Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
File:                     7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json)
Hash identifier:          UY6K4SCgGxcmeQorR2pl8EajQdlz6VNfUT7IuK16d8c=
Subject key identifier:   07:7A:F1:AD:7E:BD:72:FF:02:1C:B5:9E:07:B4:79:28:B8:D0:F9:E3
Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
Certificate issuer:       /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Certificate serial:       019E1BD8B86B06634ADC5B2FF3752A401D49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
Manifest number:          0798
Signing time:             Tue 12 May 2026 11:00:48 +0000
Manifest this update:     Tue 12 May 2026 11:00:48 +0000
Manifest next update:     Wed 13 May 2026 11:00:48 +0000
Files and hashes:         1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: m478bsR80Qg63Rs5S7Rch0mxAHtQypAflKM/BlllHfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d8:b8:6b:06:63:4a:dc:5b:2f:f3:75:2a:40:1d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
        Validity
            Not Before: May 12 11:00:48 2026 GMT
            Not After : May 13 11:00:48 2026 GMT
        Subject: CN=077af1ad7ebd72ff021cb59e07b47928b8d0f9e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:a9:fb:94:1b:cf:48:48:e9:c0:47:05:3b:
                    3d:30:4d:43:eb:65:a5:97:3f:17:f2:6e:e3:af:f5:
                    6a:24:ce:2d:c8:f5:dd:ca:db:33:0a:2a:fe:f6:43:
                    f1:c6:1d:f6:d8:8e:94:10:18:7f:e5:36:43:8f:87:
                    82:94:7a:e6:79:c5:f6:75:a4:6f:d9:da:99:06:d7:
                    8b:26:d4:d4:16:9f:69:97:90:69:f4:67:33:17:06:
                    ef:8e:43:5c:45:27:bb:20:cc:0b:64:a9:9f:40:5c:
                    a6:f4:f4:02:f5:4f:3e:88:8a:a9:aa:b5:ee:98:b8:
                    28:95:94:c8:80:6b:e4:c8:8b:fa:0f:be:ab:e9:84:
                    22:78:69:29:64:5e:56:0e:61:36:38:7a:e4:79:1b:
                    f3:48:97:28:34:70:0d:9d:17:62:b2:7e:4e:86:55:
                    87:77:13:96:0d:49:fc:94:bf:65:e4:5c:fd:e3:77:
                    e7:12:cc:4b:45:b8:71:02:c1:f3:05:ec:01:b4:1b:
                    11:96:68:49:3d:aa:a4:ad:1e:25:12:77:05:35:c9:
                    e4:41:47:01:a7:0e:62:b3:c6:2b:10:c4:20:03:14:
                    0a:3a:6d:96:e7:29:dd:4e:3e:b1:f1:8e:e0:92:cb:
                    68:84:76:2b:27:a2:d5:f9:27:bb:a8:f6:8c:5b:2f:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7A:F1:AD:7E:BD:72:FF:02:1C:B5:9E:07:B4:79:28:B8:D0:F9:E3
            X509v3 Authority Key Identifier:
                keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:95:08:3f:e0:03:9c:01:60:82:bb:59:e4:40:59:71:d7:6a:
         8e:ad:23:65:a3:1e:ac:ea:89:43:aa:f7:7f:b7:55:6e:14:53:
         0a:90:0c:b2:a1:9d:13:f6:b6:4e:89:f9:f5:6d:43:51:b4:96:
         6e:d0:13:df:42:c0:be:3d:10:4a:19:31:da:99:b8:8f:16:08:
         6e:19:bf:d3:6f:20:cf:4b:f1:c7:8c:0d:e3:85:cf:eb:d3:84:
         7b:5a:0f:6d:4e:3f:49:e5:56:fc:7c:fc:4c:de:7e:f0:d7:20:
         89:51:9d:2c:65:06:a1:c2:72:e7:ee:0d:f2:ba:91:02:2d:87:
         7c:9e:5a:a0:3f:14:37:98:2a:0e:25:78:34:ab:31:92:47:87:
         1a:da:96:7f:ee:01:d7:2a:b7:16:22:b8:ae:0a:88:34:23:fe:
         01:f7:0e:53:47:50:69:d0:a4:87:94:87:86:db:f1:80:73:4f:
         9b:ef:9f:26:6a:05:93:5e:2a:8f:b4:3f:ce:a1:7a:e0:16:18:
         67:9e:8c:2c:61:34:16:80:e5:b3:4b:f9:8b:9a:bf:c2:96:0b:
         64:3a:0b:b9:4b:e2:45:22:04:dc:0b:a0:79:df:d6:79:5b:0a:
         ee:53:0a:e0:76:74:20:6c:6e:4a:24:20:f6:3f:55:9a:82:a5:
         9c:63:b1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:23 2026 by rpki-client