Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft
File:                     7kmddBz3poj_wsl2gT23xR68R0k.mft (raw, json)
Hash identifier:          PhKFT4+5JZSKeB3JMrtlOHc0GCo/yXE90PphWUpDIZo=
Subject key identifier:   F9:95:6B:F6:56:6C:47:E0:1C:F2:91:01:BE:B3:8D:B1:A4:F1:27:A5
Authority key identifier: EE:49:9D:74:1C:F7:A6:88:FF:C2:C9:76:81:3D:B7:C5:1E:BC:47:49
Certificate issuer:       /CN=ee499d741cf7a688ffc2c976813db7c51ebc4749
Certificate serial:       019E1DC7418371C49C98D1BF2D15B7D653BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft
Manifest number:          03CD
Signing time:             Tue 12 May 2026 20:00:58 +0000
Manifest this update:     Tue 12 May 2026 20:00:58 +0000
Manifest next update:     Wed 13 May 2026 20:00:58 +0000
Files and hashes:         1: 7kmddBz3poj_wsl2gT23xR68R0k.crl (hash: FCbIZ20F6ZpORCR0Vq38uQSSm6kNu3Ed4s0wwWegxdU=)
                          2: wKnEgD4LUjzl3Xg9ixLbselaklE.roa (hash: bAjcEWUJ0poUNC9tIVnKtSJHHlCTwxmRLAJtIzNX1ts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:41:83:71:c4:9c:98:d1:bf:2d:15:b7:d6:53:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee499d741cf7a688ffc2c976813db7c51ebc4749
        Validity
            Not Before: May 12 20:00:58 2026 GMT
            Not After : May 13 20:00:58 2026 GMT
        Subject: CN=f9956bf6566c47e01cf29101beb38db1a4f127a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cc:b6:15:83:0e:77:ac:6c:1d:19:7b:fe:cb:
                    e7:b4:26:89:31:db:97:da:1c:61:d3:f1:f1:92:1f:
                    f8:c1:77:dd:ac:20:8c:e5:d4:2b:a8:79:ec:76:29:
                    c9:46:3e:d7:98:cf:9f:0b:42:df:95:3a:78:89:1e:
                    b6:6d:6d:41:f3:29:5d:31:a8:b5:96:4c:9a:6e:c5:
                    24:b2:da:ad:8b:9f:bb:71:47:61:32:29:27:9a:8b:
                    75:e8:c1:8c:77:fd:c2:1a:15:60:62:d8:ff:c5:b6:
                    1f:7c:ff:fc:2b:a8:5b:2d:41:e5:5a:67:eb:13:bf:
                    11:ee:23:ca:b4:f5:8e:06:9f:a9:66:68:e1:a5:ed:
                    1f:73:67:01:29:fa:6c:fa:ee:35:5c:cc:68:50:45:
                    37:da:21:b6:1d:59:6f:ea:70:eb:c7:ad:ba:76:3f:
                    ca:e6:6a:51:e8:12:a6:fd:55:f0:f5:43:f5:37:df:
                    c5:5e:d8:9b:ac:c1:7d:9e:a9:ad:5e:b8:7e:97:44:
                    10:24:95:b2:34:d0:e3:67:10:56:29:e4:f5:f9:d5:
                    b8:95:15:f0:40:ec:c4:58:21:82:4b:c0:a3:9a:31:
                    08:e1:04:bd:fa:58:53:be:1d:29:dd:9e:d5:79:85:
                    7a:59:3c:80:f0:90:0c:ec:24:0e:d3:89:9c:e9:a2:
                    78:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:95:6B:F6:56:6C:47:E0:1C:F2:91:01:BE:B3:8D:B1:A4:F1:27:A5
            X509v3 Authority Key Identifier:
                keyid:EE:49:9D:74:1C:F7:A6:88:FF:C2:C9:76:81:3D:B7:C5:1E:BC:47:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ed:50:47:b5:05:2c:d2:77:fb:4b:d5:e8:e3:a5:d0:14:c0:
         4f:21:d6:9f:3a:6d:e0:57:68:cb:60:33:e6:2d:1c:17:65:74:
         2c:d3:1d:8d:2a:b3:98:d4:57:95:7d:5b:ce:f5:d2:f5:a6:77:
         63:52:cc:17:3e:f5:16:79:21:76:c8:51:0e:a5:c3:f5:c3:62:
         0f:90:06:5d:d8:28:79:7d:57:40:c4:4a:31:ff:88:a1:ed:bb:
         73:41:58:fb:da:ca:7e:c5:fe:00:bf:d0:49:5f:22:b8:42:b0:
         23:6f:58:3c:e7:fa:fb:30:93:27:dd:7b:f2:59:f7:40:d7:94:
         2f:fe:74:6a:d1:a5:54:90:4a:7c:cb:24:21:dd:de:78:b1:fc:
         0b:b7:05:d1:f0:91:a0:ee:5a:d5:b0:f5:00:0b:6c:49:9a:83:
         d7:54:6c:e3:d9:4e:5c:b7:48:f9:e5:af:95:91:61:a2:24:e3:
         18:ca:b5:1c:53:fd:7d:00:22:a8:f8:e9:51:34:ef:c2:28:a2:
         5d:14:32:88:4d:1a:88:55:5a:36:87:e0:82:1c:f2:2c:d6:db:
         81:6e:11:76:d4:f9:f0:e0:f4:d0:f3:7d:23:76:a3:7f:5d:5b:
         bb:45:3e:0c:8e:9e:83:66:df:e0:fd:6b:fd:2d:76:43:a3:78:
         78:82:0a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:02:52 2026 by rpki-client