Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
File:                     7bkm-MYDqrectGqIO_YyVko_qr8.mft (raw, json)
Hash identifier:          9cpkbl5bcyOqgpuEygRsVaOGz6OsVZWQQRowltIV5B8=
Subject key identifier:   D9:64:2A:DE:EA:5F:1D:02:5B:62:0C:AF:75:8B:35:CE:B2:17:C5:DE
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Certificate issuer:       /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial:       019E1C0F8561CB284E93A62FAD512173D55A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
Manifest number:          1935
Signing time:             Tue 12 May 2026 12:00:39 +0000
Manifest this update:     Tue 12 May 2026 12:00:39 +0000
Manifest next update:     Wed 13 May 2026 12:00:39 +0000
Files and hashes:         1: 7bkm-MYDqrectGqIO_YyVko_qr8.crl (hash: EXm+f3FMD4auMmqYP/2dt200VM4fXwhi4yiUiWQUCms=)
                          2: ZOavrk-QF97rJP_2jNT7lmVgOvE.roa (hash: r2s3h1w3Hjfzrez9cKoP8cqtXCYOTfAkva8ue3B7Z2Q=)
                          3: b4zo6KiTgoc5L-wE1iEGLa3ot54.roa (hash: 7qq5CHWNx2oa5BEGotuEcxfckS6TczcC6U6UJrqCLzo=)
                          4: ffZakNnkJ9qo1A3shFhtl9qXd_Q.roa (hash: zf21A+pRvsATbzNE1edRMBnzKSA0PFpPQRbeA3NRvG4=)
                          5: i5sVIykITJhFoNGVdqX3qFf6Cc0.asa (hash: z2bcBM4bF0FCwzKB9WKDbXNW4is6WFRzNqcdWd30bYM=)
                          6: yAkFpEjxzs83ywPRwqAL5e8lJeY.asa (hash: UIEBVxj1ZzIVrxFkEdeMxmISP4feVXlw74eOZ0lv+Sk=)
                          7: ySpczFe0bFDpQcjPCdkMrRLgsk4.roa (hash: 4bkzvAWfxVndAxO5MdGK6YbLnfuFOHsrNBENCi5CdAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:0f:85:61:cb:28:4e:93:a6:2f:ad:51:21:73:d5:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
        Validity
            Not Before: May 12 12:00:39 2026 GMT
            Not After : May 13 12:00:39 2026 GMT
        Subject: CN=d9642adeea5f1d025b620caf758b35ceb217c5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:c0:21:e7:81:b5:95:90:9a:1c:6a:e7:15:
                    98:b5:1b:08:09:e0:6e:68:73:95:1b:7e:6e:55:b9:
                    61:f3:10:ea:57:a2:3d:6b:6b:43:cb:ea:ab:56:fe:
                    03:94:d7:9b:42:dc:28:db:a6:20:d3:89:19:62:c9:
                    07:39:ec:b0:b3:c1:e2:b0:8a:3a:df:c0:b6:17:79:
                    5c:01:4d:ea:c6:f7:c9:1a:55:e9:36:e8:c5:2f:18:
                    b6:f4:16:a5:77:d7:d7:e6:86:80:2a:cb:85:cd:5b:
                    4c:96:14:34:b3:4a:1d:f2:c1:2d:dc:f0:8f:fd:90:
                    16:79:23:2c:68:f4:6d:f5:0c:9c:bd:2a:d3:65:15:
                    b5:5b:c5:f7:a3:20:d3:14:97:2e:f4:65:d7:a1:07:
                    5a:ef:95:0f:9c:24:ff:d8:92:63:28:f9:1c:89:c9:
                    0f:4e:22:d6:49:ad:65:b7:b0:e1:11:28:f5:96:2d:
                    b5:23:7e:c4:28:f4:7b:1e:48:60:80:a0:ca:3f:b7:
                    bb:32:5e:64:c5:58:b9:f6:55:6d:e3:72:50:57:41:
                    de:6b:86:92:48:1b:65:5f:42:11:c8:ec:08:e1:cd:
                    f3:a1:1b:3d:f6:f4:a5:71:50:9d:4f:aa:44:4b:81:
                    34:0e:af:f2:9f:7f:df:09:68:9c:b9:e3:2f:6b:9b:
                    73:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:64:2A:DE:EA:5F:1D:02:5B:62:0C:AF:75:8B:35:CE:B2:17:C5:DE
            X509v3 Authority Key Identifier:
                keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b7:6c:50:f9:62:e4:26:26:7b:d6:5f:7d:a4:48:ad:f5:6c:
         87:72:b6:3a:a7:8f:d3:b4:77:a7:91:35:ac:38:d7:91:02:08:
         ea:f0:2d:f4:8c:42:0e:14:03:15:ac:e6:68:c1:93:fe:09:3b:
         bf:3c:82:1c:3d:f0:24:fd:72:58:95:ea:c4:bd:6a:36:c6:cc:
         d5:ad:a5:60:7e:7a:a3:b1:a0:3e:ad:7f:b6:b1:93:c0:2f:6d:
         09:f1:d1:ab:c7:48:d4:70:49:d3:c6:c8:a3:23:e8:7e:cf:5b:
         0c:30:7c:5b:91:68:47:12:af:32:9f:0b:07:17:78:ce:df:64:
         96:e0:94:8b:c9:2f:03:22:16:50:b1:da:30:1b:09:66:67:c2:
         3c:2b:88:e4:12:54:d1:9c:af:86:b4:25:1f:5b:e7:28:5f:9b:
         5b:3b:04:da:49:bb:e6:ff:b8:c7:f7:6a:3b:13:45:69:17:26:
         68:b2:86:d0:92:47:67:4b:14:4c:86:d4:29:73:62:33:66:e9:
         d0:a0:3c:22:4b:ab:58:d2:92:49:da:e2:1f:82:ac:52:d7:93:
         a3:5f:c4:4f:24:e1:b9:7a:13:22:80:3d:f4:0b:4e:d1:89:66:
         90:3d:a5:d9:0c:de:35:72:57:f1:51:9c:90:15:83:12:54:50:
         1e:0f:76:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:35 2026 by rpki-client