Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
File:                     1-uJ7jB3msWHHmKt7hRU9a6N5774.mft (raw, json)
Hash identifier:          jkZD6so7zQSCwUocnQLL2n00gmNn5f99YFU9QZWyOvw=
Subject key identifier:   E3:51:51:72:2E:31:5C:7E:94:5A:0A:E7:81:F9:85:45:6A:80:87:B7
Authority key identifier: FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE
Certificate issuer:       /CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
Certificate serial:       019D9C2CB02B043637C30C12C1CE21BEDA55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
Manifest number:          07EB
Signing time:             Fri 17 Apr 2026 16:01:07 +0000
Manifest this update:     Fri 17 Apr 2026 16:01:07 +0000
Manifest next update:     Sat 18 Apr 2026 16:01:07 +0000
Files and hashes:         1: 1-uJ7jB3msWHHmKt7hRU9a6N5774.crl (hash: Ck4T8OYb0nz6fA46n8m6uOs1w9s5CKaIalyEwLk35Eo=)
                          2: lRWtCCIDuQJq2Ldkhpx2iidtBtA.roa (hash: m3V7ZxeKJCHLbCgiwkcpzW9KXHJYWP9eJffVKGhevf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2c:b0:2b:04:36:37:c3:0c:12:c1:ce:21:be:da:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
        Validity
            Not Before: Apr 17 16:01:07 2026 GMT
            Not After : Apr 18 16:01:07 2026 GMT
        Subject: CN=e35151722e315c7e945a0ae781f985456a8087b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:58:48:38:5f:ce:c1:a8:00:17:e5:7b:20:8e:
                    5b:2f:27:b4:22:cd:fc:37:8d:f0:90:bc:c5:0d:eb:
                    55:30:dc:13:42:3e:22:01:14:37:3d:f3:73:df:ea:
                    9a:e2:55:e6:af:91:8f:77:c2:ef:29:79:ce:39:60:
                    dc:5b:a2:3e:14:e6:92:aa:a2:3b:2c:38:30:6a:bb:
                    e1:27:c4:82:47:9b:4e:0c:5c:65:73:dd:d5:88:c4:
                    28:69:df:fa:ab:98:f6:f9:5f:d0:e6:81:3c:87:ee:
                    46:70:e9:e2:a3:7d:75:7a:04:c6:9b:59:f0:6d:66:
                    1e:d6:c6:c6:0c:b5:26:2c:f2:5b:0a:8a:a5:04:70:
                    a5:20:90:a8:5a:bd:57:2c:cb:c5:04:c3:22:b2:63:
                    64:ab:07:98:5a:a1:e6:4f:b4:db:bb:a3:6f:44:28:
                    a6:b5:4b:b0:14:f0:20:c6:9d:4d:b0:26:0e:5e:ff:
                    13:b9:44:20:7e:71:27:8e:95:7e:26:20:ec:b5:0e:
                    6d:0f:59:e4:f1:f6:df:f7:d7:5a:8e:e6:b5:2d:b4:
                    8d:4f:73:59:b0:0f:bf:03:26:f6:33:67:53:d9:30:
                    4f:32:14:81:18:aa:fe:72:4c:4a:47:3a:2e:84:20:
                    fb:d2:1d:31:b9:0f:9b:f2:1d:4b:c2:48:5e:52:e9:
                    0c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:51:51:72:2E:31:5C:7E:94:5A:0A:E7:81:F9:85:45:6A:80:87:B7
            X509v3 Authority Key Identifier:
                keyid:FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:98:0b:16:eb:4c:c8:06:48:23:f5:a0:e4:55:72:3c:c9:e3:
         dc:ab:54:49:e6:a3:50:0e:ab:6a:13:e4:eb:ef:13:0a:0a:34:
         03:16:77:99:ee:cd:ba:51:ee:02:f9:17:d7:39:2e:ed:57:6b:
         39:11:79:64:60:a1:8a:83:ee:41:24:b5:17:00:de:a5:2a:b9:
         d0:e8:c5:cd:b8:f2:13:8e:17:9e:ed:cb:76:44:87:24:71:c2:
         b7:bf:7b:ca:12:b7:37:57:c4:65:5b:0c:59:7f:5a:6d:36:59:
         24:75:5f:cb:c1:d0:3d:70:62:75:a7:6f:df:45:2b:02:ef:66:
         91:72:c1:4e:ba:92:7b:85:26:5e:64:87:96:d4:f3:6f:21:8d:
         9f:f3:36:94:28:05:0b:4a:82:1f:9b:44:f6:65:3e:6b:05:6d:
         f2:fd:d0:61:1c:58:55:9f:a0:d3:b9:b9:97:de:bb:16:13:31:
         5e:94:fd:88:b5:7a:1f:8f:00:75:0d:75:26:b4:84:2b:6c:29:
         dd:ba:60:ca:ca:c4:28:54:8e:87:07:29:b3:86:bd:71:a4:3c:
         cc:2a:a3:20:79:f6:ba:50:a8:eb:1d:ec:a3:d8:56:48:64:5b:
         5d:d1:ae:07:37:9e:06:9b:ba:4e:5d:eb:6d:d5:d1:2a:a3:34:
         f8:a2:2c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:07 2026 by rpki-client