Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
File:                     7LLMRABmS6sLCRvDmYwN4f73FZs.mft (raw, json)
Hash identifier:          4UoyYRoLKX4ydzuuaszBpmmIpPAZGHFUc22tuGQGd4s=
Subject key identifier:   3D:31:18:76:B6:24:1B:01:EE:D4:46:FC:3E:70:FE:E9:1C:B3:13:E8
Authority key identifier: EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
Certificate issuer:       /CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Certificate serial:       019E1C476764DBEE33A258D8A624063A083E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
Manifest number:          12CD
Signing time:             Tue 12 May 2026 13:01:41 +0000
Manifest this update:     Tue 12 May 2026 13:01:41 +0000
Manifest next update:     Wed 13 May 2026 13:01:41 +0000
Files and hashes:         1: 7LLMRABmS6sLCRvDmYwN4f73FZs.crl (hash: Ouy/TroVFdrCvSX3Nnrz903zluOx0eF+K6phhhEpgY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:47:67:64:db:ee:33:a2:58:d8:a6:24:06:3a:08:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
        Validity
            Not Before: May 12 13:01:41 2026 GMT
            Not After : May 13 13:01:41 2026 GMT
        Subject: CN=3d311876b6241b01eed446fc3e70fee91cb313e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fe:ea:2f:07:69:4f:b3:c3:9d:a5:f4:cd:ac:
                    39:f1:15:c3:da:79:b8:31:16:c9:99:b4:c0:62:93:
                    f3:f8:a3:63:a3:57:a5:be:d5:d9:08:7a:52:0b:c9:
                    01:f9:9c:40:8d:14:35:6e:d0:a3:87:d0:b0:75:55:
                    e3:62:08:b8:f9:7e:84:78:00:5c:33:e6:77:04:16:
                    20:87:80:78:13:ff:46:89:89:45:fe:76:f6:25:4f:
                    68:9e:27:63:1d:d0:f2:54:9c:f5:fa:e3:f5:8d:7e:
                    3b:b8:dd:d1:a5:e3:79:4d:79:d4:6b:40:8f:8f:9a:
                    46:33:d8:6c:96:15:02:03:26:e3:57:14:c4:2f:43:
                    ce:1e:a0:4f:95:80:85:28:13:2d:2f:17:37:cd:9e:
                    b3:bf:f9:fe:72:db:38:eb:d9:90:4f:79:28:8b:67:
                    7f:a8:0d:19:05:25:54:fe:8b:41:d9:f8:10:66:ab:
                    c9:b4:e8:6c:e2:5f:54:61:dd:c6:2e:ad:a8:5e:f1:
                    57:40:74:d8:dc:34:39:82:09:24:3a:f9:06:c5:a8:
                    95:51:11:b8:32:69:77:55:1f:45:b4:1b:73:45:6c:
                    c2:96:a8:84:fb:67:72:47:a7:41:bd:07:f0:a8:b8:
                    05:cd:01:66:f2:c5:f4:87:8a:2d:9c:94:38:d8:41:
                    ad:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:31:18:76:B6:24:1B:01:EE:D4:46:FC:3E:70:FE:E9:1C:B3:13:E8
            X509v3 Authority Key Identifier:
                keyid:EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:8b:d8:9f:7c:e3:14:76:1c:6c:c2:49:3d:82:81:19:dd:02:
         3a:e0:4c:e2:ad:81:a0:29:c8:2b:2c:66:02:f8:19:94:2c:d2:
         02:c3:11:f1:cd:a5:0f:1b:8f:75:27:5c:85:c1:89:63:30:53:
         20:eb:99:b3:9e:ea:43:75:61:06:e5:67:65:a7:02:f5:f6:22:
         3e:2d:6e:04:f4:18:8c:68:a9:07:c8:c6:ff:59:89:5d:15:f3:
         88:44:9d:3a:af:99:36:a1:37:19:bc:b6:7a:8e:8f:22:e0:2b:
         15:f4:27:c3:6f:4b:08:e3:37:6d:40:ea:1e:17:a3:54:44:8d:
         76:be:78:90:ce:6f:1d:4e:34:3f:2b:2a:fd:a8:3e:8e:8f:07:
         13:bc:e7:4c:bf:3c:b7:df:6d:ca:47:5d:7c:64:ec:d5:f6:0d:
         3f:8e:cb:04:b2:eb:5f:24:93:a3:aa:4a:de:88:44:43:c7:08:
         00:fa:5e:39:72:f4:81:c2:be:81:fd:c7:06:2c:48:fa:81:c2:
         d7:ba:c5:87:13:15:31:c0:05:99:77:f0:a8:84:9e:58:2e:ea:
         02:91:2e:c8:76:06:bc:c1:85:54:c3:9d:73:ab:d2:64:00:ff:
         c1:45:4e:14:94:05:ed:cf:3f:5f:2b:0d:3f:49:e1:1a:7e:38:
         76:3e:d9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:12 2026 by rpki-client