Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
File:                     7FExTgTslnbytgJI4bm9Au8A4Wg.mft (raw, json)
Hash identifier:          KTzRqfeijjBwHOE2TUymuUuEeDJOlHmdPKHBBU5xRjM=
Subject key identifier:   54:42:EE:87:DE:A7:72:15:26:4C:33:90:58:38:7A:18:DD:D8:D9:78
Authority key identifier: EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
Certificate issuer:       /CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Certificate serial:       019E1C10501EDAFC303B203BE867675FA433
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
Manifest number:          1903
Signing time:             Tue 12 May 2026 12:01:31 +0000
Manifest this update:     Tue 12 May 2026 12:01:31 +0000
Manifest next update:     Wed 13 May 2026 12:01:31 +0000
Files and hashes:         1: 7FExTgTslnbytgJI4bm9Au8A4Wg.crl (hash: lYEF47ywDLrv4BTDtMLakOKJJlqt61d+cnj+j8UZ6fw=)
                          2: 955C7AtZAhtfMCkNkF_V4r29zNs.roa (hash: BzjiJ1i4x8f0IF+YLTcXKg5V1DmhNLRMYe5guMs7CHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:10:50:1e:da:fc:30:3b:20:3b:e8:67:67:5f:a4:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
        Validity
            Not Before: May 12 12:01:31 2026 GMT
            Not After : May 13 12:01:31 2026 GMT
        Subject: CN=5442ee87dea77215264c339058387a18ddd8d978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:13:11:ec:98:0d:c3:84:7d:39:66:f5:08:c4:
                    c9:20:cc:76:10:70:3f:c8:a1:7f:5b:85:a6:43:c2:
                    98:e2:c3:a6:55:86:4d:cd:a4:9e:1c:7d:0d:d9:b7:
                    26:0c:36:9c:33:0d:75:63:48:62:f1:f9:26:15:ca:
                    5a:f6:19:e3:64:73:1c:ca:4c:82:ab:9f:91:af:52:
                    ea:86:d1:b8:df:a5:5f:cb:a4:f3:d2:74:67:1d:21:
                    46:08:8e:cf:5e:46:03:73:21:24:c3:71:2d:bb:8e:
                    dd:87:b3:d8:b8:4e:72:32:7a:1a:31:43:72:55:75:
                    f1:e3:e4:67:39:98:9f:ad:66:06:a5:db:1b:55:19:
                    62:88:19:ba:66:3e:48:14:cb:65:37:28:94:d6:32:
                    20:33:9d:29:49:e9:25:5a:06:dd:6a:5a:63:e4:01:
                    89:1d:84:76:09:e2:a0:63:d1:4f:86:c3:e5:1f:5d:
                    dd:f6:a9:a3:2e:86:e5:d2:88:0d:96:fc:b7:0f:a6:
                    41:50:b9:0f:dc:de:f4:d2:bc:7c:ac:0c:14:22:36:
                    2d:67:e1:54:61:dd:71:c0:f9:bd:48:e1:58:e1:c6:
                    ad:16:4f:75:12:7a:19:22:70:32:ec:98:74:d5:96:
                    44:06:cb:aa:c9:f3:e5:5d:49:b0:98:e6:d6:53:87:
                    ad:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:42:EE:87:DE:A7:72:15:26:4C:33:90:58:38:7A:18:DD:D8:D9:78
            X509v3 Authority Key Identifier:
                keyid:EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:90:df:e8:a0:d9:a9:4c:bb:b4:51:8e:c4:50:05:68:a9:79:
         75:47:ed:74:4b:c8:fc:ca:8b:29:9a:6d:a7:d7:f2:8d:70:bf:
         0c:f5:87:8b:48:9a:26:05:87:3e:87:dc:c6:74:00:79:07:dc:
         a7:3f:ce:7e:0f:64:1a:33:fa:b4:48:af:6c:75:69:a0:06:69:
         b4:f0:e2:4d:ee:da:87:be:e2:eb:c7:e3:3c:db:0d:a8:d3:a8:
         91:79:fd:a9:3c:4c:b2:44:23:d5:17:47:6c:3c:6c:f3:2f:fb:
         42:e9:db:ef:f8:05:db:6c:17:2c:44:34:c2:16:47:60:8f:2c:
         97:cc:b7:17:db:88:f7:7c:57:9f:37:46:64:cd:c0:15:f6:da:
         06:45:68:fb:e3:e4:a0:9f:41:e7:16:1d:73:ba:86:4f:0f:16:
         ef:1b:2b:cf:c7:23:bd:ce:c0:10:17:96:df:d9:77:10:c4:bf:
         a5:72:f3:62:81:29:18:78:b7:42:5c:b1:29:83:f1:63:c9:ef:
         2e:fd:84:1e:c1:1b:55:76:ca:1a:62:6c:31:37:d0:d2:56:a7:
         06:d7:5a:4c:c2:3a:d3:ec:45:29:fb:a9:92:6b:0d:e9:ad:4f:
         cd:72:b6:fc:6b:f2:f8:a4:6f:65:c8:61:de:91:48:38:13:da:
         c8:d4:29:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:38 2026 by rpki-client