Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft
File:                     7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft (raw, json)
Hash identifier:          QhEF2akTfQoz2LZvZj5aY7XpKHYYkxgDWLG8Kpk3BTM=
Subject key identifier:   33:46:E2:E2:B8:80:CC:08:BB:91:4F:CE:52:3E:68:40:5E:7C:D6:89
Authority key identifier: EE:A7:09:FE:AA:0A:9F:A0:88:6D:7A:B1:20:68:AA:7F:DA:97:9F:88
Certificate issuer:       /CN=eea709feaa0a9fa0886d7ab12068aa7fda979f88
Certificate serial:       019E20924BB51B4F1BD58D6BA3B0B0F035CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft
Manifest number:          E0
Signing time:             Wed 13 May 2026 09:01:59 +0000
Manifest this update:     Wed 13 May 2026 09:01:59 +0000
Manifest next update:     Thu 14 May 2026 09:01:59 +0000
Files and hashes:         1: 7qcJ_qoKn6CIbXqxIGiqf9qXn4g.crl (hash: o3eO1+8u3Af6QPdF5AgEk2wjPaoNoZR4gsphW3iABcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:92:4b:b5:1b:4f:1b:d5:8d:6b:a3:b0:b0:f0:35:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea709feaa0a9fa0886d7ab12068aa7fda979f88
        Validity
            Not Before: May 13 09:01:59 2026 GMT
            Not After : May 14 09:01:59 2026 GMT
        Subject: CN=3346e2e2b880cc08bb914fce523e68405e7cd689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:69:6f:cd:04:23:10:60:bd:92:12:67:3e:da:
                    95:da:23:ba:9d:02:83:c7:55:93:f5:7a:63:d9:75:
                    dc:c7:da:d0:dc:d2:a2:8e:59:f7:10:07:ac:92:cb:
                    e9:60:59:57:63:fe:76:1b:fe:ae:c9:6a:c8:aa:c6:
                    bd:47:e9:91:8d:13:cf:76:d9:1c:69:a3:b2:b7:a9:
                    5b:eb:0c:4e:ef:c5:af:85:bf:12:b7:fd:61:9c:3a:
                    cf:d6:4e:9c:d9:dc:38:77:5c:88:53:f6:81:5b:ac:
                    83:b5:f4:e9:a2:df:7a:02:b2:31:44:db:b9:55:cc:
                    df:cf:73:2d:84:25:bd:cd:20:e5:3b:45:03:f4:1c:
                    64:88:3c:a7:42:d0:ae:ea:8e:28:a1:21:84:29:6b:
                    66:2a:25:70:d4:27:5f:b6:7b:9c:71:59:92:c4:6a:
                    4f:3a:72:95:04:db:bf:e2:d2:60:82:8b:df:21:93:
                    d5:30:45:36:b6:55:a3:8a:b4:57:5f:d9:d5:29:8d:
                    8f:f6:17:f8:c0:22:05:ee:57:8f:e4:38:ae:75:e5:
                    d4:ad:e6:da:5a:2e:a0:82:40:19:07:0a:25:ef:3e:
                    ea:01:67:82:2f:a0:bd:46:69:e9:6f:b9:0b:71:eb:
                    e5:f3:f8:96:cb:12:fd:b7:23:d4:e6:d8:fc:e1:83:
                    5b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:46:E2:E2:B8:80:CC:08:BB:91:4F:CE:52:3E:68:40:5E:7C:D6:89
            X509v3 Authority Key Identifier:
                keyid:EE:A7:09:FE:AA:0A:9F:A0:88:6D:7A:B1:20:68:AA:7F:DA:97:9F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:71:40:f8:a1:92:12:41:e5:67:af:0d:7b:71:3d:66:db:a8:
         28:0c:c5:90:ba:fc:ed:d0:bc:66:78:cb:70:58:8c:56:a7:48:
         45:bb:8b:30:2e:ed:80:13:2d:8c:0f:0c:b1:c0:18:6d:a7:d7:
         b2:7f:ff:db:04:81:5d:40:a2:43:c6:91:9d:ef:55:97:34:4c:
         3c:01:77:01:e1:f1:32:71:88:5d:31:8f:84:f7:9d:36:2a:2c:
         0d:89:25:1f:01:68:7d:b5:49:a1:58:3d:11:d7:2e:1b:80:27:
         b9:50:9f:b6:02:20:15:2f:4d:ec:57:9a:ec:c2:6c:b5:4a:0a:
         8a:97:48:98:32:fe:e6:09:63:95:97:56:ac:25:77:8d:e3:b5:
         72:e2:6b:4f:83:10:83:c6:0c:d2:ca:6b:81:b7:46:b3:b2:41:
         58:bf:d2:e0:4c:48:15:12:76:0a:2a:a8:7a:8e:f2:5d:7c:d5:
         46:ef:36:6e:62:9b:07:ad:cd:00:14:34:5a:39:7e:19:ff:2b:
         39:4a:32:a0:37:e8:55:22:58:8f:68:42:97:6b:7f:9c:3d:a4:
         6a:71:79:e0:81:b1:e3:a9:2c:5d:40:db:ef:fc:e7:cb:a2:10:
         58:5a:df:db:37:69:cc:e3:ed:e1:a9:ad:95:33:c5:ae:4b:73:
         af:e0:ab:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:22:23 2026 by rpki-client