Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
File:                     7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft (raw, json)
Hash identifier:          AgB2usVPK57QoQuKPNRCAL7IJ4FO6zkt16HAQpSo9bE=
Subject key identifier:   6E:FD:03:F9:B6:45:36:71:C6:53:4C:D9:D0:BB:74:4A:71:61:44:D6
Authority key identifier: EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F
Certificate issuer:       /CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
Certificate serial:       019E1CB453794DE9BF34CE5099F65537AA43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
Manifest number:          1903
Signing time:             Tue 12 May 2026 15:00:40 +0000
Manifest this update:     Tue 12 May 2026 15:00:40 +0000
Manifest next update:     Wed 13 May 2026 15:00:40 +0000
Files and hashes:         1: 7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl (hash: bgqqOO1zzTcG3wc9BbOLFswEcJenI1D7UV37CEuAhHM=)
                          2: n8YaJSKDORU-V1f3ri3MPdU0v_Y.roa (hash: nnAzk/5RgBrrO3CmKUlZtLCI4l4l5DYZR2tkopYIdL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:53:79:4d:e9:bf:34:ce:50:99:f6:55:37:aa:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
        Validity
            Not Before: May 12 15:00:40 2026 GMT
            Not After : May 13 15:00:40 2026 GMT
        Subject: CN=6efd03f9b6453671c6534cd9d0bb744a716144d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9e:66:c4:fa:97:1a:f7:a0:e0:c2:d3:2b:d9:
                    6e:4f:69:fc:80:7f:ab:0c:ec:b7:8e:65:5e:5a:e6:
                    e2:69:5f:a3:6d:a3:39:7b:3f:5f:12:dc:e7:71:9a:
                    4e:45:15:c6:ce:55:e7:c9:a7:67:c3:bc:34:0f:e0:
                    41:7b:07:71:cc:e4:7d:34:a5:20:93:d9:84:b3:aa:
                    cb:5a:aa:bf:6a:60:e1:aa:8b:f1:44:78:95:d4:d1:
                    b1:32:a6:ce:ea:c0:90:b6:e4:d9:4e:bf:28:7c:be:
                    e5:3a:ef:3c:12:d7:15:b2:e0:8f:76:9f:85:dd:ef:
                    5e:58:2f:6a:06:87:17:ee:11:91:ab:d5:81:43:ae:
                    0f:96:3d:98:c3:f0:25:ae:5f:32:d9:47:de:0d:b9:
                    fd:6b:b2:c5:ce:77:7c:51:6c:a3:94:c5:d2:ad:40:
                    91:a8:81:08:b3:86:da:20:a1:06:21:6e:eb:2d:57:
                    85:0d:8e:38:8b:90:b6:81:e4:ca:ba:cd:08:92:ae:
                    73:96:cd:4f:f3:d6:c6:ce:aa:a9:6e:f6:7a:36:a6:
                    41:33:9f:88:db:cd:f5:73:f3:3d:14:b4:d7:4e:54:
                    d3:de:0b:54:fe:14:cd:02:cb:9b:7c:83:96:71:67:
                    30:ec:8e:57:ac:f1:95:29:0e:05:53:d5:dc:47:8e:
                    4a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FD:03:F9:B6:45:36:71:C6:53:4C:D9:D0:BB:74:4A:71:61:44:D6
