Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
File:                     28FEzhVO7p27NWLOTNMigzhkEzM.mft (raw, json)
Hash identifier:          8h8UgWa5qeBF4SY+/Q88+zdD+XM1dJhzOoM6wQs3kP8=
Subject key identifier:   7B:DB:6F:B2:08:11:55:88:54:92:04:E3:65:14:1B:58:72:E2:8E:7A
Authority key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
Certificate issuer:       /CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Certificate serial:       019E1EA3629854934B70E27FB84F4718442A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
Manifest number:          18F2
Signing time:             Wed 13 May 2026 00:01:24 +0000
Manifest this update:     Wed 13 May 2026 00:01:24 +0000
Manifest next update:     Thu 14 May 2026 00:01:24 +0000
Files and hashes:         1: 28FEzhVO7p27NWLOTNMigzhkEzM.crl (hash: 4nrHyoMvib93KRSP2aD/tennMattmgkyl1CxxOufLnY=)
                          2: DP7T_q2dH40UAoEeaOyilRTarIc.roa (hash: eI6A0wd8tTUmEmNVJN3J+AgyOo9pOZ6DcargfGd5ggE=)
                          3: sxE81xLDEQT0P-TPsy-WofGvQHg.roa (hash: DGA+4dzkewtJxSyfNRDqxt+xT7jcUam8PPEoRnh0nXE=)
                          4: zkEx11XO93N85vwrTCOs3PDbZd0.roa (hash: Qdd6ijsBLwMFkDU5X4d6hXWxnnXx+SCnTnhqOiOzcAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:62:98:54:93:4b:70:e2:7f:b8:4f:47:18:44:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc144ce154eee9dbb3562ce4cd3228338641333
        Validity
            Not Before: May 13 00:01:24 2026 GMT
            Not After : May 14 00:01:24 2026 GMT
        Subject: CN=7bdb6fb208115588549204e365141b5872e28e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ea:ba:55:ab:1e:48:9f:20:14:08:e0:66:6f:
                    23:ed:0c:c6:b4:20:f8:cc:a4:8f:cb:74:d3:04:ce:
                    19:0e:d7:6b:79:7c:a8:d4:67:95:61:1d:ff:67:30:
                    e6:3a:1f:c9:81:c6:96:83:7d:7e:d1:f8:7b:90:89:
                    a4:60:96:cd:b6:e7:f2:ec:c9:7e:0c:40:37:d7:1c:
                    ca:3f:6a:1d:0f:f5:66:6f:81:69:55:5c:f3:46:c7:
                    a7:19:cc:e3:6c:a6:2a:f7:69:2b:73:24:a4:86:de:
                    a0:1d:8b:9a:eb:18:d6:00:34:af:b7:5c:d6:12:3d:
                    18:1d:fa:92:5f:af:34:77:b8:76:e5:29:e8:28:91:
                    69:c0:a5:ea:71:bd:1b:17:9b:c0:64:30:c1:04:88:
                    69:d6:6e:35:d7:b2:af:a1:9a:23:09:6c:df:a3:30:
                    67:f5:c7:b5:c9:c8:bd:0d:ed:de:c0:38:17:a2:67:
                    8e:e2:46:b9:86:b6:c8:ce:30:80:ff:bf:a9:e3:3d:
                    31:7a:11:a6:de:ee:28:f7:f2:54:af:64:3e:03:13:
                    a1:42:82:2f:54:e6:ad:f8:4a:63:46:8a:03:dd:a1:
                    7b:6a:e9:f7:07:3e:cd:11:6c:4f:da:08:be:43:bb:
                    19:f3:96:58:4d:bf:50:f3:b1:68:35:cf:37:c7:ef:
                    0f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DB:6F:B2:08:11:55:88:54:92:04:E3:65:14:1B:58:72:E2:8E:7A
            X509v3 Authority Key Identifier:
                keyid:DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:42:87:b1:ae:a9:b2:90:1d:b9:9a:01:d9:46:63:87:82:93:
         0c:88:f6:e8:56:a9:48:92:b7:52:6b:b8:e3:8d:2c:27:0b:db:
         24:8c:8f:c7:27:03:9a:9d:9e:46:9e:2f:fc:7f:15:ab:08:dc:
         89:29:c0:04:a7:33:b7:62:91:99:6f:88:ba:a2:71:28:f7:ce:
         b8:d1:bd:f7:7a:f3:1a:aa:8a:31:c3:93:94:54:d5:1c:95:1f:
         24:74:1c:d3:79:22:63:72:ad:d1:16:9c:4f:9e:45:a2:60:64:
         66:6f:52:9f:fe:f4:0a:49:55:ed:78:b9:63:ee:23:d3:78:1c:
         05:74:c7:93:9e:56:66:32:37:ab:dd:8b:dc:dd:2c:14:7f:21:
         c7:95:4b:8c:6c:6d:59:58:95:df:64:61:95:9f:03:9e:10:49:
         55:56:75:8d:10:24:33:93:18:d9:02:e6:7b:69:a9:f0:78:72:
         a8:de:cb:e9:6d:65:4c:12:77:73:37:d1:5c:8c:2b:38:df:65:
         8a:e7:73:a1:44:63:f0:a6:b2:f8:55:df:b2:18:c9:81:40:46:
         b3:ea:09:b8:f9:35:a7:15:ef:ae:6d:1d:23:6d:25:96:dd:b1:
         94:13:db:8e:3d:38:c7:99:0e:05:f6:35:eb:db:6d:a7:50:2f:
         74:38:bf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:08:48 2026 by rpki-client