Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/7X0dEIP3BC9E0V0vDcoh-oa8QNU.mft
File:                     7X0dEIP3BC9E0V0vDcoh-oa8QNU.mft (raw, json)
Hash identifier:          hFExJVfFmyuh9p/QfTe5CyHybWOFjlnKNuCpOSHRaTs=
Subject key identifier:   AC:EB:E1:F7:99:CE:A5:A7:D8:CB:0B:08:00:18:D7:AB:B9:A2:B7:3E
Authority key identifier: ED:7D:1D:10:83:F7:04:2F:44:D1:5D:2F:0D:CA:21:FA:86:BC:40:D5
Certificate issuer:       /CN=ed7d1d1083f7042f44d15d2f0dca21fa86bc40d5
Certificate serial:       019E1CEBA339404898A3794DB9C9CFCE5F5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7X0dEIP3BC9E0V0vDcoh-oa8QNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/7X0dEIP3BC9E0V0vDcoh-oa8QNU.mft
Manifest number:          14
Signing time:             Tue 12 May 2026 16:01:05 +0000
Manifest this update:     Tue 12 May 2026 16:01:05 +0000
Manifest next update:     Wed 13 May 2026 16:01:05 +0000
Files and hashes:         1: 7X0dEIP3BC9E0V0vDcoh-oa8QNU.crl (hash: 36LfOBkreJUJp0PIqK2g8oe5udMdd8GOyRLb+Uo/5AU=)
                          2: qhw-oWhw0NTepwRC4uCmjdN0RG0.asa (hash: Eh7fHtr19LeexhS3SBHy5ilwQiwjvV00HdoOnKi+arg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/7X0dEIP3BC9E0V0vDcoh-oa8QNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/7X0dEIP3BC9E0V0vDcoh-oa8QNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7X0dEIP3BC9E0V0vDcoh-oa8QNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 16:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:a3:39:40:48:98:a3:79:4d:b9:c9:cf:ce:5f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7d1d1083f7042f44d15d2f0dca21fa86bc40d5
        Validity
            Not Before: May 12 16:01:05 2026 GMT
            Not After : May 13 16:01:05 2026 GMT
        Subject: CN=acebe1f799cea5a7d8cb0b080018d7abb9a2b73e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d0:cb:69:fa:c9:47:f8:24:dd:2e:1d:bc:98:
                    68:f4:19:83:95:83:c3:32:ea:3b:a5:06:50:49:92:
                    00:76:7c:4c:ee:b3:a4:36:dc:df:5b:b5:3e:72:80:
                    c0:58:9f:dc:36:2b:66:15:10:b0:9a:ae:35:13:e9:
                    46:6e:7a:f0:5e:4d:7a:57:59:79:ce:70:15:fd:57:
                    f5:01:37:14:6a:cd:ba:43:38:99:50:79:ca:09:86:
                    36:7b:5d:00:03:55:f3:76:33:0a:80:11:1c:3e:6b:
                    46:70:4f:5e:19:16:7c:3f:70:4a:fc:7b:29:a3:d7:
                    68:32:be:f0:6a:ac:7c:a2:43:dd:87:fc:80:a5:81:
                    00:7f:3c:7c:d8:48:a0:1d:eb:eb:99:ae:1a:74:f7:
                    5c:52:ac:8a:d9:52:63:9c:34:b8:16:e7:22:e7:8c:
                    e8:b6:e2:b9:23:92:d1:df:de:ad:94:c1:0e:9a:25:
                    0e:63:95:16:1c:8c:38:7e:a8:49:26:10:3b:3c:f3:
                    a3:8e:a8:d9:11:db:69:33:6f:5d:3d:b6:31:9f:2e:
                    08:3d:84:5a:57:a5:3d:6b:0f:61:8b:be:41:42:04:
                    9b:58:5e:3b:af:bc:3c:b1:c5:ce:14:72:c2:fd:6c:
                    f9:30:70:06:2b:48:b1:12:9f:e0:e8:d9:70:53:04:
                    ad:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EB:E1:F7:99:CE:A5:A7:D8:CB:0B:08:00:18:D7:AB:B9:A2:B7:3E
            X509v3 Authority Key Identifier:
                keyid:ED:7D:1D:10:83:F7:04:2F:44:D1:5D:2F:0D:CA:21:FA:86:BC:40:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X0dEIP3BC9E0V0vDcoh-oa8QNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/7X0dEIP3BC9E0V0vDcoh-oa8QNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/7X0dEIP3BC9E0V0vDcoh-oa8QNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:11:cd:b7:a4:10:5a:54:31:93:68:f9:a0:14:82:ec:1a:20:
         09:81:8e:28:98:b8:aa:03:46:c9:0f:82:0d:f2:af:4c:e6:be:
         61:74:e8:b6:cc:d2:cb:22:3f:65:13:2e:48:27:ac:ed:ef:97:
         ba:22:ee:2c:36:37:8a:50:d5:0b:6a:f1:64:6b:cc:6c:75:e5:
         2c:fc:40:31:5b:0d:d6:23:aa:3d:d6:c6:9a:3c:bc:37:17:9c:
         dd:8f:e3:cc:13:fb:e6:4f:75:76:3b:5d:23:2d:ac:cb:e4:a4:
         f8:f8:45:a5:bd:01:f1:3d:98:ed:cd:d5:7e:94:1d:a0:7e:43:
         56:da:aa:47:51:6a:82:96:e4:01:e1:c8:4b:65:3e:2f:49:4e:
         90:2e:1f:44:a3:cd:42:8f:1f:d5:f8:e9:c2:34:96:b4:ec:90:
         0f:5f:06:98:9f:c3:86:69:3f:42:03:77:42:da:97:f6:51:89:
         02:e0:71:65:b3:2f:e9:cf:92:68:fb:ec:09:37:02:0e:31:25:
         e0:4e:58:f6:fa:a3:72:02:df:76:b4:12:37:bd:dc:ee:20:6d:
         bb:ae:e9:94:93:55:19:15:46:59:1f:84:db:a8:72:56:61:af:
         73:22:3f:42:ad:b3:96:d9:bd:e4:37:33:40:15:09:c2:b2:e9:
         4b:92:41:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:02 2026 by rpki-client