Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
File:                     7JJpGF9j3DNWA39xPOigkJ_wciU.mft (raw, json)
Hash identifier:          9+VZv3nvfjik1KAHj99K8kX5+F3s2jUuIkn1NME+rHQ=
Subject key identifier:   5E:62:BC:00:8C:60:85:65:01:09:57:8E:6F:E0:7B:E1:34:2A:9A:05
Authority key identifier: EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25
Certificate issuer:       /CN=ec9269185f63dc3356037f713ce8a0909ff07225
Certificate serial:       019E1C101C8456B11C92F6D7A7CDBA6C5F17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
Manifest number:          0DFD
Signing time:             Tue 12 May 2026 12:01:18 +0000
Manifest this update:     Tue 12 May 2026 12:01:18 +0000
Manifest next update:     Wed 13 May 2026 12:01:18 +0000
Files and hashes:         1: 7JJpGF9j3DNWA39xPOigkJ_wciU.crl (hash: Cd/V51UZO43AuGHKIjYdRTzUoK+KjaJnEPkurUlIPis=)
                          2: svvoqJIRYC-HEv4mFDJ4yabrIfA.roa (hash: DylecbDSgd1YsXawir60/ZUXc9wMtcV4PzlLtSqtsUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:10:1c:84:56:b1:1c:92:f6:d7:a7:cd:ba:6c:5f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec9269185f63dc3356037f713ce8a0909ff07225
        Validity
            Not Before: May 12 12:01:18 2026 GMT
            Not After : May 13 12:01:18 2026 GMT
        Subject: CN=5e62bc008c6085650109578e6fe07be1342a9a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:89:d5:f3:44:f1:c6:f8:5e:e9:f2:a0:cc:40:
                    5d:a1:a9:5e:c6:55:b8:29:c4:ca:6e:8f:dc:b2:24:
                    64:03:4b:2a:12:c4:17:0a:2c:ef:f8:fc:25:cc:96:
                    45:2e:91:9d:bc:7d:27:89:77:57:c3:2c:77:d1:61:
                    6b:f1:49:e5:bc:c9:f6:28:c9:30:83:06:25:94:c9:
                    19:c7:61:58:19:45:c3:28:94:6a:e1:88:e3:2d:4a:
                    17:22:40:a7:5a:c2:b5:86:2e:82:34:09:52:e7:7d:
                    63:2a:50:dc:27:9c:9e:cc:d8:d6:29:f8:e7:f3:a2:
                    46:fe:5c:f1:56:cf:58:8e:04:36:bb:1b:ac:b3:69:
                    57:0e:57:42:40:9a:21:5b:32:9d:e7:3e:32:b7:a3:
                    bc:79:17:e3:f7:d7:1e:a9:4a:62:e0:e8:ec:56:29:
                    d5:03:d5:f2:a3:71:d5:c6:f7:b3:54:7c:2e:b2:14:
                    b1:06:1f:9c:a3:a0:e1:9f:e5:0c:45:d8:2d:de:e9:
                    e1:da:a1:a9:20:74:97:5a:19:86:31:d3:74:2c:24:
                    5c:a7:38:c8:ee:5d:a7:52:ec:46:f1:e6:7c:be:8c:
                    55:6c:8f:11:e5:47:a8:7b:a8:dd:5c:1d:47:7b:b8:
                    2e:b6:e4:90:1b:e6:3c:34:20:97:48:5c:38:7e:ce:
                    11:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:62:BC:00:8C:60:85:65:01:09:57:8E:6F:E0:7B:E1:34:2A:9A:05
            X509v3 Authority Key Identifier:
                keyid:EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c5:3a:9d:35:f9:40:23:f5:b4:54:cf:8b:a9:d4:f4:af:e7:
         45:94:14:0d:ab:4e:72:08:c7:a9:f7:4c:34:59:bd:bf:0a:9a:
         08:d9:2d:8c:2f:ba:6d:08:fa:42:7a:5d:c1:4d:ec:5c:f9:a5:
         6d:c5:5b:b2:64:dd:f9:fb:1b:43:3c:12:95:65:6e:43:20:ff:
         43:f7:bd:21:e5:b4:03:25:0d:c2:81:c0:f3:fa:be:98:2c:56:
         11:4d:1a:26:4a:c1:b9:3c:55:34:a4:c1:fd:ea:7a:53:43:c9:
         6c:81:ae:ba:c2:8f:5c:ff:51:a4:1b:4d:af:cf:32:73:20:71:
         1d:fb:05:26:c9:fd:5a:ef:3e:b5:89:65:82:08:37:8c:42:49:
         0c:2a:44:a4:aa:bb:cf:05:d6:f4:87:7e:9d:e6:89:e3:db:2c:
         af:21:a3:a2:ac:08:09:72:75:3c:ac:8f:eb:4c:e0:b2:41:a3:
         93:ad:41:2b:f3:36:a4:cc:40:07:8a:88:0c:ab:9d:af:1a:45:
         1a:f9:06:5e:fe:b9:2d:d9:d1:84:75:e9:63:06:ec:96:bc:11:
         d7:80:bb:ea:86:aa:56:79:cd:b1:3f:a6:67:ba:8f:88:84:43:
         82:b3:bb:c6:71:91:36:87:77:b1:0c:d2:c6:33:f7:a4:1f:8f:
         d5:4d:ce:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:19 2026 by rpki-client