Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
File:                     7cOYioT5-7QYXqSsW3IYRcooA34.mft (raw, json)
Hash identifier:          AQwbdy4255TclzVdnHbsX9OS/bD/itVBXXqFiurQH+U=
Subject key identifier:   36:0A:EA:B2:26:78:A6:2C:87:29:E0:23:03:4D:7B:35:8C:D6:49:78
Authority key identifier: ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
Certificate issuer:       /CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Certificate serial:       019E1DC772C9983F0D44CB1235C38D18B276
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 20:01:10 +0000
Manifest this update:     Tue 12 May 2026 20:01:10 +0000
Manifest next update:     Wed 13 May 2026 20:01:10 +0000
Files and hashes:         1: 7cOYioT5-7QYXqSsW3IYRcooA34.crl (hash: lexflCYsBgyZz/vxqN8UuTwCmO2dk/3BP1el6E3+BCI=)
                          2: SEU-eUTm-6iORlN5RtiJHEwSdwc.roa (hash: rXL5N4BdgulO5NRgIVf5AGGcYxix/8Lxb7TWkibxEWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:72:c9:98:3f:0d:44:cb:12:35:c3:8d:18:b2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
        Validity
            Not Before: May 12 20:01:10 2026 GMT
            Not After : May 13 20:01:10 2026 GMT
        Subject: CN=360aeab22678a62c8729e023034d7b358cd64978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:18:2b:af:d6:4f:24:d0:7c:02:15:f1:5e:b6:
                    a8:63:e1:df:2d:20:c9:5b:6b:38:9c:73:7c:04:6f:
                    e0:67:05:1a:06:4c:e1:4e:63:79:88:b9:f3:91:6a:
                    cd:55:7e:9d:8b:2c:43:0b:0b:84:0d:4d:6d:75:39:
                    ab:51:53:81:1c:47:25:a9:67:55:1b:36:77:8a:a3:
                    c0:b8:28:3b:fd:07:f6:bf:43:c4:73:78:12:d7:0c:
                    b4:83:6a:87:95:50:02:b5:04:60:59:41:04:a0:e0:
                    59:90:2a:d8:7c:f8:80:25:90:8b:17:4f:b8:bd:84:
                    f6:8f:d2:24:57:74:f8:ad:30:c8:05:5d:2b:ba:0e:
                    c2:da:c4:93:23:47:15:0e:f4:90:5c:16:f8:ae:f0:
                    85:ff:43:8f:1d:35:fc:19:f5:6d:30:89:26:88:1a:
                    65:27:9c:89:47:1b:bc:b8:06:c6:95:2b:41:10:a5:
                    3b:69:9e:03:6e:ef:c0:cc:ef:88:2e:4d:a8:74:ad:
                    36:93:38:c6:14:84:10:dd:0b:66:c0:e8:76:45:71:
                    ac:d8:6e:0e:9a:ea:be:1e:c7:8c:35:89:d8:da:43:
                    4f:7c:57:67:38:c5:e5:14:29:4d:f3:42:01:cc:c0:
                    45:c1:97:01:a0:ca:62:35:ca:71:a7:7d:62:a0:ca:
                    c1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0A:EA:B2:26:78:A6:2C:87:29:E0:23:03:4D:7B:35:8C:D6:49:78
            X509v3 Authority Key Identifier:
                keyid:ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e6:d6:23:7b:1e:c2:3b:ec:b9:49:55:bc:43:3d:5d:62:89:
         15:e6:a3:2f:79:8a:00:59:cb:9b:e0:08:04:23:f9:5f:38:f4:
         b4:77:ce:c5:d8:60:e5:6c:0b:14:25:84:55:bc:0f:f0:55:ad:
         73:46:42:14:fe:78:45:30:0f:87:23:e5:7d:2f:e6:59:4e:56:
         66:ee:d1:16:10:59:86:76:a3:20:f9:35:50:ca:38:ff:9b:08:
         ee:85:42:87:e9:98:53:84:e3:11:6c:c9:dc:71:fa:b8:dd:61:
         45:7f:84:3e:0d:23:49:a0:dd:fe:b9:c3:f1:70:8b:f4:2d:6f:
         aa:c5:2a:cc:f4:dd:96:4c:25:20:89:1b:1b:f7:20:ae:de:96:
         68:6b:e1:e3:d5:bf:f3:6c:3f:11:e4:23:d5:5d:fd:cf:5f:16:
         fe:0d:09:74:2e:9a:55:2f:aa:06:22:35:e3:d0:1c:bc:d5:ae:
         80:27:03:4d:e3:79:d3:50:91:2d:db:ea:77:14:2f:8e:bf:f6:
         06:70:0a:0a:74:a3:30:72:80:f4:31:ce:6c:b3:f6:93:2b:b0:
         6c:14:18:4a:5f:18:e3:d1:72:88:3b:47:17:0e:fc:04:5c:9b:
         ca:14:11:14:ae:6d:1e:b7:0b:6b:27:58:f2:a9:59:5c:6c:0a:
         25:c8:e4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:43:42 2026 by rpki-client