Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
File:                     7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft (raw, json)
Hash identifier:          vake4H1IfcdLDL7YTRkfiNLSHUa3BLgdECe2JShuzjE=
Subject key identifier:   55:CF:3B:8C:A3:BB:DA:77:39:21:E2:43:6B:37:C3:21:7E:3C:FD:E3
Authority key identifier: EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D
Certificate issuer:       /CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
Certificate serial:       019E1C46EF0AD95D87997C7681E3822E8642
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
Manifest number:          0962
Signing time:             Tue 12 May 2026 13:01:11 +0000
Manifest this update:     Tue 12 May 2026 13:01:11 +0000
Manifest next update:     Wed 13 May 2026 13:01:11 +0000
Files and hashes:         1: 7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl (hash: kGIwyiJLq8DJg2cAWJaResaKHNuTX7yzpEWpEyrOzO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:ef:0a:d9:5d:87:99:7c:76:81:e3:82:2e:86:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
        Validity
            Not Before: May 12 13:01:11 2026 GMT
            Not After : May 13 13:01:11 2026 GMT
        Subject: CN=55cf3b8ca3bbda773921e2436b37c3217e3cfde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:22:11:ae:51:e5:c8:d0:9e:d9:2c:18:47:
                    22:5b:9d:54:d4:e3:22:d1:e2:5a:ff:ae:6c:b1:75:
                    17:74:9d:13:c5:07:e8:44:c1:de:89:88:14:dd:d7:
                    96:e1:eb:4a:f0:2d:ab:fe:20:bb:e9:4e:c3:1e:dc:
                    d9:dc:0a:a4:59:a3:0f:fe:ed:e5:3c:0c:a0:f2:08:
                    3d:28:58:f6:42:c3:a6:af:58:20:dd:74:0a:e7:80:
                    56:da:a4:28:a3:c0:ef:72:83:fb:4c:55:eb:a4:54:
                    90:d6:6a:35:57:d5:87:92:43:4b:41:80:f8:a1:a7:
                    21:fd:12:d9:a7:37:58:89:73:d9:b2:31:ad:3f:be:
                    4e:05:ec:5b:66:05:e6:49:a6:16:7f:dc:29:d7:66:
                    d4:43:20:9d:51:90:d0:4c:b2:17:2b:43:9b:85:1d:
                    71:3e:6f:63:d6:90:53:e4:36:09:86:34:b0:ec:e6:
                    b0:59:d7:18:88:66:16:ad:da:b7:4e:ce:bf:17:46:
                    e9:8b:44:33:e6:2f:c9:ed:35:48:eb:6e:d0:75:6d:
                    07:60:d4:72:6a:a1:b1:0e:db:03:ea:8a:b6:5f:41:
                    b5:de:33:53:08:f1:42:d0:2e:97:1d:90:4b:bf:4c:
                    ba:4d:ec:16:11:e5:f8:68:87:64:5b:20:4c:c9:8f:
                    5a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CF:3B:8C:A3:BB:DA:77:39:21:E2:43:6B:37:C3:21:7E:3C:FD:E3
            X509v3 Authority Key Identifier:
                keyid:EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:46:62:55:1b:e7:dd:48:87:af:bd:34:f5:17:ec:54:50:bb:
         67:2e:e1:1e:0f:39:3b:26:d5:87:49:d5:fa:04:ca:be:4c:76:
         9b:23:9c:85:ae:16:f3:42:8c:b0:ad:ef:00:60:ea:1b:ad:0c:
         cb:13:81:e4:b9:fc:75:2b:c4:5e:60:b1:66:26:ec:90:13:8c:
         56:ce:d4:61:46:45:ab:d1:5c:b0:df:76:22:63:e6:02:0c:d3:
         b7:23:2e:64:09:f0:bd:4b:23:7f:31:d5:5c:30:43:85:24:46:
         6c:6f:e4:66:92:ca:ee:c7:ee:f1:89:20:da:47:72:a8:9d:5e:
         94:b5:9a:0a:50:84:7f:a6:d3:c7:38:d4:d6:78:79:0b:97:67:
         27:1e:65:ab:88:76:b4:1c:d8:ba:47:97:e4:15:81:ae:9c:5f:
         f4:05:7c:64:1b:99:39:67:3e:b6:99:0e:02:51:0d:92:f7:32:
         3b:d4:93:80:25:bb:31:d8:35:3b:50:80:bb:22:04:b6:b3:2b:
         4a:66:6e:73:0e:2c:4d:d1:c6:34:2e:7d:2c:a7:98:56:66:ee:
         23:5a:80:d6:42:34:80:a8:0e:5f:59:0e:f6:d5:c1:a6:6b:a5:
         b1:91:59:39:e1:ec:f8:11:6b:6f:32:50:f4:a5:bd:81:95:61:
         cb:4c:95:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:46 2026 by rpki-client