            X509v3 Authority Key Identifier:
                keyid:EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8e:29:ae:ea:af:74:d2:da:17:1c:63:73:80:d6:19:d4:bc:
         90:b3:e1:fa:94:66:3e:0f:f6:90:ec:a2:c8:96:3b:e0:d0:54:
         fb:65:23:dd:cf:f3:ce:e3:aa:fb:93:97:5d:f5:df:62:3b:ef:
         0a:c5:c7:12:4b:1e:a0:23:2f:e4:18:44:ee:8a:69:55:cb:e5:
         09:32:a6:d3:96:ef:fd:1d:37:c3:b3:f9:a4:90:9e:5c:74:7e:
         c1:93:9f:1f:79:39:09:d9:90:23:fd:a4:e1:bd:6f:c0:c5:45:
         4e:39:77:14:d4:4a:1a:e2:fa:51:ce:90:62:f8:f3:48:06:6f:
         6f:28:b1:7b:ea:5c:b5:fe:18:65:72:a6:86:c4:8d:c1:14:88:
         45:7d:7f:15:93:c8:62:99:bf:2b:9f:9a:4c:b4:a5:c6:5d:08:
         ae:d3:87:2f:e0:35:72:2f:6e:68:a2:66:70:84:ee:e3:6b:d0:
         17:bd:a1:69:fc:ae:39:29:29:92:1b:53:9f:91:7a:74:79:bf:
         2e:fb:31:e9:a3:65:f5:3d:54:1e:0d:97:d5:b3:c1:b3:f0:ab:
         7e:92:db:a9:fe:8c:33:13:6c:47:69:39:b3:6d:ce:54:f2:99:
         28:47:b3:67:18:a7:f6:4b:e6:d2:4b:6e:85:b0:67:cc:71:98:
         a8:4e:e7:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctFN5Tem/NM5QmfZVN6pDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZDc1NWM1MTI3NWFiMjM0MmQ4ZjZmY2E1YjU2NjA2YWI5
YzNiNGYwHhcNMjYwNTEyMTUwMDQwWhcNMjYwNTEzMTUwMDQwWjAzMTEwLwYDVQQD
Eyg2ZWZkMDNmOWI2NDUzNjcxYzY1MzRjZDlkMGJiNzQ0YTcxNjE0NGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp5mxPqXGveg4MLTK9luT2n8gH+r
DOy3jmVeWubiaV+jbaM5ez9fEtzncZpORRXGzlXnyadnw7w0D+BBewdxzOR9NKUg
k9mEs6rLWqq/amDhqovxRHiV1NGxMqbO6sCQtuTZTr8ofL7lOu88EtcVsuCPdp+F
3e9eWC9qBocX7hGRq9WBQ64Plj2Yw/Alrl8y2UfeDbn9a7LFznd8UWyjlMXSrUCR
qIEIs4baIKEGIW7rLVeFDY44i5C2geTKus0Ikq5zls1P89bGzqqpbvZ6NqZBM5+I
2831c/M9FLTXTlTT3gtU/hTNAsubfIOWcWcw7I5XrPGVKQ4FU9XcR45KVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG79A/m2RTZxxlNM2dC7dEpxYUTWMB8GA1UdIwQY
MBaAFO7XVcUSdasjQtj2/KW1ZgarnDtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3RkVnhSSjFxeU5DMlBiOHBiVm1CcXVjTzA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85YTY4MzQtZTc2OC00MDliLWI4Y2Ut
ZWM5YjY5YjQ2Y2MwLzEvN3RkVnhSSjFxeU5DMlBiOHBiVm1CcXVjTzA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC85YTY4MzQtZTc2OC00MDliLWI4Y2UtZWM5YjY5YjQ2Y2Mw
LzEvN3RkVnhSSjFxeU5DMlBiOHBiVm1CcXVjTzA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAco4pruqv
dNLaFxxjc4DWGdS8kLPh+pRmPg/2kOyiyJY74NBU+2Uj3c/zzuOq+5OXXfXfYjvv
CsXHEkseoCMv5BhE7oppVcvlCTKm05bv/R03w7P5pJCeXHR+wZOfH3k5CdmQI/2k
4b1vwMVFTjl3FNRKGuL6Uc6QYvjzSAZvbyixe+pctf4YZXKmhsSNwRSIRX1/FZPI
Ypm/K5+aTLSlxl0IrtOHL+A1ci9uaKJmcITu42vQF72hafyuOSkpkhtTn5F6dHm/
Lvsx6aNl9T1UHg2X1bPBs/CrfpLbqf6MMxNsR2k5s23OVPKZKEezZxin9kvm0ktu
hbBnzHGYqE7ntQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:21:35 2026 by rpki-client