Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
File:                     7KM8lvAqnwvvJc04BqJGfKFlY3s.mft (raw, json)
Hash identifier:          27RQlYs+pZnlOhY1mRUFqiAgHKPKpaHrpfN3sOROUpE=
Subject key identifier:   8E:4F:8C:79:CD:B6:1E:19:EC:94:28:37:CC:76:B3:CF:F0:74:6F:CB
Authority key identifier: EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
Certificate issuer:       /CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Certificate serial:       019E1E35E7F2FA9A8E1B7EF5C0E37A78D167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 22:01:49 +0000
Manifest this update:     Tue 12 May 2026 22:01:49 +0000
Manifest next update:     Wed 13 May 2026 22:01:49 +0000
Files and hashes:         1: 7KM8lvAqnwvvJc04BqJGfKFlY3s.crl (hash: 2EcPAOuI0Z/F+SZDEHJ1T2QxVu4hWZRKsTLHw3wiMqU=)
                          2: C7fQ7Ve9jd1KjW3OO8oxR9QhSyI.roa (hash: R/aIjhVfQy4DuH2HYkC6Yf9teDlMa+Wx7kzzvb2vFZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:e7:f2:fa:9a:8e:1b:7e:f5:c0:e3:7a:78:d1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
        Validity
            Not Before: May 12 22:01:49 2026 GMT
            Not After : May 13 22:01:49 2026 GMT
        Subject: CN=8e4f8c79cdb61e19ec942837cc76b3cff0746fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:92:85:68:d1:72:f5:d5:3a:38:13:8d:96:02:
                    ea:f9:aa:fd:bd:5f:ae:0d:05:58:cc:c7:c3:2a:9c:
                    7a:7b:c2:dd:d7:e3:a1:19:42:05:43:c3:f5:da:81:
                    f3:65:45:9e:de:34:6a:29:85:3b:b0:04:6c:a0:67:
                    89:85:6e:ba:be:ad:70:8d:a8:e2:a7:3b:df:27:47:
                    d4:cc:6f:a2:79:62:05:48:c3:4b:f4:48:81:6a:a4:
                    06:24:f0:10:c5:d6:5c:30:e6:a6:7d:73:31:35:8c:
                    71:a9:dd:53:97:eb:28:eb:60:d9:6c:62:89:17:18:
                    24:0b:df:34:5b:2d:39:17:c3:36:f7:0d:1b:61:06:
                    0b:ee:bc:cd:71:77:e9:28:68:26:d8:b9:ba:56:4f:
                    cf:c1:e2:84:70:e3:8f:8b:1d:f3:be:17:1f:84:1f:
                    6f:9d:3a:d4:51:26:81:92:e2:d6:1f:24:34:88:1f:
                    3b:07:c1:a4:26:29:fe:cf:41:17:c2:11:da:c8:f8:
                    51:21:33:d9:94:92:59:82:cf:9a:d6:55:1a:fc:9a:
                    be:21:74:0a:85:3b:a6:a4:3f:98:ce:6e:22:12:7d:
                    57:bc:18:04:97:01:f2:66:64:68:7c:af:c7:9b:9b:
                    05:13:4e:ff:71:36:84:76:39:2e:fb:f7:db:a7:22:
                    ef:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4F:8C:79:CD:B6:1E:19:EC:94:28:37:CC:76:B3:CF:F0:74:6F:CB
            X509v3 Authority Key Identifier:
                keyid:EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ae:ee:65:6f:06:cd:55:bb:6a:17:4c:40:48:4d:98:4b:6a:
         51:70:aa:90:6f:60:f8:8c:37:dc:d4:f5:92:43:8f:b8:ed:41:
         b4:86:76:2f:cf:0e:1c:a1:51:c7:62:f5:51:73:d2:79:cc:7c:
         2c:b0:9f:db:e8:4c:0b:18:b4:d8:b3:31:e9:3a:a4:e5:6f:79:
         13:a1:70:d3:47:db:7a:78:cb:d3:74:35:55:b7:2a:c9:7d:77:
         18:3c:9c:00:0e:1e:89:52:43:3b:1e:43:f4:12:9c:82:50:7a:
         30:a2:a6:73:69:02:63:53:c8:e6:7b:08:e9:ae:41:dd:c8:3f:
         13:42:cb:5e:3b:75:02:0b:d0:fb:8a:c9:4d:93:5f:e7:81:eb:
         97:64:93:20:ce:d7:b2:e3:d3:43:25:f0:f9:da:2e:e9:45:0d:
         4d:3e:2f:c2:80:e9:2c:94:e7:0b:c2:ff:ea:3f:d6:6d:d0:97:
         bc:17:22:0a:e9:6a:1f:15:0e:92:1b:ec:ff:2e:e1:4f:5e:d8:
         d5:f3:55:8c:42:dd:e8:e6:6e:77:bb:d3:3a:8c:87:92:f4:0b:
         36:61:96:55:95:62:6a:78:21:90:8f:36:06:15:a5:69:85:72:
         35:1f:ab:42:cc:d9:76:40:23:7c:fc:36:6f:2e:b0:d2:7b:c4:
         79:ce:1e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:24:35 2026 by rpki-client