Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
File:                     7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json)
Hash identifier:          DMMngWXwaFfbUn0Fo56Cvz7cNKh1hvYm1FOErsliJrM=
Subject key identifier:   7B:EA:F0:EF:19:28:FB:0D:83:AC:61:22:17:05:A9:7C:43:11:F2:0B
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Certificate issuer:       /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial:       019E1C7DFFA8DF79FFE35BA898F437E27CDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
Manifest number:          191B
Signing time:             Tue 12 May 2026 14:01:19 +0000
Manifest this update:     Tue 12 May 2026 14:01:19 +0000
Manifest next update:     Wed 13 May 2026 14:01:19 +0000
Files and hashes:         1: 03adZJbb-O1p_CXcQ_4M0jgNEFw.roa (hash: ew9gGSBHBbQPEdarHkUHaR6ktGIwejsj7yNx1KPoThQ=)
                          2: 1-AaYw2BfaY3XhYhRX7k0ikSXO9w.roa (hash: WyNldQk+XZoMO0b/C5jIYmrjIYQhy0dv0+KOkKWcQSE=)
                          3: 1P4VHJbsu8-KA_CDbuA3mLdiyQo.roa (hash: QETOSgaKr5YFSXBkowwoHjS2zVlXL1HHWJzh0UPdErQ=)
                          4: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: du5RYAPEeXzBXp4uOuaaqcw8adWT9K4db6wzgMqsOGE=)
                          5: Fx8cnnhYnA6BH8cJUcV9Vz-n8OM.roa (hash: nBn8KMz1/qrlmEp5tnjRaNg0XQIu3L/8mlSSo9e/i1U=)
                          6: HsnhtW3Vo1ScMXDm_04rDrcrO8A.roa (hash: 5+GIeXFw3kg0H6nKxy1DPIUv8/Ly7H/qd2V/EdogjOk=)
                          7: JHDYQiALesWvByATRJ3bFGKf440.roa (hash: 4qi7uVDpfuqHxI2PwRXSylbhTlTDmB3nFH/RQRca9I4=)
                          8: M-xhOdJhOt1IVpAo6jVDD6VitCU.roa (hash: waOg7nDr7fSZGGvzIuGjBg6JCLXByvSxzjfTgEkG9Iw=)
                          9: RMbFoCYqNcmYffu8B7XKQZOpe9g.roa (hash: Bc8GrrG0ePgUPfQVi+zdsUsnCNOP4l8CwIx91Qrbgs8=)
                          10: RkJgzEGbgGQVpYMhyuLt_ciEWs0.roa (hash: s24XvC1lX1fQ9pY/tvq7aXzmmQIz7/1F7PGbhhoCpbM=)
                          11: XDRix6QDR_Gjs6-Cgo-LajMwjLo.roa (hash: D5tYwaAg7BrfpT0g1cIaNhjKGBys4m2pxD23SmcuiB0=)
                          12: YUZAH4o6lSlfa8V06bR-tRKZeJY.roa (hash: RWEnsTCPJnS0wvgpBfvSOdsOCDY+GRhBVGGh8MqvS3c=)
                          13: bKHn0qb-Jdo8C-QdUH0EoddC6R0.roa (hash: t7W3AEy6SZzLhzfSNb31m9y8L46P7EJQYuCD/DSTk0I=)
                          14: eidiHBPgQKzRSZT9OwGu9tKmDIg.roa (hash: wDu3wVyoIZQVKXQBVdzTm8+ss6XGOx6VqYvXUN2hobg=)
                          15: hO16bUk7sgMxRq4iY5R-8zAg_pw.roa (hash: muh9Cwq/x+krpQXeGbq5yotjMWT1VH8PKPWrvuCsuXA=)
                          16: k6jLYVH6C0z0KMYaezVQiNE4EPU.roa (hash: 7jskiw03SWhNj59VRgx4kkxZFbjnSw3URxMXrNwyUt0=)
                          17: x_JLnp-gge30umPx_RvTQbE6gPs.roa (hash: Ia9WGZIGIJ1OoZ2Ke+mCm85FUNL3XOpDFSZD7R/PX0c=)
