Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
File:                     d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json)
Hash identifier:          OQxRvhRVw6qkqCqfS7TQSJ1MdVWR9znQn69CI9Js3RE=
Subject key identifier:   E0:E7:31:6E:AA:65:CD:87:2D:4C:E3:F4:57:6B:9D:B3:0E:A4:CF:AD
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Certificate issuer:       /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial:       019E1FECCC27B80CB0852375CEFF2603177F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
Manifest number:          150D
Signing time:             Wed 13 May 2026 06:01:12 +0000
Manifest this update:     Wed 13 May 2026 06:01:12 +0000
Manifest next update:     Thu 14 May 2026 06:01:12 +0000
Files and hashes:         1: _wLbQqpNFVUZXfwkKPHS2EvNsME.roa (hash: b13XNsSSVdJxlN2jmJcwJ/ExmpGXyR6dAM9BzylibwA=)
                          2: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: WNQFxzPto/bxVHK36WohqFAPVL4MVqqFaQ6Gfl0omdQ=)
                          3: k3fmZjh5Nd4d9i-yTk1YzO9a-ow.roa (hash: mS6dHnW2WbLdF67XEsAw2GyVUdDMoZ8sBWqhN+eeuMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:cc:27:b8:0c:b0:85:23:75:ce:ff:26:03:17:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
        Validity
            Not Before: May 13 06:01:12 2026 GMT
            Not After : May 14 06:01:12 2026 GMT
        Subject: CN=e0e7316eaa65cd872d4ce3f4576b9db30ea4cfad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c7:2b:e7:b6:e0:ca:cc:04:ba:d6:40:4b:f4:
                    0c:e8:7e:95:23:44:91:ce:d3:56:c1:20:2c:3b:d0:
                    02:5c:69:71:a3:79:ca:ea:d6:60:e0:f8:28:1b:39:
                    25:6c:40:3b:b4:5a:59:ff:80:85:ec:74:db:18:71:
                    7e:c2:c2:49:ff:1b:90:65:29:03:7c:fb:6a:70:37:
                    dc:bf:31:82:ab:15:8c:6b:03:12:26:db:8e:c5:9a:
                    9b:3c:fc:e0:8b:a2:4b:2f:17:e4:e8:c1:9e:b7:b1:
                    46:c7:5f:d6:b3:7b:89:e5:83:b2:6e:5f:df:a4:f8:
                    63:3e:41:e2:29:d0:dd:50:cb:ba:f4:cd:91:e1:b7:
                    0a:56:65:ae:0d:43:85:f8:74:dc:42:44:42:09:8c:
                    c6:a6:c4:75:12:7c:ff:35:bc:85:a4:fc:3a:d7:98:
                    eb:e2:21:57:55:a7:44:ef:b4:8c:77:7b:fa:f3:f1:
                    78:ad:aa:ff:59:f3:d6:ec:e7:be:15:f4:16:83:fd:
                    05:af:1b:ca:2b:12:63:69:32:c9:e5:0e:9f:57:b4:
                    fb:44:81:1b:a9:4b:be:c9:94:e7:97:73:95:0c:8f:
                    f0:24:3f:da:9b:c4:03:62:fd:a6:c7:3f:9d:17:26:
                    a6:19:b1:5e:12:15:41:ab:a7:bb:d5:d6:85:34:41:
                    da:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E7:31:6E:AA:65:CD:87:2D:4C:E3:F4:57:6B:9D:B3:0E:A4:CF:AD
            X509v3 Authority Key Identifier:
                keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:1c:2b:f2:bd:29:21:9e:ea:a4:9f:11:8b:e8:06:77:63:58:
         a2:16:4f:9a:88:2f:d7:ed:3a:cb:78:42:e4:97:97:da:2c:51:
         be:31:9d:49:ec:2b:c2:ef:73:7d:69:5d:e4:b4:ef:a9:be:ec:
         74:a2:d5:a7:c6:80:9a:71:15:70:9e:3f:73:e2:d1:19:ba:d9:
         63:f5:5e:26:73:07:6a:fc:09:e6:9e:f2:26:0b:4d:5b:12:9d:
         b9:0d:e4:ed:07:9a:1e:08:95:d4:3d:fe:8f:65:c7:95:38:12:
         d6:64:be:e8:21:78:59:cd:a2:a8:24:37:ec:e4:d6:e4:d5:9b:
         62:b0:0c:c7:2c:a2:58:42:e8:67:96:18:6c:0e:2d:08:ce:13:
         c1:86:31:08:ae:be:3c:4a:6a:1a:09:a5:53:e2:91:d8:3c:f7:
         41:38:e2:9a:16:f0:76:d9:75:ae:27:ca:2c:50:76:d5:6c:c8:
         82:a7:2e:7a:f4:15:e4:bd:9f:c6:d3:17:b8:86:e7:ed:b2:6f:
         ab:09:c5:45:27:60:bf:15:31:cb:61:c5:93:f0:89:7f:ca:cb:
         02:68:b7:6f:6a:cd:8f:55:60:04:62:26:a5:1f:95:25:ab:f9:
         fa:1c:78:18:18:a3:7d:b5:54:39:e6:0a:51:55:a9:49:1a:ca:
         6a:4d:d2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:04:00 2026 by rpki-client