Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
File:                     7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json)
Hash identifier:          lOj1B9FEu1jGI2EQ/hew6nfVnrQKDnnm16dXl5AzXI4=
Subject key identifier:   9F:B0:1B:95:E9:62:51:A4:D2:26:CF:0C:E4:31:DB:7F:3F:12:BF:DF
Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
Certificate issuer:       /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Certificate serial:       019E1E3518D562645047774412D459C2D6B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
Manifest number:          144B
Signing time:             Tue 12 May 2026 22:00:56 +0000
Manifest this update:     Tue 12 May 2026 22:00:56 +0000
Manifest next update:     Wed 13 May 2026 22:00:56 +0000
Files and hashes:         1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: mBlUoskJO9EK+Ny4br4U/trBP6t/dICHa9K9WrVDoiI=)
                          2: 88NWVToLEwKK_Mpgeyzi5wA0xpo.roa (hash: l2cWTge/R/tklyYKEf8+fIr98gBT5pBqi6tErfFhBF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:18:d5:62:64:50:47:77:44:12:d4:59:c2:d6:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
        Validity
            Not Before: May 12 22:00:56 2026 GMT
            Not After : May 13 22:00:56 2026 GMT
        Subject: CN=9fb01b95e96251a4d226cf0ce431db7f3f12bfdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c9:f7:46:b7:5b:f4:2b:f8:ce:d5:ca:76:e9:
                    be:bc:d7:54:c7:11:8b:bc:27:37:a6:73:a5:e3:33:
                    c5:00:36:09:f7:f0:b7:f5:f6:02:24:57:18:2c:da:
                    0c:b3:25:33:35:1b:3c:f0:ea:c0:95:a6:af:02:75:
                    bb:31:d2:74:06:0e:03:b5:26:33:3c:8a:7e:e7:c0:
                    89:06:eb:35:dd:0e:07:64:ea:01:b2:78:94:0e:60:
                    15:fb:5a:fa:d5:10:3d:42:a8:d7:73:60:e0:5c:41:
                    64:5c:f5:36:73:6a:26:dd:70:88:b4:5e:08:d8:ca:
                    19:d6:81:c3:a6:a2:a1:9c:f6:b7:42:d3:c8:92:8a:
                    07:fd:fd:59:29:77:14:19:e9:b5:e9:1e:11:ea:e0:
                    fc:7a:74:b2:4e:d2:27:0e:10:dc:da:43:3d:7c:07:
                    0d:4f:0e:dc:4d:00:06:1a:03:8b:76:f9:8d:bb:2d:
                    e8:41:58:9f:75:81:35:d7:92:29:d4:dc:b5:b2:86:
                    fb:60:a6:32:70:96:0e:6c:9f:02:12:a8:5f:c3:73:
                    e8:cf:f8:2a:d9:dd:88:b6:95:09:c6:41:bb:76:d9:
                    58:c9:41:ed:60:39:26:3f:15:08:ff:51:2c:91:49:
                    9d:86:e1:6e:5b:95:99:2b:72:84:61:a7:ad:85:fc:
                    ad:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B0:1B:95:E9:62:51:A4:D2:26:CF:0C:E4:31:DB:7F:3F:12:BF:DF
            X509v3 Authority Key Identifier:
                keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:11:51:1f:7c:71:0b:c0:d1:de:92:7f:cf:0f:40:7d:53:ad:
         d5:d8:ae:05:46:0c:1a:3e:1b:e8:26:92:4d:ea:07:37:59:f6:
         c7:f7:08:4f:0d:75:88:e3:67:fe:cb:14:84:5a:59:04:4a:f1:
         9b:17:3d:e8:d4:09:f7:4c:7e:f3:f2:4d:9b:a2:3b:ba:83:b2:
         15:86:9d:6a:58:f0:25:ab:3f:de:52:2d:76:73:ad:84:46:83:
         84:b8:c5:bc:2d:41:08:9d:3e:34:fa:b1:3c:f5:38:84:88:62:
         55:de:fd:4a:79:74:c4:43:7b:d1:51:76:c4:72:17:8b:31:e2:
         8a:14:01:40:ad:89:c0:1e:8f:d6:76:6f:19:20:14:36:87:4b:
         14:a7:43:5d:7a:83:07:0f:77:49:a6:3a:55:93:dc:42:65:b8:
         e1:44:85:5c:34:01:7d:1f:88:1f:e8:05:89:ce:3d:d4:b8:93:
         b7:ed:12:5d:e1:86:23:f7:5f:b7:94:63:24:ec:ee:f0:7f:94:
         eb:14:7b:7e:22:33:ce:5b:71:ac:cd:be:50:c8:4d:0d:5b:e9:
         e5:d3:a3:20:4f:f2:dc:a9:cb:03:fa:9d:75:ce:4a:9a:95:95:
         86:46:75:07:39:26:24:a1:6b:31:76:51:48:62:ba:2c:89:06:
         72:f3:0b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:30:18 2026 by rpki-client