Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
File:                     7cJgAozSqx0OQ3dPRATezSeu88w.mft (raw, json)
Hash identifier:          CbhRuXP0wX6XkI5gOFIOBJ5oTg+yzNYCGCbyXZ+VC44=
Subject key identifier:   6A:23:7E:E0:8A:F7:C0:58:D3:D8:D6:76:EB:D1:14:14:86:BB:78:6D
Authority key identifier: ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC
Certificate issuer:       /CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
Certificate serial:       019E1F1092D8026500BDE72646874584B7F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
Manifest number:          14D7
Signing time:             Wed 13 May 2026 02:00:40 +0000
Manifest this update:     Wed 13 May 2026 02:00:40 +0000
Manifest next update:     Thu 14 May 2026 02:00:40 +0000
Files and hashes:         1: 7cJgAozSqx0OQ3dPRATezSeu88w.crl (hash: +a+ryUt+X1leje5KpqNCagbahVE4TvSV28FqgSotdJA=)
                          2: bPSO6MwxWbbuX5pl75RHEJata0Y.roa (hash: AjyNVlFJkmNLyTmsoSE4kMhHz/W3/3nMb2xQxom7aZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:92:d8:02:65:00:bd:e7:26:46:87:45:84:b7:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
        Validity
            Not Before: May 13 02:00:40 2026 GMT
            Not After : May 14 02:00:40 2026 GMT
        Subject: CN=6a237ee08af7c058d3d8d676ebd1141486bb786d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:a5:b2:9d:ab:23:ff:7f:f5:07:b5:12:7f:
                    94:63:36:31:1f:10:b9:52:8e:ef:84:4f:ea:df:a2:
                    39:b2:9f:df:15:74:ae:ae:8d:1a:9d:6f:6b:bb:d6:
                    fe:85:15:34:71:fa:e8:94:49:eb:25:e0:49:79:be:
                    49:cb:ee:a9:f6:b1:6e:92:d0:56:b4:4a:2f:21:1a:
                    08:d7:70:19:cd:70:7b:02:08:6e:c5:7c:a6:c3:79:
                    fc:05:58:72:ea:a5:4b:da:64:d0:b5:8a:d6:ec:b5:
                    bc:a7:9a:03:f1:57:c1:cc:bd:a3:6f:75:ee:e3:3f:
                    99:1e:49:e5:70:4b:04:ef:6a:4b:38:f4:0e:b6:b0:
                    19:9d:1b:1c:45:7b:dc:d0:9f:79:9b:ed:5b:e3:c8:
                    2a:ae:eb:0d:10:dd:2b:e3:a8:69:ec:ab:61:ca:71:
                    74:97:ae:32:c4:53:d8:e0:77:15:2c:22:dc:59:d6:
                    2d:f0:3c:4d:d2:68:d3:8f:19:08:92:23:40:90:16:
                    54:b5:af:1f:dc:37:18:3c:2e:dc:2e:f0:8b:47:ef:
                    df:92:6a:3b:9b:2f:b3:24:46:eb:84:3f:a8:b1:b5:
                    b1:55:a3:3a:4b:30:21:69:ee:c1:70:b3:d4:99:95:
                    80:fc:b3:f4:a4:1d:e5:11:d6:bf:88:48:86:83:44:
                    67:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:23:7E:E0:8A:F7:C0:58:D3:D8:D6:76:EB:D1:14:14:86:BB:78:6D
            X509v3 Authority Key Identifier:
                keyid:ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:ec:76:06:0c:31:30:90:bf:11:d1:20:af:e4:31:47:89:16:
         a5:74:78:de:d3:f1:38:c2:1f:7e:82:87:70:26:4f:91:0e:84:
         4b:e6:51:3e:3d:c3:d9:5f:eb:c5:15:61:dc:14:2a:60:c2:eb:
         5e:c5:1b:4b:71:cb:f3:0d:69:7c:3d:1e:1c:5a:be:0d:cb:ae:
         4b:35:6b:3f:d1:db:13:de:d1:ad:b7:0f:cf:3f:39:be:b0:5a:
         03:ab:44:4b:b2:e7:06:08:b4:ee:e9:ad:10:30:a2:a6:56:3c:
         29:c1:de:c2:1d:96:6d:55:63:53:71:e3:52:c7:1b:6e:15:0c:
         bd:b5:2a:51:62:d7:af:14:69:52:f2:42:9a:b4:9f:87:6f:6d:
         64:e8:86:b9:e4:24:54:b8:6a:4c:1a:3e:fe:90:5e:9e:0a:60:
         b4:ac:9b:5f:0a:c5:0e:d4:a9:2f:84:91:7c:be:60:cd:98:da:
         b6:fa:a2:cb:ea:08:b8:82:88:70:00:49:3f:0c:25:d9:94:70:
         30:be:7b:d0:9a:3b:ef:f1:02:2b:ae:b5:18:c3:43:b0:03:26:
         c6:88:19:2f:e8:f3:eb:e8:bd:2b:af:22:ca:fe:02:0d:a6:9e:
         b1:aa:10:f1:86:7a:79:e3:48:55:88:c8:d9:b9:77:e8:63:0e:
         bd:7a:47:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:18:17 2026 by rpki-client