Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
File:                     7W3VjHMPSQxsZTC3ULUY55Okh6U.mft (raw, json)
Hash identifier:          dJ7B4tXWORll/nSOQistk7WuKyGBWVx5Gcps1dTfIgk=
Subject key identifier:   93:12:90:EB:DE:50:9E:19:54:A5:CB:2A:85:79:54:D2:CE:1F:A5:29
Authority key identifier: ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5
Certificate issuer:       /CN=ed6dd58c730f490c6c6530b750b518e793a487a5
Certificate serial:       019E1E36175F45C08F9656D275751F2FAF78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
Manifest number:          0FEB
Signing time:             Tue 12 May 2026 22:02:01 +0000
Manifest this update:     Tue 12 May 2026 22:02:01 +0000
Manifest next update:     Wed 13 May 2026 22:02:01 +0000
Files and hashes:         1: 7W3VjHMPSQxsZTC3ULUY55Okh6U.crl (hash: eL6wwB9FuiK1BEzAN5E2LYbDsWekFaLbUqHaWxvt7U4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:36:17:5f:45:c0:8f:96:56:d2:75:75:1f:2f:af:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6dd58c730f490c6c6530b750b518e793a487a5
        Validity
            Not Before: May 12 22:02:01 2026 GMT
            Not After : May 13 22:02:01 2026 GMT
        Subject: CN=931290ebde509e1954a5cb2a857954d2ce1fa529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:4f:85:b3:54:cb:4b:98:d4:fa:50:19:3c:
                    df:b5:90:56:3f:1c:ed:e4:90:65:27:00:19:b2:5b:
                    1f:64:a8:41:6c:4a:e2:37:0f:19:c4:e9:96:e2:d7:
                    1e:35:57:f5:49:87:0e:65:a0:e1:ed:47:90:84:11:
                    9e:55:d3:08:0f:a9:a6:55:45:65:93:f1:7e:9a:e7:
                    74:89:6a:7a:38:23:1b:15:3b:7b:dc:5e:9c:5c:0a:
                    c0:39:26:0e:c0:f5:f3:8a:16:a5:30:2c:7c:7f:32:
                    61:66:40:c1:f2:71:39:d3:da:31:2f:8e:86:42:3d:
                    49:1d:b1:a2:da:73:fa:bf:bf:c9:85:e8:d9:03:cf:
                    be:a7:30:d4:8a:65:76:1e:ed:46:01:3d:fd:5e:a5:
                    95:81:22:1f:b0:b3:2e:18:43:50:49:92:da:18:99:
                    14:df:de:31:5b:8e:8f:b0:af:ae:fc:b3:b9:8f:dd:
                    eb:92:b8:b1:59:30:56:dc:53:dc:0e:d7:ea:84:9d:
                    66:66:77:5a:22:b6:ba:34:05:22:d0:d0:fc:27:9a:
                    20:c2:c5:05:1d:23:2f:53:95:b0:2f:14:95:4b:7d:
                    43:18:57:27:79:1a:d6:b5:39:3d:c2:45:df:43:cd:
                    8e:75:31:28:bf:78:af:7e:fb:15:26:d9:0d:68:37:
                    cb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:12:90:EB:DE:50:9E:19:54:A5:CB:2A:85:79:54:D2:CE:1F:A5:29
            X509v3 Authority Key Identifier:
                keyid:ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:47:04:35:1a:ec:5e:a6:3b:0f:01:4b:79:4e:5e:22:f3:de:
         47:80:8d:03:11:af:4d:2b:5c:97:b5:df:f9:e7:61:34:f0:10:
         e8:ea:30:b5:f5:cb:71:a1:69:a1:0a:ee:6b:60:2e:a5:0d:bc:
         7a:0e:97:8d:00:d0:13:0c:5f:fd:db:40:4a:ff:31:33:0c:10:
         29:58:dd:88:8f:c2:cb:40:4a:3d:58:6b:58:31:18:9f:f0:65:
         31:7d:3b:7d:1f:bd:a0:37:22:81:2f:f3:45:d3:be:b1:75:42:
         47:c1:37:86:28:af:25:13:6d:d5:14:77:9c:4d:35:1f:cb:db:
         be:00:1c:8c:c0:6a:f5:67:0c:2a:04:94:c3:73:52:56:08:34:
         a1:53:03:e7:83:a7:62:3e:ec:44:ab:8d:db:0c:fb:eb:8a:99:
         4d:c3:ae:64:8f:1b:98:8c:ca:e4:14:fc:08:fe:6d:bc:19:70:
         e6:c1:b3:9e:f9:ea:c7:ca:39:0f:58:a3:06:b4:12:38:d0:ae:
         32:a7:a1:50:d9:9f:0d:7a:c7:83:ce:e3:2b:cc:6b:24:b9:e2:
         0e:2c:7e:92:48:17:66:eb:cd:99:75:4a:3b:4e:4b:a7:27:e5:
         8c:ef:26:4f:35:0f:b1:e4:b3:89:23:eb:2f:11:86:ba:56:37:
         f3:b9:7e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:30:39 2026 by rpki-client