Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
File:                     v7VI2FclEEUn875Hl2tnRzmuLxM.mft (raw, json)
Hash identifier:          IR61bpuq+Z53fqRmTO9MhsHLaDoM3jVTC9neRFjfib0=
Subject key identifier:   55:76:8D:B4:38:C4:5C:43:50:50:3B:E3:0B:1F:D1:B7:BE:74:99:76
Authority key identifier: BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13
Certificate issuer:       /CN=bfb548d85725104527f3be47976b674739ae2f13
Certificate serial:       019DA309D422D51C146FC97D5961A5E80C4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
Manifest number:          18C7
Signing time:             Sun 19 Apr 2026 00:00:23 +0000
Manifest this update:     Sun 19 Apr 2026 00:00:23 +0000
Manifest next update:     Mon 20 Apr 2026 00:00:23 +0000
Files and hashes:         1: axLujUagH_dCn6TXOtWPBDE3Szo.roa (hash: jt/V9NWMIChAooozTeAvM5YQ3gDwItihIdrwd9f6W0g=)
                          2: v7VI2FclEEUn875Hl2tnRzmuLxM.crl (hash: /+N1Qlq73QnDAX9V2bkdmNcETa+4I8HewgAd6UxG/ik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 00:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:09:d4:22:d5:1c:14:6f:c9:7d:59:61:a5:e8:0c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb548d85725104527f3be47976b674739ae2f13
        Validity
            Not Before: Apr 19 00:00:23 2026 GMT
            Not After : Apr 20 00:00:23 2026 GMT
        Subject: CN=55768db438c45c4350503be30b1fd1b7be749976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:66:35:5e:07:eb:9e:4d:f6:c1:d0:4b:b0:e9:
                    6a:0e:92:91:24:62:a7:3d:2f:cf:f3:66:80:6c:5e:
                    24:ec:fa:94:eb:ac:cf:6d:b5:b5:af:87:76:51:c6:
                    84:ca:28:a7:fb:6c:90:76:30:19:6a:b9:4b:56:95:
                    76:8b:f1:4f:6f:24:ce:8a:cb:79:a5:b7:e3:57:b1:
                    99:73:1e:9c:a3:28:3a:f4:b6:e4:27:cd:36:ef:11:
                    d5:2f:21:94:f2:66:8b:94:30:1c:a6:40:ff:f2:27:
                    8e:6f:68:a9:e7:2b:bc:5c:7b:68:97:72:11:a7:2f:
                    dd:45:08:3e:d2:b6:38:fa:34:73:26:d3:3e:49:df:
                    dc:a7:40:08:52:fe:06:a2:2a:4e:12:1a:cd:c1:4f:
                    09:50:ca:76:17:6a:a6:fc:9a:91:71:83:8e:c3:e8:
                    4f:c8:c9:b8:7d:54:86:38:cd:d5:2a:25:98:de:61:
                    cf:bb:7f:39:8a:40:38:c3:40:f2:3a:a4:6a:ce:95:
                    e3:df:77:62:dd:79:91:16:80:b4:41:18:ab:97:7e:
                    9f:82:18:31:19:dd:08:e1:78:28:ac:16:76:67:95:
                    6b:94:a6:c3:e2:8f:09:14:55:8f:ea:f0:50:52:4e:
                    ca:6d:8a:9f:2b:46:dc:8f:08:02:97:71:bf:2b:af:
                    a0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:76:8D:B4:38:C4:5C:43:50:50:3B:E3:0B:1F:D1:B7:BE:74:99:76
            X509v3 Authority Key Identifier:
                keyid:BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:4f:4a:09:0b:74:1b:ea:0c:71:5a:f4:b7:9e:63:02:69:a8:
         81:a4:07:89:7e:fa:ce:a4:07:66:69:08:c3:da:6c:6d:f7:94:
         f5:72:92:da:bf:26:8a:a1:58:98:4f:41:61:94:68:39:51:a7:
         07:73:3c:ae:2e:6f:16:1b:ec:62:a5:75:4e:18:9f:bd:22:99:
         6c:37:ad:c8:7c:e1:8c:2f:70:5c:6a:b3:ac:cc:fb:4b:b7:2f:
         4a:ee:58:ba:aa:2c:ea:58:65:7f:cc:ab:b8:3a:19:66:f1:d4:
         19:2b:75:35:c0:ae:c6:9c:2d:d9:91:e5:58:96:1e:a8:fb:80:
         ce:30:7f:24:a7:85:c0:fd:76:e2:cd:05:72:6e:61:c3:1c:29:
         2c:47:91:8a:bf:af:6b:fa:1d:4a:ca:89:f9:f8:40:8e:82:ac:
         0c:d4:0a:c2:6c:fa:ac:21:cc:ec:21:fe:f1:7d:61:17:16:0c:
         72:cb:73:26:6f:97:c0:01:a9:e9:82:ed:ef:f0:ff:8c:c7:c6:
         fe:27:be:59:09:3c:49:6c:5a:61:2d:b8:ca:17:8e:0d:e7:03:
         5c:87:29:eb:90:43:3e:d8:06:d4:c4:3c:30:11:e1:ec:f5:45:
         f4:da:cb:d8:6b:7a:4d:3c:b9:06:fc:fa:84:94:43:6e:ac:ff:
         24:e6:d9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:28:45 2026 by rpki-client