Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
File:                     7wC6UdY7F3WDfocvvehOLdCHT2M.mft (raw, json)
Hash identifier:          4+f+DErhiIcQy4/HZGXSUzqipGEd1vr0arc9B8acREU=
Subject key identifier:   76:23:77:26:5A:BC:0D:4B:8A:F5:38:3F:AE:6E:5F:E0:8B:7F:EB:7F
Authority key identifier: EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
Certificate issuer:       /CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Certificate serial:       019E1D911FBD1753F4745E462181BB0BA99D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
Manifest number:          15AD
Signing time:             Tue 12 May 2026 19:01:50 +0000
Manifest this update:     Tue 12 May 2026 19:01:50 +0000
Manifest next update:     Wed 13 May 2026 19:01:50 +0000
Files and hashes:         1: 7wC6UdY7F3WDfocvvehOLdCHT2M.crl (hash: LSMXCfTjNnJUGwKWUqR5eFu72UA46BIkxrojuTf0n6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:1f:bd:17:53:f4:74:5e:46:21:81:bb:0b:a9:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
        Validity
            Not Before: May 12 19:01:50 2026 GMT
            Not After : May 13 19:01:50 2026 GMT
        Subject: CN=762377265abc0d4b8af5383fae6e5fe08b7feb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:89:5c:7a:2f:e1:3a:de:51:42:f9:6e:63:0f:
                    98:73:43:b5:81:6a:7b:6c:7f:1e:75:28:79:a9:2e:
                    b6:06:31:b0:20:0e:bd:b6:95:e7:f6:f6:27:6e:da:
                    34:e6:ee:d9:f4:b5:5f:11:15:18:75:b7:04:a2:b3:
                    fb:ac:b7:66:34:00:11:0f:db:98:e4:2b:f0:f8:3b:
                    e8:12:42:45:1e:1d:e2:89:f7:4e:7b:60:80:c5:a2:
                    34:eb:bb:7b:b0:6b:e1:a4:18:92:07:a2:5a:51:b5:
                    e4:5a:14:32:d2:35:90:13:67:8c:07:5d:8a:d7:69:
                    8e:93:48:71:7d:6b:89:2d:e2:fe:d0:ab:1b:78:6d:
                    4a:d6:c3:4a:cd:38:c7:86:14:f2:9e:16:c5:0a:1c:
                    99:b8:89:09:88:0c:b8:29:8e:3b:16:2c:d3:d8:91:
                    ee:8e:4d:e1:96:04:df:fd:bb:fb:ca:32:f0:ab:03:
                    98:4d:b1:57:56:ba:3b:70:20:cf:b9:16:42:79:37:
                    32:66:ce:5f:6f:01:0c:69:e9:b4:12:03:69:5c:56:
                    f6:4b:6e:cc:b5:41:26:eb:9e:eb:a0:2f:27:9f:21:
                    c5:68:c5:65:c0:e5:77:57:5d:91:74:78:9e:8f:be:
                    fb:df:7f:39:fd:08:0b:2b:97:59:dc:64:f6:5c:21:
                    61:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:23:77:26:5A:BC:0D:4B:8A:F5:38:3F:AE:6E:5F:E0:8B:7F:EB:7F
            X509v3 Authority Key Identifier:
                keyid:EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:dd:76:29:48:01:d0:6e:f3:2a:82:bd:db:95:cd:1b:d4:c3:
         71:27:7b:3e:18:7c:c8:4b:f6:ef:4d:fa:6f:73:40:68:aa:dd:
         20:b3:29:50:3b:31:fa:d5:54:a8:56:8f:04:32:65:e6:1c:bb:
         30:92:6f:5f:6e:5b:d0:57:a1:5e:2f:9f:58:f9:37:a5:a4:1f:
         b9:bc:28:7f:35:5a:29:8d:5d:28:b4:19:9c:cb:d2:c5:d1:d8:
         92:06:5d:60:4b:32:9a:9a:cb:0c:06:1a:ed:d2:30:2e:7f:df:
         01:65:43:62:f3:c1:75:2d:52:3a:34:db:b5:39:63:30:d2:b2:
         4c:69:86:68:26:e6:d1:a5:e8:bd:0e:8a:63:a6:4b:e5:af:bb:
         49:cb:47:d2:21:17:3c:a0:fb:ff:bc:4a:12:00:40:49:be:60:
         90:f3:0d:10:f3:29:4f:7b:b2:6d:c3:9b:28:ba:8c:ef:e9:91:
         d0:3b:a1:ad:b2:84:b0:89:9f:29:02:06:84:32:7f:e9:1e:4c:
         62:65:8b:68:ee:a4:7d:f9:2a:60:c9:8a:9d:72:f8:2e:4d:0c:
         86:70:8f:0f:34:ca:b8:bd:28:e5:7e:8e:e8:b3:87:14:64:ba:
         60:34:5f:47:4c:bf:af:4e:8b:70:78:df:38:03:83:e7:a6:2a:
         67:f1:45:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkR+9F1P0dF5GIYG7C6mdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMDBiYTUxZDYzYjE3NzU4MzdlODcyZmJkZTg0ZTJkZDA4
NzRmNjMwHhcNMjYwNTEyMTkwMTUwWhcNMjYwNTEzMTkwMTUwWjAzMTEwLwYDVQQD
Eyg3NjIzNzcyNjVhYmMwZDRiOGFmNTM4M2ZhZTZlNWZlMDhiN2ZlYjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ilcei/hOt5RQvluYw+Yc0O1gWp7
bH8edSh5qS62BjGwIA69tpXn9vYnbto05u7Z9LVfERUYdbcEorP7rLdmNAARD9uY
5Cvw+DvoEkJFHh3iifdOe2CAxaI067t7sGvhpBiSB6JaUbXkWhQy0jWQE2eMB12K
12mOk0hxfWuJLeL+0KsbeG1K1sNKzTjHhhTynhbFChyZuIkJiAy4KY47FizT2JHu
jk3hlgTf/bv7yjLwqwOYTbFXVro7cCDPuRZCeTcyZs5fbwEMaem0EgNpXFb2S27M
tUEm657roC8nnyHFaMVlwOV3V12RdHiej7773385/QgLK5dZ3GT2XCFhOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYjdyZavA1LivU4P65uX+CLf+t/MB8GA1UdIwQY
MBaAFO8AulHWOxd1g36HL73oTi3Qh09jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3dDNlVkWTdGM1dEZm9jdnZlaE9MZENIVDJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9lMjUzZjYtODNlYS00YzdlLTg3NDIt
ODVjNTk1NDRjNmYzLzEvN3dDNlVkWTdGM1dEZm9jdnZlaE9MZENIVDJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9lMjUzZjYtODNlYS00YzdlLTg3NDItODVjNTk1NDRjNmYz
LzEvN3dDNlVkWTdGM1dEZm9jdnZlaE9MZENIVDJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXd12KUgB
0G7zKoK925XNG9TDcSd7Phh8yEv27036b3NAaKrdILMpUDsx+tVUqFaPBDJl5hy7
MJJvX25b0FehXi+fWPk3paQfubwofzVaKY1dKLQZnMvSxdHYkgZdYEsymprLDAYa
7dIwLn/fAWVDYvPBdS1SOjTbtTljMNKyTGmGaCbm0aXovQ6KY6ZL5a+7SctH0iEX
PKD7/7xKEgBASb5gkPMNEPMpT3uybcObKLqM7+mR0DuhrbKEsImfKQIGhDJ/6R5M
YmWLaO6kffkqYMmKnXL4Lk0MhnCPDzTKuL0o5X6O6LOHFGS6YDRfR0y/r06LcHjf
OAOD56YqZ/FFCA==
-----END CERTIFICATE-----
Generated at Wed May 13 00:53:50 2026 by rpki-client