Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
File:                     7gZE9wYh3Uokp4tntGApSFc3WMA.mft (raw, json)
Hash identifier:          rSmM6GRCNVLXdK8QL4I31p1uu+U3tvCqZ5S77eZsPoQ=
Subject key identifier:   85:BF:86:2D:D0:7B:40:3D:9F:D0:8E:B9:75:AA:F7:6A:92:0C:97:00
Authority key identifier: EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
Certificate issuer:       /CN=ee0644f70621dd4a24a78b67b4602948573758c0
Certificate serial:       019E1CEBC9823E061502A70BE92BEE87B76C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 16:01:14 +0000
Manifest this update:     Tue 12 May 2026 16:01:14 +0000
Manifest next update:     Wed 13 May 2026 16:01:14 +0000
Files and hashes:         1: 7gZE9wYh3Uokp4tntGApSFc3WMA.crl (hash: YVdGusm7cN6TWW+6zeQTSciMzjK5iFwevyJLPp3bUK8=)
                          2: Rrw9o3WCpwNOEYYVtK8wHu_QJkY.roa (hash: 6I0ghzBeN79J1UAgpVFm5cx7tXZBN44byXnGOpV99sA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 16:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:c9:82:3e:06:15:02:a7:0b:e9:2b:ee:87:b7:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0644f70621dd4a24a78b67b4602948573758c0
        Validity
            Not Before: May 12 16:01:14 2026 GMT
            Not After : May 13 16:01:14 2026 GMT
        Subject: CN=85bf862dd07b403d9fd08eb975aaf76a920c9700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:36:53:e0:91:fc:cd:ab:ca:ec:9f:1a:80:bf:
                    9f:f0:d7:e8:3b:0b:e1:aa:63:25:6b:fa:b4:52:59:
                    3a:58:fc:13:38:d5:68:c7:4a:25:d1:af:88:f5:78:
                    9f:f2:db:09:0d:bc:bf:64:fd:c7:ed:ac:84:4e:1d:
                    3b:8e:38:77:8c:b2:6f:68:99:4c:c5:76:66:98:61:
                    9f:b5:25:1c:b7:fc:c4:38:da:12:ff:00:52:15:71:
                    1b:03:dc:bf:74:51:0c:b2:96:ea:63:a5:0e:17:d3:
                    40:fc:fc:4b:4b:d1:2c:7b:35:1c:ec:d4:c3:50:26:
                    36:4a:a5:4c:ef:bc:62:4c:1f:52:43:50:3a:8a:84:
                    79:ff:2e:87:74:bd:0e:7f:c8:fd:81:2a:bf:12:33:
                    f8:d5:94:35:4e:95:48:f2:b3:5d:2c:5b:da:c3:81:
                    d0:c3:b7:9f:b3:64:8a:1b:ea:d4:e3:2c:7b:d1:d7:
                    48:f2:ce:ab:35:18:2d:82:b5:3c:a4:a4:42:6d:26:
                    0c:c6:b7:c0:3e:2c:69:6b:f8:be:6a:00:d1:15:1c:
                    24:0a:13:b6:6b:f8:9c:bc:fb:06:7a:eb:2b:a9:5b:
                    fc:db:a7:9b:47:31:c1:ce:71:1a:8e:e5:db:88:7b:
                    98:cd:d4:a5:9a:fd:37:a7:6d:77:67:38:93:5b:b4:
                    aa:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BF:86:2D:D0:7B:40:3D:9F:D0:8E:B9:75:AA:F7:6A:92:0C:97:00
