Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
File:                     7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft (raw, json)
Hash identifier:          GDqORsM8YQZVenzEYAsyussXsSIf/7D7oWySOg19lF8=
Subject key identifier:   7E:31:64:43:37:E3:24:6C:97:DA:DE:11:0F:49:9A:6A:20:E7:1D:90
Authority key identifier: EE:0A:BB:A5:52:F4:6B:94:ED:F2:23:94:FE:EC:1D:04:59:F2:01:40
Certificate issuer:       /CN=ee0abba552f46b94edf22394feec1d0459f20140
Certificate serial:       019E1D597C78CBF7AB8D2BACAF5434B7277D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
Manifest number:          07DC
Signing time:             Tue 12 May 2026 18:01:04 +0000
Manifest this update:     Tue 12 May 2026 18:01:04 +0000
Manifest next update:     Wed 13 May 2026 18:01:04 +0000
Files and hashes:         1: 7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl (hash: nxfmb62xCfHMmIvFmYoZU8iOv7rIregLlsDpBSxpECw=)
                          2: eIWcz11n1PjQmKMq28yQMraoei4.roa (hash: l+JkKmb9S4y5YrSkGvH0iejPgNSj/cfbPp9hnVGEH1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:7c:78:cb:f7:ab:8d:2b:ac:af:54:34:b7:27:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0abba552f46b94edf22394feec1d0459f20140
        Validity
            Not Before: May 12 18:01:04 2026 GMT
            Not After : May 13 18:01:04 2026 GMT
        Subject: CN=7e31644337e3246c97dade110f499a6a20e71d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5a:6a:6a:0d:90:a4:0d:22:e3:ce:57:23:34:
                    af:0d:4a:f4:4b:a0:46:87:59:bc:5a:e9:a6:e3:92:
                    88:9e:b5:1a:df:0a:11:dc:55:04:83:60:9e:f3:47:
                    9b:4e:41:bc:dd:33:a3:16:a8:2a:38:e9:63:da:c5:
                    18:e1:74:0e:ac:a1:82:20:37:18:eb:43:af:77:44:
                    89:e3:c3:0d:e3:ad:7e:f6:9c:b0:43:df:d1:88:84:
                    66:6f:f5:4d:b0:1f:df:03:dc:49:4f:d6:64:25:af:
                    36:fd:09:a0:37:e4:ec:35:89:1e:ca:ff:ef:d0:1b:
                    ab:eb:ee:49:e2:d4:4b:2a:72:65:37:11:11:3b:89:
                    2e:ce:0e:dd:de:80:2f:e0:07:04:37:38:b0:c4:d3:
                    90:8d:49:c6:16:ea:fe:16:21:f1:e5:f2:32:7d:82:
                    14:eb:aa:2a:ed:23:9e:98:d2:71:42:1b:dd:67:d9:
                    b2:29:71:f2:54:0a:3b:fd:fc:39:7f:26:8a:04:f9:
                    93:cb:8d:77:6b:87:0d:bf:1f:79:31:1f:97:22:7d:
                    84:95:21:c6:9c:bc:63:1d:16:b4:55:d4:5b:8d:35:
                    09:16:b1:76:14:51:67:34:ab:58:b8:c2:dc:e0:ff:
                    3d:43:4d:18:42:65:5e:b8:ec:f5:0b:e8:9a:88:7e:
                    e0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:31:64:43:37:E3:24:6C:97:DA:DE:11:0F:49:9A:6A:20:E7:1D:90
            X509v3 Authority Key Identifier:
                keyid:EE:0A:BB:A5:52:F4:6B:94:ED:F2:23:94:FE:EC:1D:04:59:F2:01:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e2:ae:fe:8d:42:15:bd:9a:49:7d:a8:c7:6d:fd:ac:8c:96:
         94:3f:86:db:07:9d:bc:8a:0b:09:07:8c:4e:c5:ce:aa:c9:9b:
         99:ab:00:f6:de:c6:cf:7b:58:85:8d:e1:68:ac:ff:fb:07:41:
         1f:10:3d:63:5c:e9:ab:26:8c:9d:5d:e3:35:52:12:20:6a:8c:
         c5:87:2b:98:bd:37:e8:b6:08:df:77:42:8e:d7:26:ce:fc:35:
         37:1f:8d:ee:d1:15:7f:54:39:ef:5d:af:65:d0:de:49:00:9b:
         63:09:6d:94:eb:7f:38:4a:4e:d0:48:9a:c4:90:56:58:18:6b:
         f9:50:42:bb:6d:6c:a4:d2:67:63:1e:71:6f:2c:a5:d4:46:48:
         85:65:e0:61:fc:ca:f4:e1:8b:22:14:70:c8:a1:14:4d:b6:3b:
         b9:51:ca:de:87:92:07:b0:5f:3c:cc:c5:55:4f:5a:b8:d7:76:
         35:7f:1d:c6:e9:48:6d:bf:3e:8d:a7:23:9f:61:12:d1:6b:aa:
         d5:88:3c:8c:31:5b:fe:e4:64:38:59:d1:03:48:77:57:b0:b5:
         97:84:af:0b:d3:84:8e:e1:fe:29:6f:08:e5:64:2a:5e:a8:16:
         c6:09:b5:45:54:0c:de:b3:76:19:e5:19:04:f7:f8:cb:ba:78:
         4f:90:db:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:53 2026 by rpki-client