Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
File:                     cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft (raw, json)
Hash identifier:          vWl2LtnNsYUmCRr2SFExgVjijdhIzl11iyxqNWh/AZI=
Subject key identifier:   E4:23:ED:CB:D5:C2:8E:DE:24:85:D6:C2:D3:B2:7A:F8:A5:08:8F:37
Authority key identifier: 71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
Certificate issuer:       /CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Certificate serial:       019E1D59A6039D749A63EF638D4693123667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
Manifest number:          1347
Signing time:             Tue 12 May 2026 18:01:14 +0000
Manifest this update:     Tue 12 May 2026 18:01:14 +0000
Manifest next update:     Wed 13 May 2026 18:01:14 +0000
Files and hashes:         1: JIH2hr0PFTmo-UenvIATlScnTmw.roa (hash: /Ko64eIHlbMST16GcGIM1/ka+jF/BdIAp0WDKwXJUzY=)
                          2: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl (hash: gzefi+3GgsKGysIb4RrhLgP5u/7LFZN6wdGcL3aiVKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:a6:03:9d:74:9a:63:ef:63:8d:46:93:12:36:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
        Validity
            Not Before: May 12 18:01:14 2026 GMT
            Not After : May 13 18:01:14 2026 GMT
        Subject: CN=e423edcbd5c28ede2485d6c2d3b27af8a5088f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f6:8b:c7:ac:a5:e5:4b:79:cd:04:2f:55:7f:
                    57:65:81:5c:93:93:5c:d2:d0:30:30:e1:36:0d:50:
                    de:bf:3c:59:f9:be:dd:a6:d8:22:7f:eb:25:85:29:
                    0f:f0:d8:35:89:0a:0c:ed:7a:50:7f:cb:c9:55:43:
                    93:15:32:57:b3:00:65:ce:a1:88:20:b7:6f:51:f9:
                    9c:1f:98:1f:90:44:e4:69:9e:e8:6d:46:98:e7:af:
                    0c:ba:5e:0b:31:61:be:ed:0f:5d:29:14:30:d5:5a:
                    3f:c1:09:29:cb:7c:b3:18:77:8b:dd:48:ef:c4:67:
                    84:bb:4f:f6:1e:bc:87:39:3e:fa:b9:32:6a:fe:9f:
                    f7:e5:df:5f:01:07:a6:b9:a3:05:96:c1:f8:dd:44:
                    d4:2e:cb:75:53:ad:8e:d2:bb:39:1f:c2:6d:93:81:
                    ef:78:8b:a5:79:12:28:95:a9:47:65:45:61:a8:3f:
                    89:4e:1b:e5:e1:c7:de:41:64:25:8f:43:ff:72:6f:
                    75:28:0c:b9:ff:54:2e:13:bf:7e:a9:98:f3:6e:e5:
                    3e:c0:a9:80:09:a7:ea:e3:c5:cc:f0:b6:3a:b7:0d:
                    3b:80:ef:16:c7:0d:fe:5e:7b:9d:0c:4e:06:59:bb:
                    06:62:f7:d2:3d:33:5f:03:41:66:87:1f:fd:31:af:
                    9b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:23:ED:CB:D5:C2:8E:DE:24:85:D6:C2:D3:B2:7A:F8:A5:08:8F:37
            X509v3 Authority Key Identifier:
                keyid:71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:92:1c:75:1f:19:b4:e1:97:1f:47:8c:3d:c7:d3:fb:b0:16:
         cf:fd:76:9d:cf:c1:c7:c6:bf:ff:ce:09:92:ce:be:8e:1c:40:
         47:5e:cd:76:e6:05:b3:53:92:5e:e1:16:32:de:89:b7:01:08:
         07:4c:10:15:5a:bb:81:93:29:5d:da:db:f7:2b:d8:11:b0:7d:
         10:f0:02:53:80:be:ab:9d:09:44:01:ab:f6:1e:cc:f4:eb:60:
         55:98:dd:59:61:3e:0a:f2:8f:f5:68:aa:83:a8:4f:4e:65:7a:
         14:bd:11:cd:d3:a9:a8:9d:8b:2f:d1:4d:cf:93:24:0b:e6:c8:
         d7:5e:a2:a4:62:f2:ae:94:f4:2d:45:df:72:11:29:fb:1e:df:
         84:1d:d8:fb:28:5b:bc:4b:0f:a9:30:74:74:25:24:6b:9f:f9:
         26:ee:07:4e:f9:0c:80:ac:fc:35:35:91:d3:df:3c:6b:8b:20:
         d7:5c:e3:c8:f7:41:b5:a8:76:69:db:69:29:88:f6:a6:3e:ef:
         96:7f:72:23:42:9b:6f:05:29:9b:19:2d:06:22:de:6c:e7:46:
         a8:9c:de:3c:a7:8d:96:23:eb:2a:b3:04:96:ec:6d:59:07:43:
         01:aa:54:8c:d8:d6:f3:dc:ef:02:c5:41:32:84:3c:2a:10:c1:
         ca:cb:2e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:16:31 2026 by rpki-client