Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
File:                     7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft (raw, json)
Hash identifier:          qfj09fjexgyw86paxDYVOSavWwyhi5aU0WGAyl4t1Fg=
Subject key identifier:   BB:64:F1:AE:C6:D9:E1:E5:57:87:6B:16:7B:42:0E:1C:61:2B:D5:6C
Authority key identifier: EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
Certificate issuer:       /CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Certificate serial:       019E1D90152B86CB634B25E537E04CACAF3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
Manifest number:          1665
Signing time:             Tue 12 May 2026 19:00:42 +0000
Manifest this update:     Tue 12 May 2026 19:00:42 +0000
Manifest next update:     Wed 13 May 2026 19:00:42 +0000
Files and hashes:         1: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl (hash: H05W2JDWE4bm/ugYjtP7BJnfmV/hzVCeQmbGM8rKz9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:15:2b:86:cb:63:4b:25:e5:37:e0:4c:ac:af:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
        Validity
            Not Before: May 12 19:00:42 2026 GMT
            Not After : May 13 19:00:42 2026 GMT
        Subject: CN=bb64f1aec6d9e1e557876b167b420e1c612bd56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:be:2c:a7:73:4d:23:23:be:5a:28:42:4f:50:
                    c9:2d:72:52:9e:0c:58:40:26:c3:f6:a9:26:7c:c9:
                    8b:cc:94:a7:90:4a:6e:41:0b:bf:00:3d:b9:74:59:
                    46:65:00:1e:c7:5b:fa:9a:96:2f:a2:e9:50:ef:23:
                    fb:3a:2a:b3:bd:e3:92:30:35:d3:3f:4e:f1:eb:79:
                    04:23:4b:dd:6c:b4:32:d4:f0:70:25:f7:aa:05:4f:
                    0b:72:a5:b3:a5:41:2e:bf:44:4f:f0:f7:2e:1d:41:
                    65:83:c4:62:53:b3:0e:d3:d4:fd:85:22:ef:e4:9f:
                    9f:0e:e1:26:13:30:f7:c0:08:98:5b:46:cb:7e:79:
                    36:35:92:90:c4:cb:30:b4:60:93:7b:bf:95:cf:c0:
                    60:8d:18:be:75:86:0c:cc:dd:45:85:12:d2:11:f4:
                    df:26:45:67:fa:21:8f:47:bc:1d:eb:2c:59:79:84:
                    a8:83:d6:2a:2c:73:45:ba:05:3a:34:dd:42:31:9e:
                    bf:d9:d4:8b:1f:7b:63:88:97:d9:c6:8f:ba:f4:72:
                    6a:aa:8f:31:c4:df:54:b9:41:12:37:3f:bb:c1:3d:
                    1c:87:25:6d:e9:69:4c:29:b3:0b:95:df:d1:08:58:
                    8c:a6:a1:86:43:5a:7d:62:9d:90:76:13:5a:54:48:
                    dd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:64:F1:AE:C6:D9:E1:E5:57:87:6B:16:7B:42:0E:1C:61:2B:D5:6C
            X509v3 Authority Key Identifier:
                keyid:EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:71:b7:34:ba:97:92:e5:b5:2c:f4:60:f2:e7:1a:a0:07:3f:
         b2:7f:3f:8e:55:6e:8f:cc:e2:89:f1:20:ca:29:5b:5b:a9:eb:
         40:f6:68:b4:d7:ca:dc:46:a4:df:79:5c:ad:ee:da:14:27:75:
         8c:02:59:69:0e:a7:1c:71:23:54:f7:53:65:5d:5b:34:17:b6:
         17:a3:7e:0e:b6:cb:30:dd:1f:d2:7f:56:ab:48:75:a4:97:cf:
         d6:7a:48:ec:eb:8c:80:22:f6:e3:ab:df:63:a4:16:fb:8d:f7:
         36:0f:99:36:72:37:39:4e:3c:f8:22:fa:28:9f:29:ca:8e:56:
         ef:92:fb:53:78:3e:25:88:81:de:db:74:18:91:04:ed:f6:9f:
         7a:a0:58:e9:db:f2:5e:59:05:3b:5d:e5:c9:da:21:6f:56:3a:
         61:50:27:3e:4e:e7:c9:b6:73:c2:01:af:7a:4d:cd:a9:0e:a8:
         ad:0b:f6:ec:cd:49:28:6e:50:70:d9:46:fc:0b:d9:e3:df:16:
         1d:8b:7a:0b:bf:3a:86:4a:8a:34:64:4e:47:c3:08:16:0a:f1:
         f7:8d:5f:39:1b:bc:39:f3:89:30:1e:11:f7:84:5e:62:ac:f7:
         a9:c6:b8:35:ab:4b:b7:7a:0c:14:75:99:5c:ef:d1:b4:da:5a:
         e8:a0:3c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:40 2026 by rpki-client