Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
File:                     7iUCbllV3N0RFHb5toSdcoGFRps.mft (raw, json)
Hash identifier:          cy/koY7lCW9s0zRkNjB/5oPdeafrENEaw+bQrV+n9Hs=
Subject key identifier:   B7:03:3B:DF:AC:F4:54:0D:A1:08:5D:14:85:D8:1A:8F:31:4E:F5:37
Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
Certificate issuer:       /CN=ee25026e5955dcdd111476f9b6849d728185469b
Certificate serial:       019E1C46E0F6987684837FD1F24F90AC0C59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
Manifest number:          0773
Signing time:             Tue 12 May 2026 13:01:07 +0000
Manifest this update:     Tue 12 May 2026 13:01:07 +0000
Manifest next update:     Wed 13 May 2026 13:01:07 +0000
Files and hashes:         1: 7iUCbllV3N0RFHb5toSdcoGFRps.crl (hash: pzAvGqCiC7jZt/ksLomJgBwyg50c7TrkcsXGaET+9Tk=)
                          2: JU735praQ5D7ZouW4n12dU9bM-4.roa (hash: dXXp6fBpmMfrGgRgIwTGPcESSVbHsTgXLylCNhPpDJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:e0:f6:98:76:84:83:7f:d1:f2:4f:90:ac:0c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b
        Validity
            Not Before: May 12 13:01:07 2026 GMT
            Not After : May 13 13:01:07 2026 GMT
        Subject: CN=b7033bdfacf4540da1085d1485d81a8f314ef537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:54:09:8c:c7:b4:44:a4:24:93:69:c5:df:14:
                    68:b6:b7:3b:1f:7f:71:21:17:80:76:51:d0:89:91:
                    7d:b0:e2:5d:b5:d3:eb:3d:80:c5:bb:6b:47:5f:a3:
                    2b:05:c6:c6:e8:a2:b6:94:2a:6c:c3:23:b5:b4:34:
                    d6:6b:38:b9:aa:99:23:15:d6:69:e7:cb:8a:8a:6f:
                    64:a1:49:53:b6:34:db:8a:94:fa:5e:a6:80:3f:5c:
                    b2:8e:84:f1:6b:0f:3b:e1:e7:31:98:73:8b:56:2e:
                    88:c4:10:bc:ee:da:34:99:fb:73:7b:a7:f6:c8:bf:
                    23:04:9a:20:b1:a5:1e:80:2c:98:96:f4:21:62:9c:
                    bf:15:49:f4:14:8e:67:c4:d9:ed:7f:ae:ef:32:28:
                    9d:51:d2:40:b1:a9:26:0a:b2:12:16:bc:b8:e3:2a:
                    75:09:2e:eb:32:16:a6:08:ec:67:fb:2f:3d:ce:78:
                    a9:6f:42:25:1d:72:44:d0:0d:1a:e5:a1:3a:2d:db:
                    da:6e:6c:8a:ba:73:9e:1d:49:e6:d6:0c:15:3d:f2:
                    a8:8e:9d:f4:f4:bf:37:6d:6c:89:b2:95:c4:25:96:
                    87:01:fe:e3:87:3b:08:ed:4b:ed:3d:e3:a9:e2:9b:
                    ba:ae:7b:a4:80:ac:bb:c0:6b:a9:36:c0:bb:41:2c:
                    0b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:03:3B:DF:AC:F4:54:0D:A1:08:5D:14:85:D8:1A:8F:31:4E:F5:37
            X509v3 Authority Key Identifier:
                keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:52:26:5e:2e:55:9b:db:22:fb:52:8a:3c:33:16:55:b0:b4:
         41:b6:8c:47:ee:1b:42:02:4d:32:3e:eb:f6:f9:79:e4:c2:1e:
         51:29:dc:44:a2:f4:bc:2f:16:96:df:bd:2f:79:3b:f1:1d:a3:
         97:5b:a0:16:70:da:0b:f2:30:66:2b:65:88:fc:21:9b:4b:14:
         9c:df:5d:9c:5e:94:a7:64:39:9c:d2:64:bc:8c:e9:9e:2c:34:
         5e:5a:ff:c4:e6:58:25:03:a4:17:49:12:0e:c4:ee:69:24:d3:
         d3:72:98:c3:f2:84:49:13:af:39:bc:7b:b0:bf:5e:49:02:3d:
         39:6a:8b:7a:ab:3e:db:85:a5:46:fe:a2:42:f6:68:a8:a5:3d:
         d0:7e:e9:08:b3:62:60:62:a5:22:01:93:fd:52:32:3d:d3:2f:
         5b:ae:37:e0:8b:ed:94:d3:f4:0e:eb:52:5c:ac:5b:a6:cb:ea:
         df:be:37:4f:7a:e8:f7:e1:c0:73:cc:33:80:1b:93:1b:11:16:
         38:27:b6:b2:cc:d7:73:c7:6a:62:6c:d5:9a:89:af:89:14:a0:
         e4:00:42:54:36:04:24:9b:49:de:13:64:44:b1:9e:9e:df:58:
         e8:0d:e5:49:82:1c:f6:69:d5:94:4c:78:d4:79:7e:94:c2:2f:
         03:a0:f8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:23:39 2026 by rpki-client