Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
File:                     7qq8oRa05zqZRKuXAs-YZleANYA.mft (raw, json)
Hash identifier:          +0qBzPHOBfCdJrOo2JECdz6NUePFLbdXBOZvhJf94dM=
Subject key identifier:   39:D8:86:C5:AA:0F:9D:26:EA:19:EC:ED:D9:5C:9E:6C:B5:E0:E3:7B
Authority key identifier: EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
Certificate issuer:       /CN=eeaabca116b4e73a9944ab9702cf986657803580
Certificate serial:       019EBF913EFCD62AD9B9093E9D0A89C084E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
Manifest number:          05A3
Signing time:             Sat 13 Jun 2026 06:00:27 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:27 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:27 +0000
Files and hashes:         1: 7qq8oRa05zqZRKuXAs-YZleANYA.crl (hash: U0NmZt0KabuoxF9E/y70JZO4fGCNdJbN8p/5bNXBYSg=)
                          2: QsP30C5AyyrplhJOQtwBFKHc2pI.roa (hash: 1rl1zPT5VgUb8N7x1I4JvxDOw2OsxnlXtnTYVUm9hGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:3e:fc:d6:2a:d9:b9:09:3e:9d:0a:89:c0:84:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeaabca116b4e73a9944ab9702cf986657803580
        Validity
            Not Before: Jun 13 06:00:27 2026 GMT
            Not After : Jun 14 06:00:27 2026 GMT
        Subject: CN=39d886c5aa0f9d26ea19ecedd95c9e6cb5e0e37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:13:ee:66:6c:72:c6:17:2d:d3:6c:ff:68:47:
                    cd:8f:57:05:c3:05:0c:82:e5:82:eb:54:82:26:fe:
                    aa:07:65:a9:13:10:97:5c:fa:54:4a:33:40:4e:6f:
                    27:c9:ca:d5:3f:2e:d7:b2:62:84:d3:83:a8:68:dc:
                    2d:fb:a8:3a:de:bc:58:c0:69:c5:d5:96:65:cc:9a:
                    fe:8e:ef:30:58:27:e9:2a:47:39:11:d0:47:6a:51:
                    b8:61:0d:28:9c:42:2d:72:9a:14:1a:58:12:2d:d5:
                    8e:de:26:f2:19:d3:17:53:9e:40:8f:73:f2:cb:2c:
                    54:cb:19:ab:58:94:37:07:a0:3d:a5:23:3d:a9:93:
                    07:94:62:08:9f:ce:fb:b5:f7:76:ea:a1:ab:63:b4:
                    b2:68:8e:2c:de:86:09:8c:98:fc:de:16:4d:a3:08:
                    75:94:87:67:0e:49:f6:46:c7:49:29:dd:16:9a:12:
                    da:7f:48:d9:f7:02:e2:98:07:83:50:91:58:df:e8:
                    99:a8:65:29:3f:48:1b:8b:ab:46:b3:a7:a0:69:0d:
                    cc:2b:c7:13:6f:50:b9:69:9b:42:11:ca:7e:4b:cf:
                    d1:fd:08:5e:35:2e:a9:54:9a:e0:1e:12:cc:9f:8e:
                    a0:58:66:83:5e:40:d1:db:f8:5b:d9:f0:69:3f:1e:
                    fc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D8:86:C5:AA:0F:9D:26:EA:19:EC:ED:D9:5C:9E:6C:B5:E0:E3:7B
            X509v3 Authority Key Identifier:
                keyid:EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:05:41:11:83:bd:a2:77:ca:b4:a4:c1:80:af:1d:00:cf:e7:
         1d:54:d1:52:b3:97:1d:11:d9:43:8f:c8:d7:56:12:16:23:54:
         75:e9:8c:d5:c3:c8:b0:cd:6b:fb:dd:a3:69:f4:84:03:e8:40:
         ad:f8:0c:ca:e2:10:9b:49:60:15:79:24:af:c0:07:e2:1e:8e:
         a1:21:8e:42:51:46:76:f5:ac:d8:bb:9d:05:f9:64:73:0f:e8:
         82:9f:cf:9c:92:fd:03:a8:3f:35:bc:55:74:60:d1:1c:5f:8c:
         e6:6f:68:8e:14:4d:6f:84:80:30:91:8b:6d:17:9c:be:3c:33:
         05:77:04:a4:be:60:10:b0:17:68:ea:5d:53:22:e9:6f:2d:1c:
         e9:a5:ee:ab:e8:97:69:c6:d3:54:f0:72:0d:49:42:60:e1:b3:
         2b:a2:e9:d0:c4:50:1e:af:21:0e:2b:2e:65:6d:1d:36:24:f3:
         8b:9d:24:98:0f:7b:44:da:41:2b:96:78:03:3b:f3:d3:13:be:
         cb:15:27:af:d3:bd:74:2f:44:c9:41:18:a3:19:1f:5f:a7:1c:
         26:6c:b1:3d:4a:2f:74:d4:82:ac:09:ad:73:b3:27:fa:4b:29:
         21:e0:0b:d0:8e:3b:a3:47:c6:30:01:d1:44:3b:03:0b:d9:15:
         47:d1:2e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:40:59 2026 by rpki-client