            X509v3 Authority Key Identifier:
                keyid:EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:06:9d:da:a3:6f:10:64:26:91:b7:a5:18:aa:74:f1:05:56:
         bd:da:74:6e:d1:ed:b0:c2:5e:42:0d:da:4b:f7:dc:20:70:b5:
         4f:1c:c4:4e:f4:71:dd:4e:b2:42:51:78:b6:2f:0f:5d:75:df:
         97:53:5c:c7:ec:1c:e3:21:20:34:e1:2a:b6:3f:ed:e7:90:f9:
         4b:c0:68:1b:ad:41:53:43:6b:cf:9f:03:81:6b:7e:8a:48:39:
         05:2a:11:51:86:c4:2a:b3:4c:c7:00:4a:91:a0:89:89:35:6d:
         56:33:b1:60:a1:7a:77:3a:d7:d6:fd:96:c5:84:15:c9:29:85:
         a4:f0:2f:21:c0:c0:7d:de:cc:ee:35:cb:df:5a:5e:bb:5f:02:
         a4:b7:ae:03:eb:43:f5:8c:09:ee:df:3b:dc:7d:5d:7b:0d:be:
         08:05:fd:04:87:22:25:b4:94:33:77:06:1e:7f:f5:2c:b9:75:
         13:47:86:5f:24:50:cc:c2:de:a2:92:84:11:5d:93:a3:92:e1:
         f9:4e:36:93:de:e5:c5:17:f4:f4:61:ba:85:0b:52:d0:27:a5:
         e9:8e:67:95:b2:9f:12:23:f1:06:ac:20:02:69:7c:56:f2:05:
         04:76:d8:7e:2c:48:1a:80:b2:f9:16:95:22:05:6d:68:50:29:
         36:58:4f:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c68mCPgYVAqcL6Svuh7dsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDY0NGY3MDYyMWRkNGEyNGE3OGI2N2I0NjAyOTQ4NTcz
NzU4YzAwHhcNMjYwNTEyMTYwMTE0WhcNMjYwNTEzMTYwMTE0WjAzMTEwLwYDVQQD
Eyg4NWJmODYyZGQwN2I0MDNkOWZkMDhlYjk3NWFhZjc2YTkyMGM5NzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDZT4JH8zavK7J8agL+f8NfoOwvh
qmMla/q0Ulk6WPwTONVox0ol0a+I9Xif8tsJDby/ZP3H7ayETh07jjh3jLJvaJlM
xXZmmGGftSUct/zEONoS/wBSFXEbA9y/dFEMspbqY6UOF9NA/PxLS9EsezUc7NTD
UCY2SqVM77xiTB9SQ1A6ioR5/y6HdL0Of8j9gSq/EjP41ZQ1TpVI8rNdLFvaw4HQ
w7efs2SKG+rU4yx70ddI8s6rNRgtgrU8pKRCbSYMxrfAPixpa/i+agDRFRwkChO2
a/icvPsGeusrqVv826ebRzHBznEajuXbiHuYzdSlmv03p213ZziTW7Sq2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIW/hi3Qe0A9n9COuXWq92qSDJcAMB8GA1UdIwQY
MBaAFO4GRPcGId1KJKeLZ7RgKUhXN1jAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wMmRhYzMtMzllYi00NjljLWFjYzkt
MDBjZDVlYzAwZDExLzEvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8wMmRhYzMtMzllYi00NjljLWFjYzktMDBjZDVlYzAwZDEx
LzEvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgad2qNv
EGQmkbelGKp08QVWvdp0btHtsMJeQg3aS/fcIHC1TxzETvRx3U6yQlF4ti8PXXXf
l1Ncx+wc4yEgNOEqtj/t55D5S8BoG61BU0Nrz58DgWt+ikg5BSoRUYbEKrNMxwBK
kaCJiTVtVjOxYKF6dzrX1v2WxYQVySmFpPAvIcDAfd7M7jXL31peu18CpLeuA+tD
9YwJ7t873H1dew2+CAX9BIciJbSUM3cGHn/1LLl1E0eGXyRQzMLeopKEEV2To5Lh
+U42k97lxRf09GG6hQtS0Cel6Y5nlbKfEiPxBqwgAml8VvIFBHbYfixIGoCy+RaV
IgVtaFApNlhPgQ==
-----END CERTIFICATE-----
Generated at Wed May 13 02:53:39 2026 by rpki-client