Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.mft
File:                     7-61Dv7SnBcXEIVACvB8ZpD6OWo.mft (raw, json)
Hash identifier:          jQbe0mYrQV7iCKDnwCNpwHyyLsJvvb8fOYBFLonH8RI=
Subject key identifier:   F1:63:55:23:BE:D3:10:8B:7F:D3:C3:A5:D2:D3:DE:FC:01:C4:97:A3
Authority key identifier: EF:EE:B5:0E:FE:D2:9C:17:17:10:85:40:0A:F0:7C:66:90:FA:39:6A
Certificate issuer:       /CN=efeeb50efed29c17171085400af07c6690fa396a
Certificate serial:       019E1C7D90FCD1886185037058C433D8D399
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-61Dv7SnBcXEIVACvB8ZpD6OWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.mft
Manifest number:          05
Signing time:             Tue 12 May 2026 14:00:51 +0000
Manifest this update:     Tue 12 May 2026 14:00:51 +0000
Manifest next update:     Wed 13 May 2026 14:00:51 +0000
Files and hashes:         1: 7-61Dv7SnBcXEIVACvB8ZpD6OWo.crl (hash: T4U/ffrHK+YeKDeo95nlLU0Bv84/4/wPjIYVW0LHaoo=)
                          2: JS4OZw-dfoAGScXsIL4kb3KCX_4.roa (hash: CsnYx8saM2GDN99ZZzqzztzcHAktERUojOcFYdBknRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-61Dv7SnBcXEIVACvB8ZpD6OWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:90:fc:d1:88:61:85:03:70:58:c4:33:d8:d3:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efeeb50efed29c17171085400af07c6690fa396a
        Validity
            Not Before: May 12 14:00:51 2026 GMT
            Not After : May 13 14:00:51 2026 GMT
        Subject: CN=f1635523bed3108b7fd3c3a5d2d3defc01c497a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ab:f3:91:c9:83:97:de:58:f9:6a:b2:d4:60:
                    42:be:38:e9:d7:68:64:45:90:6c:a4:70:23:e2:63:
                    3a:ce:3f:f3:08:13:78:9a:85:cd:dd:cb:a7:81:f7:
                    1e:b4:8b:b5:73:b7:35:cf:5c:23:3c:cd:a3:f8:c7:
                    a0:38:33:a2:8a:d3:1d:68:b4:78:76:ae:5f:7d:a1:
                    70:3e:70:7f:78:54:1e:62:60:c7:c5:78:5b:3e:35:
                    93:b9:02:f6:80:4c:36:30:33:47:3b:83:91:6d:a6:
                    bb:20:8f:5e:7a:e7:ae:b1:d2:71:74:d9:1c:15:1e:
                    cc:3f:b5:16:9e:e2:99:22:cb:14:02:74:a9:a8:16:
                    4a:88:78:de:cf:26:32:4b:82:53:1a:47:b4:d2:b8:
                    47:ad:3c:b6:29:f1:b3:1d:d5:e9:c6:51:0f:80:05:
                    84:42:72:b1:17:2b:b7:06:13:4c:8b:5e:ee:cd:46:
                    65:e0:9b:9d:6a:6f:66:01:7a:27:7f:a2:6a:61:47:
                    81:f0:40:0c:4b:95:ee:4e:bf:ff:a9:15:b6:0d:16:
                    7a:95:48:4f:65:e8:89:95:1c:ae:28:d3:95:48:9f:
                    ba:65:99:c1:f8:b6:1c:b4:a8:38:48:1b:1e:57:ff:
                    af:29:c1:1f:31:5f:68:d4:64:9a:08:00:44:58:3f:
                    27:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:63:55:23:BE:D3:10:8B:7F:D3:C3:A5:D2:D3:DE:FC:01:C4:97:A3
            X509v3 Authority Key Identifier:
                keyid:EF:EE:B5:0E:FE:D2:9C:17:17:10:85:40:0A:F0:7C:66:90:FA:39:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-61Dv7SnBcXEIVACvB8ZpD6OWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:bb:c9:99:df:30:95:9b:5c:5b:0d:fa:26:c4:03:e1:ef:34:
         8c:37:82:f9:6a:fe:61:9c:7c:f4:14:0f:65:2b:85:7f:e2:cf:
         64:af:6c:2e:6b:7e:7b:fa:45:74:a5:17:bf:62:81:32:50:5f:
         c0:df:56:1a:35:e3:45:a7:e3:48:ba:fd:fd:1b:ad:9f:58:cb:
         81:5e:02:62:1c:18:13:e3:bd:09:17:3b:6e:a6:57:2c:7f:25:
         1c:bf:2e:8b:0b:39:69:d4:8b:cb:b1:a1:3a:44:73:cd:35:3c:
         7d:f1:11:9b:4a:48:9b:e7:07:43:df:ae:3b:57:44:7e:5f:7e:
         64:aa:27:ee:f1:bc:28:7f:dc:d6:0f:26:7c:99:1b:f4:d3:46:
         9c:25:17:18:e9:84:cf:00:ab:e1:e9:a2:d0:51:46:ec:68:19:
         90:c7:42:6e:e8:b1:73:75:b9:7f:4f:d9:9e:98:e2:11:c9:fc:
         53:af:7e:88:8a:25:0b:44:cd:f5:50:e5:c3:fd:38:f0:11:d1:
         7c:0d:16:2c:b6:20:a0:30:a5:4c:87:1a:ab:b9:d3:b4:8c:de:
         fe:d5:97:a2:8f:fa:16:c0:be:92:48:61:69:f3:c6:b6:b3:1c:
         01:31:b3:dd:71:56:a6:37:29:15:c1:77:77:04:46:8e:6d:54:
         0d:02:f6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:12 2026 by rpki-client