Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
File:                     7WtTyjBwQ0J-9OrInHfBuhP28C4.mft (raw, json)
Hash identifier:          sdVxnyaAVI1U07IGcklLsrPjnEfAG1nXqKsw/LX1JjM=
Subject key identifier:   A2:59:7A:C3:74:F3:FB:0E:8A:AE:1D:1B:00:D1:90:93:50:CB:31:3E
Authority key identifier: ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E
Certificate issuer:       /CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
Certificate serial:       019E1D230D38D52A7199049744BDAC67DCFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
Manifest number:          0EFA
Signing time:             Tue 12 May 2026 17:01:36 +0000
Manifest this update:     Tue 12 May 2026 17:01:36 +0000
Manifest next update:     Wed 13 May 2026 17:01:36 +0000
Files and hashes:         1: 7WtTyjBwQ0J-9OrInHfBuhP28C4.crl (hash: BXDHBZ0RrJ8fwgJW/G8ZRv1GE68fGvDd4CRo8bDmuzE=)
                          2: I3HAZf8rku9CbsUBC3F9P-EBYlg.roa (hash: Eycp5thHHdJu+vFCPvEGzpeSVr3x+pRAbitu/74D2KM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:23:0d:38:d5:2a:71:99:04:97:44:bd:ac:67:dc:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
        Validity
            Not Before: May 12 17:01:36 2026 GMT
            Not After : May 13 17:01:36 2026 GMT
        Subject: CN=a2597ac374f3fb0e8aae1d1b00d1909350cb313e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:69:49:01:49:21:99:ae:61:f6:2c:e4:a3:da:
                    20:ee:5b:7c:ee:b1:f8:b1:0e:38:c3:a8:06:c9:99:
                    8e:8d:bf:1e:cb:1d:ee:bb:32:44:ef:5b:ad:3d:5c:
                    ec:c1:bf:dd:f5:1c:70:ae:98:ba:64:f8:cf:ce:65:
                    6d:b1:41:18:f1:8a:94:c4:99:67:1b:dc:e5:b0:d1:
                    cc:9e:33:fa:7e:10:8b:18:ec:89:2f:4c:17:f2:d6:
                    c6:de:85:ea:62:76:f6:69:e1:cc:bd:81:08:4c:14:
                    07:e1:e7:2f:8c:f8:eb:b9:c0:86:c0:96:ef:d5:61:
                    56:bf:73:37:31:ae:4e:02:e9:df:b0:70:53:40:30:
                    8a:11:b6:fa:cc:ac:ae:9a:dc:4b:d9:89:b3:1d:0f:
                    ad:54:58:97:df:61:95:89:68:92:9c:b1:40:14:eb:
                    5f:92:4b:f2:ef:25:88:eb:1b:bf:f5:56:b5:17:90:
                    3a:f8:d5:79:3c:8b:ba:2f:88:85:2c:1d:1b:63:ac:
                    2b:31:44:5c:ee:f8:5d:2b:06:15:39:27:7b:3e:2f:
                    8d:9b:e4:1d:c5:5c:1a:2f:8f:b0:90:7f:bb:26:45:
                    29:2e:47:c4:7e:e4:b3:e9:04:e4:8b:f3:61:b8:26:
                    51:f9:d8:b2:4a:4e:8f:6b:4b:94:09:c3:c9:3a:05:
                    04:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:59:7A:C3:74:F3:FB:0E:8A:AE:1D:1B:00:D1:90:93:50:CB:31:3E
            X509v3 Authority Key Identifier:
                keyid:ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:88:18:57:08:b2:75:01:e0:f3:f5:36:fb:7a:90:08:60:ae:
         c6:78:39:b6:e6:5c:c7:99:fa:09:d9:f9:76:ce:2a:e4:de:81:
         30:f6:8e:f6:07:0e:8a:db:dd:cf:a9:40:d8:df:22:79:92:93:
         4e:98:e9:51:31:56:64:f6:20:5e:37:a0:0c:f5:32:72:e6:a6:
         9e:8b:33:3f:f5:79:45:7e:0d:6e:bf:3a:81:a4:91:59:ef:b1:
         02:f0:4f:e0:eb:5f:31:e4:0c:e6:65:86:6e:fa:f3:58:ed:cc:
         bf:cb:79:a5:7c:59:a6:c1:16:9c:66:82:f8:5f:51:56:b4:77:
         49:da:22:ea:71:81:34:d3:05:b1:9c:61:b6:b0:e7:b1:ed:b6:
         56:b4:15:a7:8e:b9:3d:0a:05:36:f7:d3:f0:79:fd:fe:71:ed:
         50:20:83:62:bc:c8:a0:e3:a1:c5:c2:70:93:31:ed:15:f8:85:
         05:07:4a:b9:f3:c4:d1:2c:3f:fa:0b:a0:96:94:8f:8a:9f:75:
         66:98:49:d6:af:c6:ee:65:dc:f3:41:63:09:39:c4:48:43:a0:
         c7:6b:1f:b6:c1:d0:f2:60:53:25:49:1c:21:68:86:8a:e6:14:
         a0:f7:0b:99:79:0f:57:ba:6e:8c:2d:02:fb:02:05:81:ed:a6:
         64:9f:ee:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:27:13 2026 by rpki-client