Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
File:                     7jSQhUVj0yIi6azlrYpknptKFyk.mft (raw, json)
Hash identifier:          1nMB2Vd8GR1RElVl/HM8u+vqOLzFyObqigXX0GyMvig=
Subject key identifier:   3C:B1:2D:EC:9B:FB:F3:C5:9C:5D:F2:D9:60:BD:AD:CC:5A:ED:2F:20
Authority key identifier: EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
Certificate issuer:       /CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Certificate serial:       019E1F10F839AD09B653D3EDD35B7E5F6CED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
Manifest number:          0568
Signing time:             Wed 13 May 2026 02:01:06 +0000
Manifest this update:     Wed 13 May 2026 02:01:06 +0000
Manifest next update:     Thu 14 May 2026 02:01:06 +0000
Files and hashes:         1: 7jSQhUVj0yIi6azlrYpknptKFyk.crl (hash: IR06hxUEXmku4nkk7FZMfQSXR7fgov9hG2rcKXdvH3c=)
                          2: 8PYO221ijm73GqludhO0afrN2sw.asa (hash: cTow358n5VSy6y4+z4cDy48Lusx/C9hmIjmQirPwShY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:f8:39:ad:09:b6:53:d3:ed:d3:5b:7e:5f:6c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
        Validity
            Not Before: May 13 02:01:06 2026 GMT
            Not After : May 14 02:01:06 2026 GMT
        Subject: CN=3cb12dec9bfbf3c59c5df2d960bdadcc5aed2f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e5:6c:06:de:ac:dd:db:b8:75:4b:ff:cd:d2:
                    57:b6:18:bb:87:3c:e5:8e:b4:90:21:52:3c:ef:c9:
                    ee:2d:ee:8d:81:4b:19:d4:25:21:a2:c2:14:9b:39:
                    f6:60:dc:18:4a:a8:84:ce:6f:3a:5c:58:48:2e:93:
                    cf:dc:0c:cf:b9:bb:7c:6d:c9:1c:29:c1:b6:5f:d2:
                    1a:d7:1b:3c:cd:e2:4e:65:86:e1:46:94:da:fa:ef:
                    70:a6:a3:47:d9:5b:d4:76:e9:02:78:e1:42:6d:cb:
                    db:06:d3:d0:42:96:a7:75:83:f9:b6:a5:7a:f2:10:
                    36:2a:58:1f:f8:92:b0:4f:81:94:6a:a8:50:fb:f8:
                    09:7f:e4:96:d7:39:dd:37:1f:a4:45:8f:40:6b:59:
                    5c:dd:11:1f:17:35:b5:bb:2c:1b:20:02:9c:d3:57:
                    04:7d:e1:53:3d:5e:f3:c9:36:05:ef:5c:10:86:1f:
                    b7:14:c8:8e:20:e0:0c:94:6b:66:42:d3:e8:b0:8c:
                    e3:ce:34:d3:92:69:91:b6:08:70:d0:60:15:80:ff:
                    7b:bb:12:20:4a:1a:33:09:12:92:a1:6b:08:fd:14:
                    d6:bc:62:2d:40:f0:df:c8:02:e2:b0:94:48:75:da:
                    63:2b:e9:96:27:bc:53:4e:c8:01:21:f8:30:62:bf:
                    5a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B1:2D:EC:9B:FB:F3:C5:9C:5D:F2:D9:60:BD:AD:CC:5A:ED:2F:20
            X509v3 Authority Key Identifier:
                keyid:EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:7d:ad:42:46:f7:df:d1:7c:f0:bc:50:52:d6:fd:f9:02:44:
         e0:51:74:34:9c:27:f0:1f:6a:5e:99:f4:10:72:f1:45:a8:2a:
         22:0b:cb:9b:a5:fe:34:7c:79:96:81:f7:5a:74:15:ba:ef:6a:
         ea:03:bf:a0:44:b6:c2:36:df:88:6f:50:0f:c2:c7:3c:cd:eb:
         6f:47:27:04:cd:42:60:f2:34:74:9f:63:db:cd:ff:17:66:75:
         79:62:2f:eb:c4:a0:21:8d:43:32:07:5a:46:e4:93:01:aa:cd:
         ae:df:22:98:bd:c8:3f:3a:87:7c:99:0d:cd:29:e7:20:72:4b:
         0e:99:93:c5:17:4f:47:39:db:c9:66:1f:8c:34:23:0f:7e:6f:
         00:75:ec:9c:ca:82:bf:e3:83:eb:6f:b1:4f:b8:6f:51:5f:06:
         af:f4:be:68:5b:9a:77:52:d8:fa:04:79:34:61:24:fd:1e:4b:
         62:d6:5f:58:0e:0d:36:42:e4:96:e2:e9:d7:76:00:f0:3d:f0:
         2b:3d:e9:ce:43:84:fc:14:c0:12:40:fc:aa:7a:ce:4f:a8:31:
         c3:58:88:2d:aa:f7:36:c3:cf:9c:e0:4b:b7:a9:bd:cf:2a:52:
         85:72:ab:b0:ad:d7:d2:10:e0:81:f7:7d:61:59:ef:a7:d1:00:
         22:e9:60:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:04:24 2026 by rpki-client