Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
File:                     7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft (raw, json)
Hash identifier:          ZZB4t6W7RxFs3Jo7nZ4Tzrp+UEWJ4CqxbfhQPg4Ev2I=
Subject key identifier:   60:57:88:C3:5A:2B:65:09:97:32:77:BD:86:86:3D:47:C3:51:7C:60
Authority key identifier: EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
Certificate issuer:       /CN=ee82395001b03c663509909979dfb78445b3d9c4
Certificate serial:       019E1EA2DD9B32C8BD230F095600AF96444B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 00:00:50 +0000
Manifest this update:     Wed 13 May 2026 00:00:50 +0000
Manifest next update:     Thu 14 May 2026 00:00:50 +0000
Files and hashes:         1: 1-kHdsLNbk3wn4YZGGv7nR6qgmuo.roa (hash: GP85i29ZuAZsmZlUrVOG+U5Hl6NUzQEiBUiRqfR82Fs=)
                          2: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl (hash: f/IcKkTnWNM/X/UHDI4C0jqGjAwEYiUFDx7h0hcjYvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:dd:9b:32:c8:bd:23:0f:09:56:00:af:96:44:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee82395001b03c663509909979dfb78445b3d9c4
        Validity
            Not Before: May 13 00:00:50 2026 GMT
            Not After : May 14 00:00:50 2026 GMT
        Subject: CN=605788c35a2b6509973277bd86863d47c3517c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:a8:73:7c:e0:ce:77:4e:83:a6:37:4e:c9:
                    f7:6f:73:33:68:80:ac:99:b5:d2:08:2a:62:8d:0f:
                    85:f5:a5:50:42:44:ca:9d:3d:fc:c5:91:80:13:4a:
                    aa:2c:cb:7a:31:e1:50:20:b4:0a:ba:55:15:0e:d2:
                    ad:16:ab:1c:a6:fa:95:e3:29:55:96:6a:1d:54:0a:
                    f9:a6:2b:57:28:59:b7:a4:b9:e0:27:d9:86:d8:ee:
                    c7:a6:b0:50:92:14:c9:b4:1e:dd:03:38:44:04:c1:
                    04:79:50:04:6f:77:7c:3e:20:94:b3:94:b5:32:56:
                    fa:a0:ae:e0:c4:c0:75:9f:bd:41:8d:d7:17:61:de:
                    86:57:e9:3a:3e:8d:08:a9:d4:af:97:6f:26:61:04:
                    6b:0c:95:a0:ca:b8:cb:88:1a:2c:74:b4:d1:c9:4e:
                    3e:d2:05:08:48:4d:cb:45:7d:71:cb:9b:d7:68:7a:
                    d1:19:a7:a5:56:d5:93:ee:ed:5d:af:4a:1b:d2:5e:
                    4f:36:f5:fd:40:ee:95:eb:36:24:7d:28:56:ce:66:
                    56:48:4f:7d:c9:e7:86:a5:d3:0b:8c:72:ab:23:c0:
                    e4:3e:41:d0:86:27:02:84:3d:ad:1c:6e:5a:08:47:
                    35:03:31:2b:bb:db:37:50:fc:1d:e9:62:d4:05:64:
                    14:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:57:88:C3:5A:2B:65:09:97:32:77:BD:86:86:3D:47:C3:51:7C:60
            X509v3 Authority Key Identifier:
                keyid:EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:b4:e4:cf:44:82:67:f2:a6:26:17:a5:10:94:ad:52:7e:ae:
         6c:e7:62:c1:e7:98:0c:a8:0b:8a:3c:8e:a1:29:c8:b8:e2:d9:
         fe:9e:7f:f5:40:ed:29:66:e5:b0:7b:eb:f0:43:aa:5b:90:19:
         8c:89:8c:c4:20:d0:3d:f9:1a:2d:25:28:cb:ad:32:e0:0d:cc:
         e0:95:b6:e2:e5:c3:28:e1:44:40:b5:c5:49:63:86:46:71:fc:
         99:3a:20:29:ee:4f:8b:e0:7a:3f:9f:e6:66:6d:15:fe:61:98:
         b7:f1:06:6d:66:86:33:93:89:06:f3:60:f0:2f:80:18:fb:b2:
         d9:2f:d0:75:80:60:5c:26:f9:95:51:24:f5:f0:f6:89:bb:8d:
         08:b8:69:89:3f:fb:cc:91:d1:da:ff:f1:58:9e:57:20:da:52:
         21:53:b6:8d:fc:34:22:8a:47:37:62:4f:32:40:ba:55:f3:3c:
         3f:dd:76:93:a5:b4:ca:e4:83:d2:a7:c2:1f:c8:77:d3:86:bf:
         29:d8:a5:5b:d1:4c:9c:a2:46:1d:42:7e:89:1d:46:cf:12:12:
         70:ea:5d:ce:6c:f4:4d:ee:ee:8b:8c:55:b5:22:64:da:e5:0e:
         75:96:f0:92:59:19:2c:a8:62:02:06:d6:bf:0e:4b:4c:a3:2b:
         7b:25:e8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:04:01 2026 by rpki-client