Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
File:                     7YUEg8zhM3scbC_d6pxdu0p-GRo.mft (raw, json)
Hash identifier:          mDTLPKWnnMca2sbtiOmJ4QChYqsgqK/mo72fh6C9hKk=
Subject key identifier:   EE:61:70:03:28:83:C4:46:D4:E1:30:2D:AA:6F:9C:E0:2C:A8:33:44
Authority key identifier: ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A
Certificate issuer:       /CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
Certificate serial:       019E1BD9389828FD4B21DFFEF70A476CA91A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
Manifest number:          1903
Signing time:             Tue 12 May 2026 11:01:21 +0000
Manifest this update:     Tue 12 May 2026 11:01:21 +0000
Manifest next update:     Wed 13 May 2026 11:01:21 +0000
Files and hashes:         1: 7YUEg8zhM3scbC_d6pxdu0p-GRo.crl (hash: g+fCXd65xC82nK0XhyQM1L89kwcIGzD7QgC/EGPjjd4=)
                          2: aolEbo2qB2S6A6P1jzACXp478EQ.roa (hash: oA7ghnRZDo0Fz0lfj+1EUdXsdtQn6tS/8aJp7ap6T0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d9:38:98:28:fd:4b:21:df:fe:f7:0a:47:6c:a9:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
        Validity
            Not Before: May 12 11:01:21 2026 GMT
            Not After : May 13 11:01:21 2026 GMT
        Subject: CN=ee6170032883c446d4e1302daa6f9ce02ca83344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:49:f1:d6:2b:06:1e:46:cd:42:98:8e:f7:08:
                    87:46:25:83:90:dc:e1:9d:64:26:98:d6:b4:c2:f0:
                    fa:ef:66:0c:ca:67:40:ea:c6:a1:b0:07:e9:9b:7b:
                    a3:94:0d:33:7d:c9:28:b7:19:ad:64:6f:a1:f5:e5:
                    32:b4:fb:12:a3:fe:3c:cc:bc:c1:df:9e:6c:c9:c2:
                    10:cf:8d:4f:09:f7:52:eb:f7:35:16:c2:a0:10:2f:
                    14:23:e8:6b:b3:f6:a5:a6:f0:a8:6a:07:51:0b:51:
                    3b:06:46:b7:f0:78:af:26:95:6e:f5:0e:2a:0d:96:
                    61:96:48:73:7e:45:f9:1e:9d:2b:25:49:89:68:f7:
                    bd:bb:e3:44:00:a8:67:c4:0b:65:fe:9c:64:41:ef:
                    75:f1:42:9a:7d:12:e8:67:cf:1f:03:3b:f0:5d:03:
                    c2:2d:2b:ad:86:83:1f:1f:5f:c8:77:bb:12:9d:6b:
                    54:d9:aa:f7:eb:20:c2:46:8b:13:3f:38:4c:16:bb:
                    e3:b9:82:4d:b2:df:6a:c4:fa:c2:fd:4f:28:cc:ef:
                    3d:fa:46:9f:ce:bd:9c:2c:ef:36:95:a7:21:ef:29:
                    75:32:52:7a:3f:c1:ab:df:e2:00:cf:cb:e9:44:14:
                    97:47:aa:95:5f:8d:51:25:cf:06:be:bf:18:ab:ec:
                    73:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:61:70:03:28:83:C4:46:D4:E1:30:2D:AA:6F:9C:E0:2C:A8:33:44
            X509v3 Authority Key Identifier:
                keyid:ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ab:f9:91:9b:a0:b1:25:d3:6b:cb:ef:74:c3:df:12:ed:db:
         6e:fc:2f:5f:80:4d:2e:b3:38:d9:8c:54:50:5d:42:7d:e7:d4:
         bc:35:51:80:37:0c:c5:7b:c2:1f:1d:34:9d:4b:01:72:84:99:
         16:7f:f7:3e:37:8e:b7:11:03:db:6c:9a:7c:b4:cc:bb:54:ef:
         be:d9:c6:8d:07:28:47:28:1b:d5:8d:12:60:2c:4f:34:3d:c6:
         74:ab:41:bd:4c:c1:25:a4:cc:cc:64:d5:d6:43:43:b7:85:16:
         16:05:72:e8:c2:50:94:b6:23:db:15:97:79:96:fc:86:58:a9:
         37:7e:00:4d:54:03:0d:64:b1:4b:3a:4b:09:8f:24:10:73:1b:
         33:1b:8d:d4:e7:62:05:66:15:9c:10:d5:52:61:c6:a7:d6:e8:
         85:9a:c8:4b:70:db:a3:6e:dd:d7:26:ca:42:22:a8:0d:b0:cc:
         d8:1d:4e:f4:7b:57:66:c1:3c:ee:62:75:0b:c7:24:cd:1e:18:
         f3:04:c7:91:e8:6a:d3:6d:e6:af:2c:68:44:1c:ba:3d:30:25:
         48:eb:91:6f:e0:4e:2e:6a:2f:4e:74:da:e4:84:a7:81:09:6b:
         0d:4d:ff:83:65:60:15:12:74:eb:02:7f:28:22:e4:8a:ea:16:
         a4:de:ae:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:27 2026 by rpki-client