Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft
File:                     7SGj8xKknz6djGxEyd4TOp7Yd-o.mft (raw, json)
Hash identifier:          BD6l7tnwxN8Jh7HXdGRkFUBUiC6+HtoXlgKHueZvGY8=
Subject key identifier:   CB:60:2C:F5:0A:C0:E6:80:8C:FA:11:DB:80:29:80:37:A1:A0:F8:FB
Authority key identifier: ED:21:A3:F3:12:A4:9F:3E:9D:8C:6C:44:C9:DE:13:3A:9E:D8:77:EA
Certificate issuer:       /CN=ed21a3f312a49f3e9d8c6c44c9de133a9ed877ea
Certificate serial:       019E1F11674B0DECCA089449D0F832F09483
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft
Manifest number:          01AC
Signing time:             Wed 13 May 2026 02:01:34 +0000
Manifest this update:     Wed 13 May 2026 02:01:34 +0000
Manifest next update:     Thu 14 May 2026 02:01:34 +0000
Files and hashes:         1: 7SGj8xKknz6djGxEyd4TOp7Yd-o.crl (hash: gGn34IXkZvb7IMSLaFaQy21c18TFiSm2aO+PeIokN1Q=)
                          2: QBDeh8-FvDO0AkQLiktV9k-NtVM.roa (hash: tI3DlxFpE7QxnE4bKmU+VTwjoA3hd05ITjU2EuSCJxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:67:4b:0d:ec:ca:08:94:49:d0:f8:32:f0:94:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed21a3f312a49f3e9d8c6c44c9de133a9ed877ea
        Validity
            Not Before: May 13 02:01:34 2026 GMT
            Not After : May 14 02:01:34 2026 GMT
        Subject: CN=cb602cf50ac0e6808cfa11db80298037a1a0f8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a8:da:7f:bb:61:79:2d:0d:9a:18:b5:99:b3:
                    d3:62:a5:cd:85:b5:80:67:5f:f5:df:c0:07:32:fa:
                    ed:ef:7f:19:33:a0:98:7e:f8:ec:e7:d5:13:33:4c:
                    e1:72:4a:fd:6d:dc:0d:27:b0:68:ae:00:65:ed:8e:
                    bb:e8:35:7c:a5:2e:64:d9:fa:ff:a7:ab:9d:86:8e:
                    f1:97:39:7b:bb:d0:fe:13:87:35:8b:53:1e:d6:13:
                    74:a4:55:f0:e8:83:9f:0b:4e:d9:6b:4e:e5:a8:15:
                    b9:47:58:43:fe:da:61:70:eb:ef:b2:9f:7e:cb:f2:
                    c3:2b:8a:c7:d4:d0:76:01:c2:cb:ff:e2:66:ab:bb:
                    6c:05:c1:10:28:b5:f4:03:6f:62:3b:b8:7a:a2:f7:
                    df:b8:ff:4f:09:b9:a0:80:41:fe:ff:ae:a3:6a:8f:
                    cd:89:80:28:11:cd:df:ae:99:4a:40:bd:75:17:7f:
                    98:67:ae:34:ef:a1:5c:2f:1c:6b:8c:aa:17:bd:1a:
                    bf:d3:59:66:9a:02:57:05:f0:fc:52:34:69:df:9a:
                    be:7f:d2:ad:85:46:b2:c0:e2:84:5d:4e:84:d7:55:
                    d3:70:d5:10:6a:31:a1:45:2a:26:9b:84:89:92:7c:
                    ee:61:3c:a3:fe:3a:e8:ce:fc:7b:cd:93:e9:49:4d:
                    c6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:60:2C:F5:0A:C0:E6:80:8C:FA:11:DB:80:29:80:37:A1:A0:F8:FB
            X509v3 Authority Key Identifier:
                keyid:ED:21:A3:F3:12:A4:9F:3E:9D:8C:6C:44:C9:DE:13:3A:9E:D8:77:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:33:32:93:81:30:e3:05:54:04:37:11:3e:2d:39:b6:3f:d3:
         8b:27:f8:49:bb:e5:f5:d6:13:b5:6c:46:97:23:0a:86:48:54:
         b1:b7:de:14:a6:01:5d:4d:8a:68:5a:9c:f2:0d:6b:53:30:8c:
         91:cf:03:a2:8e:49:0a:c3:53:22:9e:ff:72:17:e7:e5:0d:06:
         5b:7f:c0:ca:f4:de:1d:b8:d9:40:a4:44:84:00:90:f0:ad:72:
         82:9f:db:e5:40:b8:78:9e:d0:e1:f9:22:57:2a:c3:91:db:82:
         d6:8e:5d:bf:9c:88:d3:1d:a1:30:c3:82:c7:31:5e:c6:1f:f5:
         f3:91:bc:25:55:e8:d8:1e:b3:d8:a5:87:58:66:9a:ac:1f:4c:
         8b:92:96:42:08:92:20:9b:1b:fd:11:42:fb:38:41:8f:13:db:
         96:fc:b0:4d:9f:99:a6:93:b4:3e:46:ad:d5:04:5d:aa:bf:47:
         76:9e:cd:1b:04:30:e2:a2:34:c0:84:99:b2:68:b6:4f:cf:15:
         40:22:6d:65:5c:86:1f:24:14:86:fe:44:64:43:92:44:4d:8b:
         a7:34:c9:e0:1c:54:17:2d:0d:5f:a6:d0:d7:2e:65:0a:86:d5:
         39:6d:50:10:da:2b:eb:c2:b1:5b:37:6a:23:56:40:39:62:fc:
         b6:8b:6e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:11 2026 by rpki-client