
Subject key identifier:   0C:0B:97:73:37:2A:56:60:78:7D:CC:DB:51:3C:D2:1F:46:6D:05:49
Authority key identifier: 13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2
Certificate issuer:       /CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2
Certificate serial:       019E205A62D329588FC7091509FEE8810527
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
Manifest number:          0A3B
Signing time:             Wed 13 May 2026 08:00:54 +0000
Manifest this update:     Wed 13 May 2026 08:00:54 +0000
Manifest next update:     Thu 14 May 2026 08:00:54 +0000
Files and hashes:         1: E7myHACB0jxKIfYKCEp1y1-VvqI.crl (hash: XIYF7t3ZE2gXbE9ghTKKWS2TZ2q1JMPQV5IBA3klA3I=)
                          2: nBaSbmtZu4NrFhfgsgrmwUZYBbg.roa (hash: TGjV+Bn0STBLHDURzdnH0m2eTzhKRI7/ugPawErQAOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:62:d3:29:58:8f:c7:09:15:09:fe:e8:81:05:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2
        Validity
            Not Before: May 13 08:00:54 2026 GMT
            Not After : May 14 08:00:54 2026 GMT
        Subject: CN=0c0b9773372a5660787dccdb513cd21f466d0549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:80:3b:39:ee:d7:81:16:95:d8:55:99:cf:ba:
                    c5:bb:9e:ac:28:57:0e:4a:38:8a:14:9f:cf:ff:b1:
                    21:4b:71:d4:4e:53:0e:4d:2b:85:6e:ad:8d:e2:75:
                    a8:53:98:31:80:53:91:ab:54:71:43:89:31:f4:c1:
                    25:e4:90:b3:11:94:f8:5c:91:d8:1e:e3:91:0c:a1:
                    2a:82:17:82:fd:f4:71:ab:c0:88:f6:e6:c6:05:90:
                    3a:23:a3:1b:07:c7:c9:3f:2a:86:e9:25:02:cc:d6:
                    4a:fe:c5:05:89:23:79:16:7f:78:c7:ca:42:87:7d:
                    36:93:05:e3:b9:95:d2:e9:ec:69:b0:65:55:da:c6:
                    41:b0:f8:3e:cd:b2:2e:b3:89:1d:2f:7f:65:10:9d:
                    d6:3b:9c:2c:f1:52:ec:3e:d7:fe:c2:af:d5:37:01:
                    8d:2a:3a:81:1a:90:b5:d3:3a:ab:1e:4a:db:61:18:
                    e7:a1:c2:e3:ca:dd:c3:ed:2f:43:56:fd:da:be:50:
                    4f:cc:b5:1c:a8:6f:3e:7f:cd:a9:28:eb:8f:fe:c3:
                    37:ca:28:77:37:ae:03:4d:23:1a:fe:e4:6a:b1:0a:
                    59:21:92:07:80:42:42:bc:64:12:d4:2d:ad:ef:88:
                    bd:be:a6:f3:c4:33:08:4b:2d:9d:b3:74:f6:7a:a5:
                    da:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0B:97:73:37:2A:56:60:78:7D:CC:DB:51:3C:D2:1F:46:6D:05:49
            X509v3 Authority Key Identifier:
                keyid:13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:0f:8b:78:b8:34:be:ad:98:78:73:14:79:f0:cf:45:c8:82:
         eb:34:50:22:01:0c:ad:33:4c:44:76:d3:b2:e4:d1:ef:19:54:
         c9:ca:eb:99:be:b3:47:a9:e0:9b:91:82:e7:bc:d8:a5:76:8a:
         6f:15:9c:8c:49:b6:52:7d:e3:ba:83:87:cf:d7:a4:db:c9:e0:
         30:f4:2b:81:4e:72:d2:29:61:34:90:94:8c:1b:84:27:25:4b:
         e6:20:12:91:fd:76:eb:e4:66:e5:cc:a7:46:2b:58:50:6c:bb:
         d9:b9:97:00:69:07:92:b4:ae:14:ac:04:3b:eb:a5:cb:50:33:
         61:44:a8:90:5d:ca:cd:87:6a:19:5c:70:73:0a:62:c6:a3:0d:
         b2:52:2b:01:75:88:a8:50:ec:84:9a:44:65:cc:0a:6c:1e:65:
         55:0f:af:fc:c6:fc:13:6d:64:9c:26:54:91:61:04:4b:d6:a2:
         b1:51:59:c7:af:d5:7c:a8:79:6e:f6:f6:98:cc:c1:dd:e0:7f:
         9a:4d:50:74:8c:30:98:e2:46:1b:0a:9b:9c:89:08:a1:c3:cf:
         c5:ee:b3:90:37:5a:da:5b:29:80:a3:79:c7:7e:0a:c6:86:1e:
         d5:84:e8:e5:51:e9:d0:5b:a8:8f:53:1b:57:4b:92:f3:15:2c:
         e0:1e:16:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:39:27 2026 by rpki-client