                          18: ygT4_ge1ohdgPGNfdC3uMhbevTo.roa (hash: QzMQwc/7YDt82Fn8x4yXez6Z6w0QENNYIpCBlAJaBv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:ff:a8:df:79:ff:e3:5b:a8:98:f4:37:e2:7c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
        Validity
            Not Before: May 12 14:01:19 2026 GMT
            Not After : May 13 14:01:19 2026 GMT
        Subject: CN=7beaf0ef1928fb0d83ac61221705a97c4311f20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:40:75:ba:bb:c0:10:1e:9e:a6:4b:3e:2e:
                    b5:72:f1:56:de:70:e6:7b:5f:1d:39:7a:a2:42:47:
                    c5:24:a9:f0:b0:54:a5:b8:c9:c0:b7:a6:96:50:5a:
                    c9:59:57:14:2a:49:23:d8:47:69:68:c0:43:1c:2c:
                    f1:d4:30:ea:22:02:28:14:c3:4a:62:10:0b:10:ab:
                    b3:81:ea:32:30:a9:ce:51:10:0b:33:8c:66:ac:26:
                    66:e6:d6:c5:39:bf:79:2a:23:ce:b9:09:cf:24:88:
                    a5:bb:74:35:c4:6e:55:82:75:6a:8c:a2:1f:0c:56:
                    c4:76:f3:ae:fd:b9:89:68:1b:a4:c1:6f:7b:2c:7b:
                    72:21:15:fe:6e:ed:c9:c3:60:8f:b2:81:18:1d:df:
                    7f:0a:84:9e:c1:eb:c0:40:e3:ee:e4:e4:2c:18:65:
                    89:37:e8:f8:b1:1c:8a:4b:92:a9:d1:2a:40:b8:57:
                    5f:73:2d:5d:ee:0a:33:e2:b7:a6:83:8d:88:d0:87:
                    94:2e:a5:90:bd:69:69:7f:e7:87:9f:26:d8:94:a5:
                    ba:80:60:3e:57:12:ef:bf:47:eb:b8:3f:f5:1d:fd:
                    3f:c2:17:10:22:f6:d4:86:d0:ec:ff:1b:36:c4:bc:
                    82:26:f7:ec:60:20:ce:2b:24:f6:7b:39:7e:53:99:
                    f2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EA:F0:EF:19:28:FB:0D:83:AC:61:22:17:05:A9:7C:43:11:F2:0B
            X509v3 Authority Key Identifier:
                keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f8:9f:bc:65:a0:f2:29:ac:7e:63:09:bb:de:b4:a8:94:59:
         0b:69:09:e3:e7:ce:3d:b3:7b:f3:75:c9:e7:87:db:79:d9:12:
         cf:2c:9b:37:70:32:18:a4:88:36:32:5d:70:7b:95:c1:63:97:
         bf:d7:21:e4:aa:a2:49:b9:bd:a9:f7:2f:de:d1:f0:57:e0:57:
         3d:fc:48:62:fa:5d:50:d0:db:00:f8:14:d4:e1:bd:0b:15:55:
         cd:de:a8:fd:80:41:15:6a:3f:3e:bf:dd:0b:38:d9:3a:77:b8:
         54:ca:42:a1:0c:5a:87:8d:18:09:db:53:64:8d:2b:bb:28:49:
         43:a7:40:b6:22:41:e8:0f:3f:a2:60:58:5b:51:71:c1:ef:39:
         51:e1:32:d3:ec:ec:e1:aa:6d:78:76:e8:5e:a1:40:2d:17:b7:
         a1:b3:aa:03:12:b6:d2:9e:89:53:86:40:53:ef:49:aa:a9:2e:
         e6:91:22:6b:65:aa:dc:7f:bf:08:24:e3:a3:5b:2f:6c:54:51:
         4f:ee:83:24:40:af:36:5f:6c:e3:db:44:1e:34:69:53:30:51:
         f3:f3:4e:24:54:34:20:67:a2:32:9b:5d:7b:29:12:0c:a6:0e:
         44:c2:74:b0:68:f7:26:e3:59:d9:9f:5d:4e:8f:35:01:56:5c:
         ae:68:1b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:54 2026 by rpki-client