Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
File:                     7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft (raw, json)
Hash identifier:          K7cq1VZ0VRHTGevvbAVFtQ/WfZ9+qqVUGRsOD7L/h+M=
Subject key identifier:   52:42:11:39:C6:9D:2E:BA:4B:E9:88:95:5A:F1:E8:E3:14:F4:6E:BB
Authority key identifier: EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36
Certificate issuer:       /CN=ef24e3b328d1191efe115521c6fec6adb556dc36
Certificate serial:       019D984FAA1426E552F5E7401831DA754F35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
Manifest number:          0F4D
Signing time:             Thu 16 Apr 2026 22:00:50 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:50 +0000
Manifest next update:     Fri 17 Apr 2026 22:00:50 +0000
Files and hashes:         1: 7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl (hash: 7hiHLtfvh4Klr2nH/0XkZ2oL6LrsiXupd0tFacuTlok=)
                          2: rC0spcl-pdrTbDRKzG5ofIHYKcI.roa (hash: lCBqHzXRs9Yu91X4wPPiBVftfQRsm2XGgS23G8xgYj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:aa:14:26:e5:52:f5:e7:40:18:31:da:75:4f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef24e3b328d1191efe115521c6fec6adb556dc36
        Validity
            Not Before: Apr 16 22:00:50 2026 GMT
            Not After : Apr 17 22:00:50 2026 GMT
        Subject: CN=52421139c69d2eba4be988955af1e8e314f46ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:12:ea:34:30:23:c9:cd:f7:d1:c2:a9:42:16:
                    3c:35:97:0f:49:61:1e:85:05:c7:35:b1:f3:3e:f5:
                    83:41:1a:b1:67:f4:6e:46:8f:d7:e3:4f:e2:f9:ba:
                    e4:84:67:85:2e:62:a0:34:27:ec:68:f1:ed:26:e0:
                    7e:81:47:74:38:c3:2d:ce:02:65:cb:ff:57:24:c3:
                    c0:b2:bc:c0:44:1a:b0:31:e2:e8:d9:0a:d1:5c:d4:
                    91:63:cc:ae:bc:1c:f6:40:89:a8:02:83:49:db:68:
                    17:7e:f0:8a:3d:ac:aa:8f:d7:30:05:9c:98:dc:0f:
                    41:1a:a4:42:44:d0:0a:27:84:54:b0:89:84:64:eb:
                    37:9e:3f:bd:46:3c:f3:03:fb:e5:2e:ad:b4:19:7e:
                    56:42:95:0f:80:c5:21:4d:c5:05:d2:06:f8:d7:70:
                    31:60:b3:0d:07:c3:cc:06:b7:d4:09:80:cc:f0:2e:
                    37:59:4f:8b:85:0a:ed:45:98:70:c2:1e:85:fe:e1:
                    bb:61:6d:e7:c3:22:50:81:0d:09:65:ae:68:e5:4f:
                    5f:3a:de:07:7a:38:05:d6:0f:f4:1d:0f:67:e9:e7:
                    16:6b:c7:97:3a:a4:f7:d9:ae:d4:b3:a7:18:4b:f0:
                    56:31:7b:64:86:37:70:4c:c4:88:33:a8:33:1a:95:
                    25:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:42:11:39:C6:9D:2E:BA:4B:E9:88:95:5A:F1:E8:E3:14:F4:6E:BB
            X509v3 Authority Key Identifier:
                keyid:EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:29:2b:f0:6e:73:ad:55:0e:05:53:98:f8:62:b3:ae:f3:23:
         f5:f3:ba:ce:4a:3d:59:ba:d8:85:cc:b0:7e:b0:53:e5:3b:be:
         d8:88:e8:0e:a5:dc:ac:d5:3c:75:6e:76:41:7a:74:27:27:41:
         96:41:9e:89:a9:4c:6c:8d:02:16:4f:00:44:e2:21:12:60:f6:
         85:cc:5f:e8:58:e8:ab:fd:1e:4d:25:05:5c:63:5f:64:d7:17:
         ef:7a:1d:10:ef:ee:6f:21:f5:5e:8f:c1:46:55:93:93:c0:87:
         48:e7:4f:0f:b5:c0:57:d0:ad:dc:07:0a:ba:d4:b6:a3:dc:da:
         ba:de:36:40:b2:8d:28:f0:7b:79:4e:ad:e8:2e:2a:28:ef:2c:
         c8:84:34:b9:08:fe:67:23:c2:c9:46:ae:d1:8e:16:da:c7:e5:
         d5:72:63:6f:b3:73:3d:ad:71:14:69:2b:8c:1d:6d:f0:62:12:
         f5:2e:69:28:e3:60:b2:42:99:f7:af:31:55:ea:52:75:8b:57:
         65:44:bd:2f:fe:35:cc:82:47:2b:65:30:73:15:ad:b1:e5:a5:
         4a:99:b4:c8:bc:28:84:e4:85:17:9f:97:b7:46:2d:4b:57:9a:
         f1:fb:d9:b3:b0:f4:6a:fb:5a:6b:17:65:de:e8:24:34:bf:01:
         4b:95:36:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:16 2026 by rpki-client