Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
File:                     7N0ioeDFuwAoDxkz7uz4HNig5rI.mft (raw, json)
Hash identifier:          npglCtRmTt9jsLSgolRsIenQEQw9cBGZDydn9SX8dbw=
Subject key identifier:   FF:0E:80:0E:EC:1D:07:F4:62:DC:FB:CD:42:3E:A9:B4:09:F3:82:6F
Authority key identifier: EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2
Certificate issuer:       /CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2
Certificate serial:       019E20246DC0152DBA26D2A76A5C9F97DC69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
Manifest number:          1897
Signing time:             Wed 13 May 2026 07:01:58 +0000
Manifest this update:     Wed 13 May 2026 07:01:58 +0000
Manifest next update:     Thu 14 May 2026 07:01:58 +0000
Files and hashes:         1: 7N0ioeDFuwAoDxkz7uz4HNig5rI.crl (hash: I3/8/900/1SfPEWMrehC7PlRAehUiASG9OPXk9WGbnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:24:6d:c0:15:2d:ba:26:d2:a7:6a:5c:9f:97:dc:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2
        Validity
            Not Before: May 13 07:01:58 2026 GMT
            Not After : May 14 07:01:58 2026 GMT
        Subject: CN=ff0e800eec1d07f462dcfbcd423ea9b409f3826f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:60:e0:7d:fd:aa:9a:1d:36:3d:9b:9a:89:c8:
                    c2:cd:0e:fa:75:0b:89:45:92:2b:08:cd:af:32:80:
                    04:45:06:39:2a:62:0e:71:3b:19:8a:8b:f6:4c:a9:
                    e4:24:b8:0c:d7:14:5b:fd:b5:57:53:cc:4d:84:4a:
                    03:e5:89:49:fa:d7:d0:a1:54:af:9f:a0:e2:11:a3:
                    81:ef:35:5a:8c:ac:3d:b7:23:d0:c2:d4:7b:a5:fe:
                    5c:cb:4c:2d:c6:85:82:b2:c2:ae:ca:0c:e2:29:78:
                    ad:d7:a6:35:e9:2d:69:8e:4f:d7:fa:da:62:85:76:
                    32:8a:df:00:1c:1a:b8:76:69:72:08:2c:b0:a9:11:
                    99:03:01:38:e3:58:ea:bd:df:e2:4b:7b:47:b6:c1:
                    33:8a:25:5f:12:3d:99:8f:e0:87:52:ce:20:c7:b4:
                    84:91:28:ad:82:12:f7:6c:b6:5d:5c:1f:3b:a4:b2:
                    af:b6:83:c8:29:1d:5f:cb:24:5b:14:68:6f:a7:2f:
                    f6:f6:e5:1a:14:c0:a0:87:43:8f:ae:86:64:3f:91:
                    8b:ad:52:1e:c1:29:eb:f4:57:71:50:e2:1e:67:48:
                    82:7d:f0:c5:90:95:35:4a:91:fb:9b:ee:30:cd:55:
                    fb:43:b6:ae:7e:93:11:30:eb:8d:36:a5:63:71:8f:
                    17:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0E:80:0E:EC:1D:07:F4:62:DC:FB:CD:42:3E:A9:B4:09:F3:82:6F
            X509v3 Authority Key Identifier:
                keyid:EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:4d:cc:cd:e6:1c:ac:c0:99:b1:02:78:ef:bf:e1:d3:6c:9f:
         9f:e2:78:1e:ce:a9:90:51:6c:18:fc:d6:fd:c1:ad:bd:d8:88:
         58:a5:3d:e8:23:cf:f2:f2:d1:b5:27:ad:4b:cc:bd:98:ff:4c:
         d8:f3:b0:67:76:43:29:03:f0:bf:52:75:e3:18:dc:ad:1e:0b:
         8d:96:7f:46:64:68:54:a1:f3:47:e2:10:65:21:16:54:df:b3:
         d6:2b:23:61:05:80:fa:ed:17:25:01:2b:70:90:b3:b8:da:9b:
         e2:64:b5:1a:62:61:ee:33:8d:52:b8:f5:8b:5b:76:ee:7e:7e:
         6a:0d:15:66:e5:e2:e1:10:4b:fc:de:3a:3c:a0:e1:50:83:d5:
         28:8e:a1:8b:e7:dd:9f:0a:ec:41:7a:29:59:5e:e9:27:49:86:
         eb:6b:f5:bd:28:1f:63:ab:c8:d1:92:0f:40:9e:f0:e7:91:5d:
         e5:27:5d:48:a8:be:d8:ba:e7:73:3b:ed:a2:10:5a:91:91:32:
         4f:38:75:db:15:2c:30:4d:a6:15:55:26:38:12:39:7b:bd:84:
         c7:4c:27:fb:0a:69:ad:b0:63:d1:65:e5:a8:0f:c7:43:fb:21:
         69:60:a5:73:99:2f:22:87:56:e6:e9:e2:53:04:b5:f2:99:aa:
         7a:4b:d8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:31:52 2026 by rpki-client