Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
File:                     ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json)
Hash identifier:          Un7RXRsyrMtZKMEiihQml8sNqiCpzXefGcwj3l38B0k=
Subject key identifier:   B7:AB:8E:EC:F3:EB:04:4F:9D:6E:AE:D4:2C:CD:97:22:23:17:81:0C
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Certificate issuer:       /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial:       019E20236774A6215FF97A80358C904C9B55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
Manifest number:          045E
Signing time:             Wed 13 May 2026 07:00:51 +0000
Manifest this update:     Wed 13 May 2026 07:00:51 +0000
Manifest next update:     Thu 14 May 2026 07:00:51 +0000
Files and hashes:         1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: j4pyGZwLL5IHfxTREsqzaMcAGnIftgdw/brtdZIjx5Q=)
                          2: mryfSMsiVc0yv4FSUpt7qiqcwh4.roa (hash: 0IMb7oddMwh/zy5T4EnTss9mtPc9VXAUaEOcmqL1xfU=)
                          3: o_rtVjzkw0KDuX61bKwdi27cJvI.roa (hash: /gFVliPW+JCCvNfNfgkacSugBlyQGtqR4HbJDxkhEjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:67:74:a6:21:5f:f9:7a:80:35:8c:90:4c:9b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
        Validity
            Not Before: May 13 07:00:51 2026 GMT
            Not After : May 14 07:00:51 2026 GMT
        Subject: CN=b7ab8eecf3eb044f9d6eaed42ccd97222317810c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:de:75:15:61:b1:e3:12:b8:b3:1c:4b:cb:5c:
                    ba:e0:02:9f:e1:8e:59:5e:0c:95:a7:2b:56:1e:9b:
                    49:98:0d:d1:7b:f9:01:04:d1:85:f2:b5:70:3f:c0:
                    d9:2d:86:f7:85:0e:cc:c9:c9:bc:c9:ac:d3:30:1b:
                    80:fc:18:a4:63:83:02:1f:ab:ee:ee:82:8b:a3:34:
                    b7:99:9c:4a:7c:36:b9:92:e0:1a:eb:4d:a3:c4:6c:
                    24:a3:88:df:d1:1c:53:b6:1c:91:81:0f:4f:b4:26:
                    1f:05:d3:e3:67:41:80:2b:d3:b7:b3:3d:2c:92:a4:
                    92:f2:0a:b1:61:b1:7b:86:7f:fa:7d:d4:b8:c1:4b:
                    e5:61:45:89:68:91:3b:4a:07:7e:28:0f:7e:23:8c:
                    2d:b1:dc:2e:05:e5:a0:8f:4b:d5:98:3b:ab:46:f4:
                    8a:ef:a6:9c:45:34:e2:d1:9c:3b:92:5d:ef:87:9d:
                    99:ad:b3:aa:78:71:bf:16:ca:4d:16:e6:5f:6f:9c:
                    c4:55:c3:c6:95:5f:0c:1b:8b:3e:03:fe:2c:79:6f:
                    4c:3a:9e:f0:1e:61:7f:c8:c2:ae:07:4f:c6:52:aa:
                    ff:5b:06:1f:bd:c3:3f:61:6e:8a:26:38:0b:1d:2d:
                    59:1a:d9:bd:79:b0:5b:e9:fe:56:c1:21:90:e9:ae:
                    8f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AB:8E:EC:F3:EB:04:4F:9D:6E:AE:D4:2C:CD:97:22:23:17:81:0C
            X509v3 Authority Key Identifier:
                keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:58:18:26:f0:f8:4e:f4:44:01:e1:0f:2d:63:10:4d:83:5e:
         97:14:28:40:31:48:44:16:6e:82:83:b5:07:e1:c7:24:c3:b5:
         60:bc:e3:29:d9:e8:39:2c:58:be:c6:42:87:08:2d:27:72:e1:
         40:f0:f4:45:23:b8:1a:c7:92:9c:c3:b1:a5:7b:f2:a7:ef:81:
         cf:37:c0:fa:47:58:cd:6b:21:b1:34:b8:ad:b8:a4:14:de:b7:
         2e:78:70:43:dd:14:e6:ea:cc:fe:af:39:3f:bd:c7:13:07:50:
         28:ad:18:a1:c9:75:fd:07:a3:12:12:40:90:5c:69:3b:12:f0:
         8c:be:be:67:8e:ab:54:a0:05:8e:49:47:06:e8:48:a2:82:f4:
         18:90:e7:39:94:ca:ff:a3:cd:cc:41:fa:f7:44:66:e3:0b:fa:
         f9:b0:69:65:f0:53:d1:96:69:16:9d:45:95:a6:bf:6b:14:62:
         ac:6e:69:9c:3c:7a:e2:d7:bf:bf:68:a4:37:1a:c5:39:4a:92:
         28:ee:2c:d4:8a:42:9f:0a:9d:2c:67:2f:87:ba:70:b0:62:4f:
         fe:05:0c:42:37:f8:39:34:84:49:4a:5e:07:17:15:41:b6:52:
         2d:e4:4b:e4:94:9c:53:38:7d:ec:33:d5:df:78:47:b0:2d:98:
         22:40:8f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:20 2026 by rpki-client