Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
File:                     e7M4LBagpWFZkNS85jTcUWgvLqo.mft (raw, json)
Hash identifier:          B80icF6ZtgXuTGJyKWwmCFd0NeHOOwrcjD08cmGSc1s=
Subject key identifier:   9B:49:84:03:C0:4B:2F:1C:E3:6A:09:EA:31:99:16:4A:B8:23:39:06
Authority key identifier: 7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
Certificate issuer:       /CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Certificate serial:       019E1D9080296EB9B28D68212B58FD12D44F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
Manifest number:          0BFA
Signing time:             Tue 12 May 2026 19:01:09 +0000
Manifest this update:     Tue 12 May 2026 19:01:09 +0000
Manifest next update:     Wed 13 May 2026 19:01:09 +0000
Files and hashes:         1: 31QlpWk52MbnjJPL8duGjgcTV1M.roa (hash: ewibnVQxq4nFBFXckvW0i2H7kBIgzqodfcTWUNT0n/g=)
                          2: e7M4LBagpWFZkNS85jTcUWgvLqo.crl (hash: 26YeJCc/lxLv2gwH5la5L8b+h4JFyGuEDL0mkN5Gq3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:80:29:6e:b9:b2:8d:68:21:2b:58:fd:12:d4:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
        Validity
            Not Before: May 12 19:01:09 2026 GMT
            Not After : May 13 19:01:09 2026 GMT
        Subject: CN=9b498403c04b2f1ce36a09ea3199164ab8233906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f8:7b:73:68:cf:b5:af:35:33:85:d5:a7:05:
                    92:bd:69:4f:42:a4:cc:31:e0:43:48:87:89:a1:99:
                    71:ff:d2:78:b7:c6:3a:76:3c:83:1b:2e:67:bc:ae:
                    fb:b1:e9:f3:77:26:fc:c0:12:91:97:78:e3:e1:83:
                    f4:d8:55:82:9e:2e:79:0a:ad:db:eb:f9:e1:b5:18:
                    5b:1a:12:10:28:40:73:09:05:a3:c6:ab:92:fd:6f:
                    5f:cf:de:40:ce:bb:42:ec:45:d1:89:cb:14:e9:23:
                    18:db:cc:dd:86:4c:ac:aa:fd:b2:a0:b1:d7:b5:b5:
                    73:bd:33:88:51:c8:46:bb:2b:b1:dd:c5:46:34:e7:
                    f7:26:64:9c:b7:38:6a:bc:76:a2:1a:a9:4d:74:22:
                    f3:a5:b8:e0:9e:d1:ef:15:1e:06:74:f2:10:32:1e:
                    2f:05:62:5d:86:bc:a9:57:df:33:85:e1:ae:96:68:
                    03:59:58:3b:e1:b6:46:f1:71:f8:3a:fd:60:ab:a1:
                    11:9c:a9:54:ac:10:8d:26:72:6a:1e:68:a9:73:aa:
                    3f:dc:17:b6:21:2c:14:64:a3:3a:40:52:c8:14:12:
                    f1:87:c4:98:1a:1c:3e:54:0a:79:e2:39:e5:35:b3:
                    31:cf:b1:85:de:a1:2c:ed:67:c1:94:7e:ff:b9:b6:
                    60:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:49:84:03:C0:4B:2F:1C:E3:6A:09:EA:31:99:16:4A:B8:23:39:06
            X509v3 Authority Key Identifier:
                keyid:7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:5e:4d:64:92:69:64:d3:71:75:30:ce:04:4d:bc:9f:60:fb:
         60:c8:28:87:95:50:a8:76:04:89:28:36:db:f7:ff:d8:2e:2c:
         be:ff:15:09:2d:e0:1f:4a:d5:48:a1:5c:6d:8f:82:3d:6d:6d:
         32:70:42:46:e1:cc:d8:f3:9e:48:cf:b3:fc:24:ee:eb:2c:c4:
         21:6a:47:28:7c:6d:c6:82:92:99:96:3f:91:97:4c:37:63:18:
         cf:91:74:aa:5f:dd:e9:d5:2b:27:2a:6a:fb:77:4e:b3:af:cc:
         3c:85:97:1f:d4:60:7c:c8:0d:8f:a5:0f:c0:6e:a4:28:3c:02:
         67:5a:5d:fc:2d:3e:96:4e:b3:03:61:5e:9e:5a:c6:86:dc:ea:
         03:53:bf:e3:6f:90:ce:13:dc:71:81:eb:a5:d9:a3:9e:5d:29:
         59:c5:d8:dd:53:81:4e:d1:e0:16:aa:95:a9:89:b8:ac:ae:be:
         92:ac:98:70:29:f7:57:bd:a5:fc:95:b4:19:56:ac:fb:63:c7:
         a3:7e:5b:7e:1b:0f:15:e4:3a:23:b7:ff:e7:40:08:2a:b9:ee:
         8f:4e:04:34:8d:f0:51:cf:7d:0d:39:76:a1:86:57:cf:44:ab:
         a8:24:76:7a:47:1c:2f:84:66:9d:77:b6:e2:cf:9c:9d:18:73:
         d5:bd:73:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:52 2026 by rpki-client