Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
File:                     e33o0TUz0eNrETWl0umm_zmFzaI.mft (raw, json)
Hash identifier:          UV3jU34JLrol5US9TcYkyTLW66ptffXnEDaJdxofr8E=
Subject key identifier:   84:E0:99:2D:0D:70:BE:39:BD:04:61:B7:72:61:B1:F0:05:B3:A6:96
Authority key identifier: 7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2
Certificate issuer:       /CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
Certificate serial:       019E1E34E5D9E6E1A35BB987ED42E9015640
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
Manifest number:          08F7
Signing time:             Tue 12 May 2026 22:00:43 +0000
Manifest this update:     Tue 12 May 2026 22:00:43 +0000
Manifest next update:     Wed 13 May 2026 22:00:43 +0000
Files and hashes:         1: GGptaUCk5HswofHGiRhoLDBrSsk.roa (hash: a8zAb+DGkHkBUoReMwMr6C/BLIezYKFQteBzpzxwQ3I=)
                          2: e33o0TUz0eNrETWl0umm_zmFzaI.crl (hash: gvWNGu+2Yld8KMaTEZXaLO5CjLusgJBx6uJIBvDvgjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:34:e5:d9:e6:e1:a3:5b:b9:87:ed:42:e9:01:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
        Validity
            Not Before: May 12 22:00:43 2026 GMT
            Not After : May 13 22:00:43 2026 GMT
        Subject: CN=84e0992d0d70be39bd0461b77261b1f005b3a696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:59:4e:e1:03:8c:b7:1d:d4:74:fa:bf:3e:
                    16:90:e2:8d:25:0b:41:82:a1:fc:8e:28:24:c4:af:
                    ec:5c:5f:05:29:cb:d7:dd:1a:5f:43:07:ae:82:64:
                    96:c1:e2:83:e8:1e:33:86:d5:18:6c:c1:3c:3a:1a:
                    de:1e:1a:42:40:6a:fe:5c:b6:35:c1:e2:58:38:6f:
                    ed:9f:84:22:cf:f9:b5:76:8e:1e:f2:0c:3a:49:d8:
                    dc:1c:68:2b:ae:a0:30:03:67:df:ab:9f:54:4c:d5:
                    25:44:3b:51:23:5e:b8:c8:c3:ed:42:e5:e9:5d:b5:
                    ea:40:c1:ad:57:e3:f5:71:6e:0d:62:63:e1:cd:59:
                    1d:bf:ca:e2:41:08:cc:5d:25:c5:f0:b2:9c:3f:7d:
                    8f:b8:3b:53:ca:08:e3:98:7a:11:f7:6f:91:c5:55:
                    02:09:94:86:4e:7f:b8:46:01:6a:5e:1c:1d:f5:ce:
                    49:79:c2:e8:d7:fe:03:35:d6:fe:bb:7a:55:fb:a2:
                    78:6a:8e:a0:7a:1e:c8:02:33:a5:da:ba:ed:38:d1:
                    79:25:f3:78:cf:0a:f3:f4:5e:b5:cf:69:44:74:72:
                    04:f9:d9:c1:e2:53:64:5a:94:60:8f:d7:8f:f9:c4:
                    77:05:2a:9b:da:fd:ca:10:51:f5:46:a8:95:69:ab:
                    5d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E0:99:2D:0D:70:BE:39:BD:04:61:B7:72:61:B1:F0:05:B3:A6:96
            X509v3 Authority Key Identifier:
                keyid:7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e2:3d:b1:f9:38:31:89:91:73:c3:09:ab:4a:55:ef:21:df:
         a2:50:49:48:31:c4:5f:6d:ee:fb:55:e3:0e:fc:c0:4f:26:9e:
         e7:10:c0:8d:53:4e:54:7e:2c:87:90:e3:8b:cb:51:8b:83:27:
         85:e0:5f:8e:58:f7:7e:61:52:5a:ea:b9:df:39:0b:90:9e:97:
         3a:50:41:7d:ed:0b:c4:ab:64:da:11:94:37:dc:57:d6:44:0a:
         e9:52:84:6e:3b:9e:fb:a2:52:89:43:90:97:34:31:cb:78:5c:
         22:83:2d:93:10:de:09:db:0c:04:cf:3c:40:08:82:20:bf:22:
         de:db:4c:4c:e3:7a:15:e7:cc:f2:64:0e:05:8e:ef:e3:82:eb:
         bc:57:9d:5f:c2:96:2b:97:05:a9:e0:ad:0c:c1:4f:80:92:5f:
         52:7c:47:e6:b5:40:c4:d1:a2:af:d1:b1:00:d2:bc:ae:6f:ac:
         97:d8:95:ce:04:3f:e5:e4:4f:ca:d3:f1:60:9f:d6:c7:cf:0d:
         84:8a:4e:e7:c6:04:72:71:4a:5d:f1:1d:5f:e9:a1:3e:b0:14:
         bd:4f:0f:fe:bb:a3:11:cf:8d:f3:f5:cb:d9:8a:81:e3:3b:27:
         81:7a:6e:b4:aa:27:fc:86:80:dc:bc:58:f3:e5:7b:6e:8d:a1:
         b5:49:ff:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:15 2026 by rpki-client