Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
File:                     7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft (raw, json)
Hash identifier:          C9Mh3jxnsQwihra6Oq+Wfi7sq5xINejrCHePsN2x+RY=
Subject key identifier:   16:82:48:27:61:86:DD:2A:C9:AD:B9:F2:FC:4F:04:1D:29:58:8E:6E
Authority key identifier: EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
Certificate issuer:       /CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Certificate serial:       019E1C46FE08859793AD6A74639DBDB051CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
Manifest number:          1904
Signing time:             Tue 12 May 2026 13:01:15 +0000
Manifest this update:     Tue 12 May 2026 13:01:15 +0000
Manifest next update:     Wed 13 May 2026 13:01:15 +0000
Files and hashes:         1: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl (hash: G6XWY+JnsFPQKpMEbhl2Tpuvjh89mEdVMOEk8p4/h7c=)
                          2: oqgwVvgO4WobvG_o2YvqXL-ZxrA.roa (hash: qgN0ZwFa85gMlSMo8H+ZBEVFv906WUNJ1MUKTtcyf+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:fe:08:85:97:93:ad:6a:74:63:9d:bd:b0:51:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
        Validity
            Not Before: May 12 13:01:15 2026 GMT
            Not After : May 13 13:01:15 2026 GMT
        Subject: CN=168248276186dd2ac9adb9f2fc4f041d29588e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3b:ed:2f:af:aa:48:cf:67:99:7a:c5:b5:bb:
                    88:96:3f:69:98:8c:b9:8e:72:c0:c1:8a:32:a7:f0:
                    3a:b2:4f:b5:a3:a3:77:a6:53:1c:f9:54:41:a8:fb:
                    b5:7e:dd:ca:bf:07:cd:39:ab:9a:6a:af:d0:dd:6b:
                    fb:b9:ec:42:fd:02:c6:5f:6a:37:10:67:e3:c8:1f:
                    45:c6:a2:7b:b5:a1:13:3c:1a:e8:d1:c0:64:14:04:
                    0d:f1:77:8b:2a:74:7d:66:07:97:ff:09:b3:2e:ab:
                    b5:7a:84:9d:e0:21:a8:f6:26:a6:88:99:8d:b7:32:
                    ca:80:0c:a4:a9:cc:1b:81:93:dc:ce:0c:02:de:67:
                    09:b1:e5:1e:72:8b:93:81:0a:75:ba:c5:d8:eb:38:
                    95:ac:29:b6:15:cc:e3:15:79:d4:1d:e9:90:e7:66:
                    3e:89:2a:f4:b1:48:73:3c:f0:34:f5:d3:b4:b5:d5:
                    b6:88:08:24:a9:7c:77:ee:8a:bd:48:52:35:74:b5:
                    5d:8f:7b:a3:80:3a:c4:24:ed:30:cc:b8:83:8d:82:
                    6e:5b:a1:b2:17:8b:f0:1b:70:d6:38:2e:25:b8:e0:
                    ce:b1:24:3d:4e:2d:0a:88:38:2a:71:7d:37:fa:d6:
                    fe:70:9b:ff:99:3f:8f:51:86:58:bf:87:50:d5:bc:
                    ef:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:82:48:27:61:86:DD:2A:C9:AD:B9:F2:FC:4F:04:1D:29:58:8E:6E
            X509v3 Authority Key Identifier:
                keyid:EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a9:12:2d:9b:7c:d3:9b:7c:cb:4a:d6:30:43:f3:a0:a7:85:
         3f:24:0d:d2:a9:93:a5:fc:35:3c:47:7f:ed:03:05:92:de:c1:
         79:11:de:00:4d:52:7e:89:1a:b9:b4:c3:98:fd:ef:30:f2:73:
         27:70:27:14:95:a6:84:86:7f:b3:fa:f2:40:dd:80:3a:83:69:
         5d:5d:bf:96:36:e5:6a:a1:72:e5:09:aa:f9:18:9d:fe:68:da:
         d4:5e:d7:36:7b:25:0c:4b:3f:e1:df:40:34:84:cb:64:77:f2:
         cf:6e:3c:33:84:c2:8d:11:0a:f5:35:15:0f:28:5e:72:36:a1:
         4a:f8:f4:56:20:03:85:42:ea:66:48:7b:46:c5:33:18:9c:3e:
         a0:db:d0:d2:0b:44:20:8c:23:10:26:cb:35:6d:19:d1:c7:47:
         9e:ff:1b:8e:30:46:4d:2f:02:28:dc:d9:4e:f8:56:57:fd:89:
         a5:40:ce:c7:55:91:ae:61:e2:e6:2c:f8:ff:33:49:32:c4:bc:
         f6:f3:6c:46:e4:58:69:71:23:01:2d:64:62:08:2a:b6:35:c9:
         c3:6b:ad:c5:4d:75:ab:a1:12:01:4a:d3:24:45:61:81:15:21:
         a1:41:98:bc:96:33:0e:88:6a:74:fe:2d:c8:25:58:7b:ca:18:
         57:0f:10:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:06 2026 by rpki-client