Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
File:                     eybPzaOXFj2DXIl63qkHHmHIvE0.mft (raw, json)
Hash identifier:          JNf0yTgyGoQj4eNtBr5Zz5pFJJtZZm8dPAEwBXx5fH8=
Subject key identifier:   7F:CB:F9:97:9F:8B:3F:A8:57:6D:DD:AE:D9:23:69:F4:DB:C7:2A:C8
Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
Certificate issuer:       /CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Certificate serial:       019E1F47E863DDB2FAEFFFFEDED82EBBA7FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
Manifest number:          126F
Signing time:             Wed 13 May 2026 03:01:06 +0000
Manifest this update:     Wed 13 May 2026 03:01:06 +0000
Manifest next update:     Thu 14 May 2026 03:01:06 +0000
Files and hashes:         1: Wfdm8iDDw0lI9V9EYGtDizSpNCQ.roa (hash: G7MUAWNXEqs1+UqwYpVfJPda6fWT1l1YlfUSrCkPCOs=)
                          2: eybPzaOXFj2DXIl63qkHHmHIvE0.crl (hash: ZU9K9CjSKycC9+7+dWlXS3X7QRoSYadQoPriV9Dx92c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:e8:63:dd:b2:fa:ef:ff:fe:de:d8:2e:bb:a7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d
        Validity
            Not Before: May 13 03:01:06 2026 GMT
            Not After : May 14 03:01:06 2026 GMT
        Subject: CN=7fcbf9979f8b3fa8576dddaed92369f4dbc72ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e6:41:d2:d7:fd:cd:72:ef:67:ed:8f:9b:12:
                    81:a2:43:ba:ab:fa:fb:08:08:cd:ab:f1:e6:e4:27:
                    e1:fc:7a:2a:90:f0:df:71:3a:1b:3b:88:50:01:ef:
                    53:87:36:0c:b6:bf:ac:43:72:c3:49:d6:28:24:35:
                    d0:f5:c7:4e:15:55:f5:e5:3a:fd:fb:66:b8:f8:94:
                    85:ed:c1:46:50:24:a6:a6:8c:6d:9f:57:dd:fa:cc:
                    2e:a9:d9:e6:57:cf:57:a8:ed:a2:d5:00:70:56:77:
                    39:17:e3:fd:64:a3:e5:90:95:fc:f2:c0:5c:cf:94:
                    5c:d9:0a:df:7f:fe:19:46:1e:50:79:6d:80:8c:2b:
                    22:d5:87:56:68:d3:7a:85:7d:07:f7:c7:af:82:b1:
                    d5:ff:bc:50:e4:11:80:50:45:f9:f5:a8:db:32:ea:
                    5b:62:bd:b2:b0:21:9f:77:a0:40:72:5c:74:5e:13:
                    67:1f:d6:1e:a6:a4:98:50:fd:50:04:26:55:aa:fd:
                    93:81:86:6c:16:d6:88:1a:b6:a1:38:f8:4d:df:47:
                    f5:b8:3e:ad:32:0c:8e:d7:a5:ae:77:d3:d0:67:b9:
                    0b:89:c2:ff:ef:64:2e:45:5a:d4:23:33:eb:d3:d8:
                    66:92:0f:2b:01:d1:18:ad:54:2e:9e:27:d5:6d:fa:
                    96:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CB:F9:97:9F:8B:3F:A8:57:6D:DD:AE:D9:23:69:F4:DB:C7:2A:C8
            X509v3 Authority Key Identifier:
                keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:fd:e4:e5:1f:87:c9:56:4a:9f:bb:70:5b:6f:4d:a4:6d:39:
         fa:03:86:ac:09:bc:45:c3:18:6e:19:ab:c1:b2:4d:e7:5f:33:
         29:04:8a:5d:1c:82:81:46:e5:b1:33:3e:ef:91:bb:6e:b8:86:
         fb:86:c6:e7:46:1e:85:2d:b2:ce:d2:cf:3a:7f:03:ec:e0:b5:
         cb:0b:95:c8:77:11:4a:bb:9b:ad:06:a4:11:4c:09:83:60:9e:
         2b:ae:b7:55:a7:38:ac:d8:be:43:6b:c1:94:e1:3a:f6:b0:b4:
         dc:22:1c:61:0c:ef:df:52:70:4d:8b:d9:73:69:fc:a2:45:a9:
         f0:96:5b:61:7e:1d:c4:08:68:70:c0:54:dc:d3:1d:2c:d5:b0:
         a7:7c:26:fa:f1:62:e7:09:ba:c9:b0:53:14:07:4f:f3:7a:b0:
         a9:a4:e0:94:54:cc:54:ea:87:ba:53:9e:9e:07:35:39:39:87:
         99:89:20:54:df:f6:7e:8a:f2:ac:40:4e:cc:ea:a3:5e:1c:78:
         75:19:28:8a:28:2f:b1:52:27:5c:6c:4e:4a:ba:61:7c:b1:32:
         60:b6:41:41:07:8d:59:3b:6c:86:48:fa:e6:b0:c1:67:30:ef:
         ea:c3:7c:c0:ab:e2:57:a0:93:82:6f:e2:c1:6c:d9:d6:a1:e2:
         3b:6d:41:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:41:27 2026 by rpki-client