Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
File:                     63yFxELMq3Xizm3inbX9APMmdJ0.mft (raw, json)
Hash identifier:          7gm0L9v+FlqcRxym0uiIsOD52FYOzrsyDc4xJNmVPf0=
Subject key identifier:   CA:89:07:2E:F3:50:65:D4:A0:FE:08:6D:71:DE:E7:C3:E8:2C:1C:D5
Authority key identifier: EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D
Certificate issuer:       /CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
Certificate serial:       019E1BD8B0D9E11F581CF32A859DCA478165
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
Manifest number:          140D
Signing time:             Tue 12 May 2026 11:00:46 +0000
Manifest this update:     Tue 12 May 2026 11:00:46 +0000
Manifest next update:     Wed 13 May 2026 11:00:46 +0000
Files and hashes:         1: 63yFxELMq3Xizm3inbX9APMmdJ0.crl (hash: VoqjhDycKoyVSCAIG3U2JjMIaUY6E+cFPHeuclBkv48=)
                          2: vUFwfEY11W7JpynTF9BbfUWs9-w.roa (hash: eu7mWQahLyPxvPg5BFYa4l+E4W1NHB0xDJbdLJnBmrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d8:b0:d9:e1:1f:58:1c:f3:2a:85:9d:ca:47:81:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
        Validity
            Not Before: May 12 11:00:46 2026 GMT
            Not After : May 13 11:00:46 2026 GMT
        Subject: CN=ca89072ef35065d4a0fe086d71dee7c3e82c1cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3d:5b:f4:1b:7b:57:bd:9b:31:da:21:74:7a:
                    80:15:2e:c2:3c:70:3a:6f:8b:2a:46:34:4b:91:fc:
                    41:8c:c7:77:c7:80:61:48:1f:71:7e:4e:33:d9:61:
                    f1:62:8a:d0:a5:9b:b6:90:0f:4b:99:80:11:1d:ba:
                    71:c8:cc:0a:a3:09:4e:1f:00:64:0e:06:5e:02:9a:
                    12:1d:09:33:f2:33:fe:e8:c5:fe:91:43:b2:91:de:
                    35:85:47:da:27:32:e5:a8:93:8b:ea:cf:72:7d:83:
                    91:52:2b:83:50:6e:f4:24:72:40:91:59:cc:d5:34:
                    94:33:ce:38:89:3b:c6:c3:4e:70:6a:dd:7b:f8:8b:
                    37:95:36:e8:45:c3:c6:21:ac:38:a3:24:02:ad:59:
                    ae:45:a4:15:f8:47:ee:a5:a5:c2:9d:78:85:9f:ce:
                    55:0e:9f:2e:60:85:55:aa:9f:a8:05:bb:29:05:0c:
                    76:6e:af:7a:dd:f0:11:6a:70:3e:6b:9d:ba:36:cb:
                    0a:aa:82:6b:8a:38:2f:db:0b:ae:2c:f8:18:08:07:
                    1a:4d:8e:85:43:6d:c2:0a:1d:f4:3d:ef:b8:48:62:
                    08:76:37:d7:6e:27:5a:4e:1a:34:8e:15:e1:0b:4f:
                    bb:44:89:c3:1e:bc:89:e9:bd:a5:e5:ef:70:bd:f3:
                    00:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:89:07:2E:F3:50:65:D4:A0:FE:08:6D:71:DE:E7:C3:E8:2C:1C:D5
            X509v3 Authority Key Identifier:
                keyid:EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:bd:04:09:93:cb:1e:72:93:3b:59:32:5d:1a:82:e0:42:8b:
         e5:82:42:9d:94:3d:98:09:89:dd:7f:5d:96:8a:33:f8:e6:f9:
         38:08:19:b7:72:c1:3b:f4:7e:3e:c0:73:e9:df:56:dd:85:ea:
         a6:d5:8b:08:60:24:80:e0:89:50:68:3e:74:b9:1c:45:a4:d5:
         28:ad:df:f4:ef:40:87:50:20:1a:b7:45:eb:74:15:57:71:31:
         b5:ba:55:0c:df:6d:88:c2:91:68:1a:b5:7a:ad:46:b6:ec:ef:
         de:3a:f0:43:52:46:76:fe:fe:08:63:90:6d:b0:61:d8:bc:af:
         39:6b:83:24:8a:01:66:28:16:e9:ae:a5:c0:32:4e:42:bb:14:
         c1:3f:75:b4:cb:20:f8:1a:85:b6:68:c4:cf:c2:59:05:28:a6:
         a6:c9:fa:89:95:88:38:61:5b:7b:23:54:dc:87:01:7b:ea:81:
         fc:d0:73:ee:70:5c:8d:63:15:81:42:52:77:a3:b9:30:88:04:
         62:f0:2a:30:ca:8b:77:ba:8c:fa:a5:8b:3c:b2:67:c9:04:db:
         6e:9f:62:88:34:e5:d5:3c:df:30:f0:86:4e:45:25:cc:76:06:
         a8:9f:17:74:d0:77:1a:eb:e0:b8:ea:3b:94:f6:e6:da:bc:93:
         97:bf:1b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:51 2026 by rpki-client