Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ec4769-eb6a-4c20-8bef-635726ccfdb0/1/7_bzoe97RhIN3qUDuRFA6kn0EoI.mft
File:                     7_bzoe97RhIN3qUDuRFA6kn0EoI.mft (raw, json)
Hash identifier:          IK6hTdcniwm5xxnGJIbf/7fgxcZkEedap8LC6XA8vEk=
Subject key identifier:   51:C8:73:ED:66:A3:AE:A7:CE:EF:54:10:B8:79:6F:42:04:F8:43:1C
Authority key identifier: EF:F6:F3:A1:EF:7B:46:12:0D:DE:A5:03:B9:11:40:EA:49:F4:12:82
Certificate issuer:       /CN=eff6f3a1ef7b46120ddea503b91140ea49f41282
Certificate serial:       019E1C7DB574EFA900FB0C492C4F783B2B92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_bzoe97RhIN3qUDuRFA6kn0EoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/ec4769-eb6a-4c20-8bef-635726ccfdb0/1/7_bzoe97RhIN3qUDuRFA6kn0EoI.mft
Manifest number:          4E
Signing time:             Tue 12 May 2026 14:01:00 +0000
Manifest this update:     Tue 12 May 2026 14:01:00 +0000
Manifest next update:     Wed 13 May 2026 14:01:00 +0000
Files and hashes:         1: 7_bzoe97RhIN3qUDuRFA6kn0EoI.crl (hash: mnkwEZ5YJEMm3He/Nws9sqM8PJxqjMY8pNRIQ1q3ABg=)
                          2: Q03Wrr-4bRfsym1mVZ38VCx0Qzc.roa (hash: QlIjxjh/GKAm5itGl6sVrB0RZN4x8cc0LZn3FPdxeAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/ec4769-eb6a-4c20-8bef-635726ccfdb0/1/7_bzoe97RhIN3qUDuRFA6kn0EoI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/ec4769-eb6a-4c20-8bef-635726ccfdb0/1/7_bzoe97RhIN3qUDuRFA6kn0EoI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_bzoe97RhIN3qUDuRFA6kn0EoI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:b5:74:ef:a9:00:fb:0c:49:2c:4f:78:3b:2b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff6f3a1ef7b46120ddea503b91140ea49f41282
        Validity
            Not Before: May 12 14:01:00 2026 GMT
            Not After : May 13 14:01:00 2026 GMT
        Subject: CN=51c873ed66a3aea7ceef5410b8796f4204f8431c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:40:34:10:85:9e:3e:94:a1:80:c9:2a:72:
                    c8:06:46:72:6a:c2:33:1a:3a:01:f2:c3:00:25:a1:
                    cc:bd:f5:84:24:59:50:26:7d:f4:64:27:97:75:11:
                    09:54:ad:fd:9f:be:ef:eb:99:04:18:ec:0f:1e:6a:
                    d1:2a:73:be:f9:28:c9:e0:0b:15:d5:fa:d4:45:02:
                    68:2e:34:06:fe:e1:5c:00:54:ee:9a:fd:51:07:40:
                    ab:8e:29:6d:32:3f:98:7e:c8:4f:72:c8:c4:05:5f:
                    76:e8:f7:f6:fb:3b:28:9c:c4:37:29:fa:66:de:54:
                    1d:a0:8f:97:58:20:c5:61:61:e9:0f:c0:31:bc:74:
                    04:4c:cc:89:0e:bf:56:a3:b9:c4:1e:80:99:a1:57:
                    7a:6b:64:7e:29:df:bc:cc:3f:41:c1:dc:d1:a8:98:
                    08:b6:99:09:f8:6a:32:89:14:bc:fc:11:5a:9f:6c:
                    94:7c:9b:fb:8a:4a:91:7f:7e:1d:70:f3:b1:ec:3b:
                    76:28:8e:69:44:2b:7b:e1:a8:71:c0:2d:84:14:9b:
                    f0:d1:d3:5d:3e:c1:a6:56:a7:af:df:f5:52:6d:26:
                    9d:c8:2a:c0:e3:26:cc:a8:83:43:1d:91:8c:98:e1:
                    d7:9b:d9:d9:9f:37:94:a6:2f:79:ce:cf:37:01:3f:
                    a1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C8:73:ED:66:A3:AE:A7:CE:EF:54:10:B8:79:6F:42:04:F8:43:1C
            X509v3 Authority Key Identifier:
                keyid:EF:F6:F3:A1:EF:7B:46:12:0D:DE:A5:03:B9:11:40:EA:49:F4:12:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_bzoe97RhIN3qUDuRFA6kn0EoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ec4769-eb6a-4c20-8bef-635726ccfdb0/1/7_bzoe97RhIN3qUDuRFA6kn0EoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ec4769-eb6a-4c20-8bef-635726ccfdb0/1/7_bzoe97RhIN3qUDuRFA6kn0EoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:50:5f:50:66:70:e4:e8:e2:06:eb:f5:b7:4f:e1:6c:80:ea:
         d0:2e:c1:ba:9b:f9:3f:b9:21:6d:3a:21:6f:e6:dd:c5:c3:ca:
         c5:a9:22:dc:32:0b:3a:6e:88:05:4e:21:77:a6:9f:b6:eb:ec:
         6e:cb:b1:78:0c:3a:af:a4:e0:34:4c:6e:07:34:96:c6:bc:c9:
         54:35:fa:9a:dc:b5:99:36:88:70:3b:d1:2b:c9:50:e2:e1:af:
         a0:02:13:ed:de:d2:4c:ee:17:a6:bf:95:dc:c7:19:ce:3e:93:
         dd:84:62:d0:61:2a:04:9c:75:06:ee:57:88:01:28:2f:0a:d7:
         cd:9f:9e:a8:cd:8f:b0:bd:24:14:e8:89:fc:14:19:1c:bb:c4:
         fe:81:77:9a:86:47:e8:22:a1:67:75:3b:8c:9c:4d:d1:9d:a7:
         ca:74:d3:5f:ce:b6:97:a4:3d:98:1a:5b:d5:ec:53:ee:91:c6:
         ea:e1:a7:d0:b7:22:47:3e:6e:07:22:76:60:f9:47:07:f7:35:
         f4:5a:d1:36:7c:e0:55:5a:71:35:ff:16:26:d8:2c:9e:9d:f5:
         bf:8c:d2:f5:3d:af:6b:9a:cf:b1:22:e8:0d:10:ab:87:af:94:
         6d:84:59:78:ae:17:8e:7b:57:79:0b:3c:a6:31:50:a2:f6:34:
         3b:3a:26:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:10 2026 by rpki-client