Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
File:                     7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json)
Hash identifier:          ktShI8Moq47MXcmfSdU9s4PGx72W2X0W6lHVnq4ifFY=
Subject key identifier:   11:5E:D1:4A:B7:19:6D:58:B3:63:4E:30:B7:FE:D5:41:91:AB:52:30
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Certificate issuer:       /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial:       019E1FB60B89902EA36D94C7046A376EBC90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
Manifest number:          0FC8
Signing time:             Wed 13 May 2026 05:01:24 +0000
Manifest this update:     Wed 13 May 2026 05:01:24 +0000
Manifest next update:     Thu 14 May 2026 05:01:24 +0000
Files and hashes:         1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: K0E8p/mlqFoaT5RFqdCA6EJXe1x/x8irWQlARKVXY5o=)
                          2: P24w_jLhUQYot-hYm7zVBeSYmLE.roa (hash: PHPMkNKEzzvlTlm3p3Tx5ImcestRuod2cI9K8iRdJC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b6:0b:89:90:2e:a3:6d:94:c7:04:6a:37:6e:bc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
        Validity
            Not Before: May 13 05:01:24 2026 GMT
            Not After : May 14 05:01:24 2026 GMT
        Subject: CN=115ed14ab7196d58b3634e30b7fed54191ab5230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1b:80:5d:ff:3f:d6:19:75:fc:78:52:32:c0:
                    4b:7d:a9:79:c8:16:cd:9d:d4:ec:29:23:89:73:6a:
                    7e:c1:85:e9:ac:15:32:3a:ba:e3:4e:28:5a:97:2c:
                    ba:9b:76:51:d0:96:20:1d:ad:46:35:40:41:5c:af:
                    ba:95:0a:07:98:39:8a:61:2c:64:1d:d6:d4:99:e2:
                    1d:af:9e:91:c9:04:f0:5a:83:30:dc:d3:36:af:9f:
                    c0:be:5d:4c:3b:90:04:d3:b0:a7:85:4e:da:54:87:
                    92:bc:66:ff:6e:81:ba:29:36:7b:95:34:3d:83:5b:
                    2d:dd:57:9d:4f:08:65:4d:b0:43:55:ce:71:ec:59:
                    b6:7a:3e:fa:24:d6:32:d4:bd:42:3c:08:42:8f:11:
                    29:00:51:94:0b:2e:98:80:04:91:77:97:68:cf:db:
                    9a:16:fe:ea:6e:83:78:ae:d0:5a:46:73:30:52:82:
                    14:24:67:d4:b8:3c:cb:a1:39:3a:22:76:d6:bd:9f:
                    60:a1:8e:b7:17:eb:8f:b1:0c:c6:08:fa:66:1f:01:
                    d3:e9:0a:00:44:e3:3f:1a:12:01:5e:3b:d6:72:08:
                    14:c1:14:5d:7e:79:52:32:f0:65:b7:35:3e:55:47:
                    68:43:94:ed:bd:eb:3e:34:ea:fb:70:d2:0a:ec:a2:
                    0b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5E:D1:4A:B7:19:6D:58:B3:63:4E:30:B7:FE:D5:41:91:AB:52:30
            X509v3 Authority Key Identifier:
                keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:94:cc:d5:d7:fa:dd:77:4f:e9:e2:31:11:82:3d:f3:3f:4a:
         60:e8:90:27:9e:32:32:b4:9e:f1:b8:9f:27:b4:a7:0d:e8:d5:
         ac:8d:e4:35:d1:d2:66:83:28:9d:29:8a:28:29:67:f6:e1:70:
         be:a7:cf:de:4b:db:b3:8e:ef:79:2f:e4:61:c7:cc:ea:51:9d:
         e6:27:cf:f9:f1:aa:1f:6f:43:32:8c:4a:0e:5a:b9:ce:d8:0f:
         c7:09:8e:7c:ca:24:a2:a2:12:7c:60:b6:6b:b4:bf:79:81:68:
         63:e0:fd:26:f8:91:42:c6:be:11:a9:53:c7:29:5b:e9:16:a4:
         d7:59:32:68:a0:4b:c4:5d:9f:45:6e:35:b4:1b:db:25:01:00:
         b3:ea:89:7d:71:f3:e8:f4:ca:21:e6:2e:af:77:c7:be:72:05:
         76:e0:d1:68:e3:64:7b:b4:7b:fd:90:89:d8:03:8a:3a:18:e0:
         55:f2:bf:7f:02:f3:95:b1:6c:a6:70:f3:dc:03:49:71:71:06:
         5a:4c:ae:a5:12:e6:c2:56:c2:1c:28:6a:a5:6a:6a:db:3e:46:
         f8:4d:4b:95:64:17:86:30:41:79:73:63:49:bb:1f:c5:41:b9:
         d8:65:c1:7d:47:5a:3f:1c:8d:c6:ac:65:a0:de:49:10:ee:86:
         c1:20:31:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:31:26 2026 by rpki-client