Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
File:                     7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft (raw, json)
Hash identifier:          L8wCTEwpesvrWL6+kZA+4doV3IJm8B8AR/LoOp7gR94=
Subject key identifier:   E4:4D:54:52:1F:80:E9:B6:52:35:6D:84:71:6B:20:56:51:08:3A:C7
Authority key identifier: EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
Certificate issuer:       /CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Certificate serial:       019E1CEBE1A09C5DF01B1610101815D7556A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 16:01:20 +0000
Manifest this update:     Tue 12 May 2026 16:01:20 +0000
Manifest next update:     Wed 13 May 2026 16:01:20 +0000
Files and hashes:         1: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl (hash: J3AMQPCJ6ivZlsduNWmFcGolcw0qOqkXEHzZ9j6yI/o=)
                          2: edQgb1OKZzdIqpTZCvd7y06flso.roa (hash: YslE6ABxgM2nK0S1WncJ01AbUDV4x4LC73+qD5UxVEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:e1:a0:9c:5d:f0:1b:16:10:10:18:15:d7:55:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
        Validity
            Not Before: May 12 16:01:20 2026 GMT
            Not After : May 13 16:01:20 2026 GMT
        Subject: CN=e44d54521f80e9b652356d84716b205651083ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c7:39:73:4c:8b:30:bf:ca:07:8c:66:7b:d1:
                    78:25:cd:9d:71:50:d7:de:59:ef:be:52:c3:ae:9b:
                    a7:bd:22:76:02:29:9f:0d:17:85:5d:f0:26:d5:e6:
                    5a:69:71:19:4b:b6:6e:b0:58:f0:f0:ba:23:da:06:
                    4b:3b:14:84:11:8c:3e:56:01:1e:96:96:8e:08:eb:
                    40:34:ae:a5:ef:a1:73:2f:47:73:0a:78:a1:de:57:
                    dd:a6:cc:ef:13:51:68:89:4f:d8:30:8d:73:71:5c:
                    5f:30:42:2a:fe:a2:2d:9d:6c:1b:a7:02:af:b6:e3:
                    24:b9:a5:09:f0:c4:30:bf:10:32:28:fb:14:b9:b1:
                    66:57:bc:2f:d1:f7:28:f8:9f:d9:a3:2e:36:a5:76:
                    68:c6:95:b8:8e:5a:a6:68:28:84:fd:7a:f3:66:ca:
                    c5:25:55:27:df:70:b1:07:65:5d:f8:eb:55:62:e9:
                    55:35:31:03:cb:db:04:0c:72:77:a2:6d:fb:68:6d:
                    1f:9b:7c:60:0a:bb:8a:ed:59:3a:8f:f0:42:30:4e:
                    24:ff:65:2f:ee:28:75:60:2b:cd:de:ed:0a:b9:9c:
                    95:31:4e:c8:48:4e:8a:26:91:d7:e0:21:e2:7e:af:
                    48:e2:38:0d:91:f0:9f:36:2e:0c:a7:86:b8:4b:34:
                    f1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4D:54:52:1F:80:E9:B6:52:35:6D:84:71:6B:20:56:51:08:3A:C7
            X509v3 Authority Key Identifier:
                keyid:EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:60:81:3a:29:b7:78:30:d5:8b:4d:c4:a8:93:3b:d4:a5:8c:
         c5:af:a6:27:95:00:ac:93:d4:70:42:5b:d6:b6:49:ad:92:53:
         af:aa:64:4a:cc:48:c1:5d:a4:e3:2a:14:d6:0e:f8:1f:09:42:
         9e:f1:ac:0c:a2:72:8f:b7:33:e2:48:39:7f:9d:40:b9:5d:7a:
         0c:cd:1a:7b:4d:b5:93:c9:ad:e3:c9:c2:14:a8:30:83:cb:8f:
         4c:20:cb:ef:50:b7:9b:61:75:a1:3b:b6:b1:40:26:9a:88:19:
         2d:c2:16:ee:12:39:ed:04:1d:2d:8f:71:01:06:38:67:00:5c:
         6e:62:e6:b4:74:2c:fe:cf:55:de:43:c4:a2:4a:59:68:b6:80:
         41:24:18:a0:75:bd:ad:14:7b:10:ad:5d:89:57:61:0a:e4:d5:
         50:5f:13:88:41:3c:2c:be:66:bc:43:c0:83:89:92:8f:a7:ce:
         7b:60:ee:77:10:3d:b5:88:c3:cf:58:b5:d7:5c:35:53:0b:e3:
         15:fa:5a:e0:84:2c:24:f2:8a:dd:0f:42:54:a9:76:72:e5:69:
         42:c4:f8:d5:41:83:ad:1b:98:83:8d:70:ae:c4:e8:47:69:66:
         26:be:11:c5:3f:ee:46:ea:3f:fa:09:1b:31:0b:06:3e:77:af:
         f8:55:03:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:44:07 2026 by rpki-client