Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
File:                     t7n8UEpNIXiuT3PId8X5B7tHa_g.mft (raw, json)
Hash identifier:          SU4Zf5G+B/mLGVuCRx8+INhwqbtIeruiJbHQXmrgDxU=
Subject key identifier:   7D:49:0E:6A:D5:81:48:D3:C8:DC:B0:CF:35:F5:B5:9C:5B:2E:09:B7
Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
Certificate issuer:       /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Certificate serial:       019E1D22A2ADA8B47827CD8430C5476F9D28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
Manifest number:          0664
Signing time:             Tue 12 May 2026 17:01:09 +0000
Manifest this update:     Tue 12 May 2026 17:01:09 +0000
Manifest next update:     Wed 13 May 2026 17:01:09 +0000
Files and hashes:         1: RhYPlB5kqIX-dmV0ZFbkO4F9FQA.roa (hash: B4giMGx1nCtQi2hJ6Q8i5DGTsStHwrUH2rtSDwaQt6Q=)
                          2: t7n8UEpNIXiuT3PId8X5B7tHa_g.crl (hash: zp6S9t8l9BW+TPgbcHJnSsbIYSzUN1xEvP33CsghqIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:a2:ad:a8:b4:78:27:cd:84:30:c5:47:6f:9d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
        Validity
            Not Before: May 12 17:01:09 2026 GMT
            Not After : May 13 17:01:09 2026 GMT
        Subject: CN=7d490e6ad58148d3c8dcb0cf35f5b59c5b2e09b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e4:f4:41:c7:41:ba:d2:51:e1:c2:8e:46:fd:
                    0a:d9:df:52:c6:10:d9:15:37:45:e7:3b:5b:d5:68:
                    4d:f1:d7:16:47:74:db:93:85:99:a5:d3:f5:51:10:
                    e2:a5:a9:87:4b:ed:a3:76:7c:e1:bd:43:aa:90:56:
                    3d:cd:c3:a0:da:e6:8a:ba:9b:a0:a6:0a:f1:71:e4:
                    99:07:2f:6d:0d:7d:39:df:82:b4:db:dc:b4:7e:10:
                    c5:f0:b3:3e:39:9f:13:41:e7:44:ac:7d:2a:4e:fa:
                    81:db:97:8d:57:aa:8c:7f:20:b8:e4:d7:bc:ce:ef:
                    48:e2:49:34:f3:4d:16:c8:fd:ad:6a:bd:db:89:cb:
                    82:a3:f1:80:38:32:83:9a:0d:29:f0:83:9d:79:79:
                    b0:ec:5d:11:45:f5:01:1f:19:2c:e0:25:de:57:4e:
                    63:2e:a2:97:a2:5d:7b:0d:af:4c:b7:1c:2a:56:d6:
                    94:8f:f5:72:e1:62:13:99:4c:18:d3:ca:44:65:0d:
                    e9:f5:01:f8:54:1a:63:ef:b5:cc:44:48:94:84:f0:
                    7c:c6:13:36:da:76:7e:90:d1:09:15:0a:5e:0d:cf:
                    e0:fe:71:4e:ec:23:07:71:d3:6c:fa:a0:21:12:93:
                    c7:5e:08:8a:bc:47:e8:fc:b7:1b:a7:c4:48:ce:45:
                    18:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:49:0E:6A:D5:81:48:D3:C8:DC:B0:CF:35:F5:B5:9C:5B:2E:09:B7
            X509v3 Authority Key Identifier:
                keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:d5:78:ea:c3:4f:1b:0c:3e:08:da:51:7d:47:50:4f:10:06:
         35:39:f7:65:f5:eb:9a:0d:b9:53:12:09:50:5d:d6:e6:b1:37:
         51:64:46:f3:9f:fc:a1:a1:1c:d5:9f:1b:9c:50:f3:33:a8:f5:
         74:d3:90:5e:02:15:bb:cc:62:d4:11:5e:17:b1:e5:7e:89:96:
         0c:7f:32:bb:80:75:29:7f:07:d7:76:bf:14:f5:ce:8e:3b:24:
         88:69:cf:a9:66:98:b4:50:66:54:99:13:75:f4:13:41:a0:97:
         9f:8e:4f:24:8e:11:d9:94:0e:d2:10:c4:33:73:fb:da:b5:c1:
         3b:b9:48:3e:18:93:99:af:c2:0c:f9:c4:9a:a0:a7:62:29:0a:
         b4:a8:7f:06:75:c8:d8:5f:b3:fb:d2:ac:5e:66:c4:9b:1b:e9:
         0e:98:1d:b9:f6:a2:b6:bf:00:fd:52:a4:0f:92:cc:3a:5f:4e:
         1c:21:d5:09:5f:88:8e:23:b2:b3:d6:e1:02:95:e4:9a:26:81:
         a4:8a:b6:40:85:ce:20:8b:6c:4c:28:1c:f9:57:4f:8b:24:43:
         c2:b8:36:26:db:ea:7a:dd:8c:19:57:7b:d5:50:42:aa:52:e1:
         71:0f:71:8d:87:41:ac:08:8d:04:8d:cd:b7:90:7d:bd:0c:26:
         7f:6e:c3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:24:07 2026 by rpki-client