Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
File:                     7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json)
Hash identifier:          AgaUG+2xy5Zv7n+JhYnK3M/JTHiI5hgpCaaHh1rp0gw=
Subject key identifier:   57:AA:4A:F9:78:08:F2:17:69:02:58:A5:73:FF:AC:C5:A2:97:0E:2B
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Certificate issuer:       /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial:       019E1F1155E8A78F0BF2B804C3D33406C653
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
Manifest number:          1271
Signing time:             Wed 13 May 2026 02:01:30 +0000
Manifest this update:     Wed 13 May 2026 02:01:30 +0000
Manifest next update:     Thu 14 May 2026 02:01:30 +0000
Files and hashes:         1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: 8AzIumLZsaMboDj47WJJx/IIfVpQKseQ3LajXJXx01c=)
                          2: ROD76SwfYB6C6gAmh6ocy7RmvzY.roa (hash: 8kz9BVZL6aAIte+oXvcJlqrJDsa6yWdXpOPNdQQYCKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:55:e8:a7:8f:0b:f2:b8:04:c3:d3:34:06:c6:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
        Validity
            Not Before: May 13 02:01:30 2026 GMT
            Not After : May 14 02:01:30 2026 GMT
        Subject: CN=57aa4af97808f217690258a573ffacc5a2970e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:14:0b:a4:7c:02:e1:3f:0f:9c:34:d0:69:dc:
                    68:c3:df:60:4d:18:16:5d:b7:0a:a4:b8:fe:ce:37:
                    6f:0b:5c:d3:5b:66:4c:34:5c:a7:c9:27:7b:0d:85:
                    39:fb:61:65:9f:45:f4:da:b8:a9:90:88:48:f6:c9:
                    50:6f:10:c1:bc:18:fc:7d:39:52:d3:bd:d4:bc:d1:
                    18:3b:ec:d2:64:75:5f:f8:98:8a:39:f5:bb:b8:0b:
                    3b:67:6d:82:77:77:34:9a:0f:12:1f:48:99:28:f9:
                    ed:12:4a:0b:eb:ca:b5:19:a6:84:78:68:9b:4e:30:
                    16:6a:21:51:92:23:4a:c4:c6:8a:4e:1f:fa:3b:7b:
                    f0:47:12:03:ea:ff:c8:69:a9:eb:65:2e:7a:f1:1d:
                    73:98:6e:43:1c:e7:1f:80:ac:fe:2c:dd:c6:62:96:
                    3f:40:a9:a1:fc:46:f5:52:ed:6c:9c:6d:d1:7b:5c:
                    f2:9d:06:08:f3:89:db:20:3a:d1:ff:de:58:5a:c4:
                    33:d5:42:28:1b:f7:be:fc:66:cf:f5:9f:ff:c8:48:
                    37:29:dc:46:79:24:3b:1b:91:6e:22:37:f9:00:62:
                    7b:39:e5:0d:6a:44:53:76:0e:58:4e:d1:47:79:06:
                    6a:cc:0c:74:fd:60:91:a6:39:22:6c:c0:05:f0:d0:
                    6f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AA:4A:F9:78:08:F2:17:69:02:58:A5:73:FF:AC:C5:A2:97:0E:2B
            X509v3 Authority Key Identifier:
                keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:cf:21:e6:75:5f:da:08:75:b0:d1:ff:53:8e:08:94:6f:64:
         22:6b:bc:59:47:ad:8c:a1:41:b2:c3:c0:c3:91:f7:fc:20:f1:
         76:2a:b4:50:85:41:c2:ab:7c:07:86:d8:91:d1:76:0d:e7:82:
         35:f1:09:d9:d7:7b:0f:63:c3:26:d6:40:e8:83:c9:e5:dd:a9:
         7d:6b:c9:4a:3b:2c:de:dc:a9:ce:1a:94:3b:eb:a3:81:8f:02:
         d7:6a:b0:ae:bf:02:d5:3d:e4:74:d1:96:5d:e9:07:85:97:68:
         23:0a:32:56:a6:74:85:1c:0e:7d:71:72:16:f9:4e:be:db:c8:
         91:59:1b:ea:22:28:b1:57:78:00:a6:d3:f2:69:4d:de:2f:8e:
         8b:e4:ea:92:af:31:fa:2f:05:45:b7:fa:c9:86:15:ce:41:8d:
         7b:42:84:2d:87:1a:1c:77:7a:61:2f:08:81:60:c6:4b:b1:bc:
         32:ff:b6:27:9f:3b:a6:21:8f:b6:da:16:28:be:ea:f1:d9:96:
         a6:8b:39:11:e6:e3:6c:92:95:88:19:de:c1:ed:6e:bc:e9:5d:
         01:1f:48:9e:83:33:d8:95:dc:97:dc:6d:e7:70:02:56:32:7a:
         a5:37:14:a8:56:9e:db:7c:5f:2b:be:da:27:1c:dd:87:a6:2b:
         69:a5:15:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:18 2026 by rpki-client