Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
File:                     7q2qYzkQO9tVZtgycdPEfABcJQ0.mft (raw, json)
Hash identifier:          i7A9/pm33gkl0G3+4uJdNxpaG53CrF+OsDn2LbJAYBk=
Subject key identifier:   5D:26:86:AD:21:A3:5B:72:54:B5:87:E0:33:94:A1:97:B9:40:93:E8
Authority key identifier: EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
Certificate issuer:       /CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Certificate serial:       019E1CEC0278DED6E1204DFD0C99722E06AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
Manifest number:          0D6B
Signing time:             Tue 12 May 2026 16:01:29 +0000
Manifest this update:     Tue 12 May 2026 16:01:29 +0000
Manifest next update:     Wed 13 May 2026 16:01:29 +0000
Files and hashes:         1: 7q2qYzkQO9tVZtgycdPEfABcJQ0.crl (hash: lK9j7RRV3A2/19acusOpf1x2zsMMEFpEhz2HsE6FUN0=)
                          2: Mt1633RiBIpuKnZW3jSMaHpSdRI.roa (hash: 6BNDp2CLnyhsZWA//die5Cd+w8BRp6sCkxu8tySEnX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:ec:02:78:de:d6:e1:20:4d:fd:0c:99:72:2e:06:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeadaa6339103bdb5566d83271d3c47c005c250d
        Validity
            Not Before: May 12 16:01:29 2026 GMT
            Not After : May 13 16:01:29 2026 GMT
        Subject: CN=5d2686ad21a35b7254b587e03394a197b94093e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d6:63:4c:d1:32:58:90:d3:b2:69:45:40:08:
                    19:39:aa:2b:29:52:e1:9b:80:70:15:9a:58:6e:f3:
                    d7:12:d6:bb:21:b0:6e:94:4b:78:75:4e:71:42:55:
                    a6:6a:d8:c2:62:14:e8:e3:16:dd:91:f6:a8:03:d7:
                    0b:d7:ff:50:0e:f9:15:f6:41:96:a0:4e:87:72:9d:
                    09:6b:5b:9a:4f:1f:a3:f7:4d:7f:cf:e8:67:c9:1e:
                    4f:dd:e2:0d:0a:53:9e:e3:76:13:7f:75:44:90:ab:
                    f3:6c:9c:10:bd:9c:e4:88:ee:d2:58:b7:f0:6f:ec:
                    a1:68:28:59:4c:ba:9a:9a:2a:53:e7:37:cd:14:db:
                    4b:66:e7:0e:a3:d1:51:24:59:20:87:dd:4c:3a:f2:
                    d6:71:3b:74:0a:38:a1:24:89:08:2c:c9:a8:bd:fd:
                    da:ba:65:5f:f7:f0:05:cd:88:d5:9d:0f:18:13:2b:
                    9b:f2:fd:ff:ef:f4:1a:5e:83:f5:d4:63:3d:42:48:
                    ae:60:9a:8a:fb:fa:de:8a:65:1e:97:d7:7f:c1:41:
                    a1:40:63:80:b1:4d:52:89:f6:83:20:8f:36:10:9f:
                    11:c0:6a:b1:10:bf:de:18:9c:1c:b7:98:7c:98:84:
                    59:4f:93:49:05:b8:87:c7:c9:c6:1b:25:4a:09:84:
                    ea:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:26:86:AD:21:A3:5B:72:54:B5:87:E0:33:94:A1:97:B9:40:93:E8
            X509v3 Authority Key Identifier:
                keyid:EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:7e:ce:98:15:d6:97:ba:54:bd:61:94:7f:2c:0f:20:a1:55:
         03:7f:0f:51:c5:81:c8:d8:56:4c:08:56:d5:d1:27:90:ed:38:
         1c:10:f1:2f:62:53:08:a8:ab:f2:94:b9:59:73:b1:57:86:5c:
         65:55:5b:89:0b:c3:11:a9:4c:45:1d:18:0e:be:18:e0:17:2f:
         0c:af:38:38:eb:e7:88:a0:df:7e:62:86:c2:4c:02:2c:97:fa:
         a0:5d:02:d9:91:7b:d0:ac:c5:5c:9c:f9:a7:f5:2d:a0:58:7f:
         7e:63:d1:de:2b:ec:e9:ba:2f:7c:d4:94:53:39:2b:4f:5c:2a:
         78:14:03:c5:43:31:84:5e:9a:1b:4c:c4:3a:63:97:d5:9f:d6:
         57:d6:ab:58:43:40:b8:c6:3b:45:7f:7b:eb:9b:40:af:59:e4:
         db:0a:91:e6:b0:9f:89:9a:91:e9:ef:10:74:68:47:b6:b9:70:
         f5:a4:22:21:04:04:0e:1e:a1:4e:8f:d7:3f:8a:44:99:6a:86:
         76:05:7e:51:4a:b4:ca:94:1b:0c:8a:93:49:7a:3b:d7:83:5c:
         d3:74:4f:ac:fb:25:9a:0c:29:a9:23:b5:39:93:eb:13:10:34:
         12:e3:d8:27:72:26:f8:cb:cb:31:e6:fa:ff:fd:e7:1d:66:5d:
         b9:08:88:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:52 2026 by rpki-client