Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
File:                     7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft (raw, json)
Hash identifier:          l6ghnU2oLwTWHgdyc6CSkIP/3KQmUvPiBknhXqjWrPE=
Subject key identifier:   DA:66:F5:45:41:AD:49:C7:F3:2C:3C:A9:10:FA:8A:12:03:CD:58:7E
Authority key identifier: ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57
Certificate issuer:       /CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857
Certificate serial:       019E1CB4C64469497DA507D87DFE9BA505A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
Manifest number:          1895
Signing time:             Tue 12 May 2026 15:01:09 +0000
Manifest this update:     Tue 12 May 2026 15:01:09 +0000
Manifest next update:     Wed 13 May 2026 15:01:09 +0000
Files and hashes:         1: 7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl (hash: HTBaVN1bYz7FpRUq+/fJoYSTzyaLD6jAWUgVASs+8co=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:c6:44:69:49:7d:a5:07:d8:7d:fe:9b:a5:05:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857
        Validity
            Not Before: May 12 15:01:09 2026 GMT
            Not After : May 13 15:01:09 2026 GMT
        Subject: CN=da66f54541ad49c7f32c3ca910fa8a1203cd587e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d7:70:90:c2:3a:1f:b2:ee:37:b7:26:8b:ef:
                    e8:9f:ae:0a:5b:9f:b6:5c:b7:2a:cf:9d:5e:6a:a7:
                    f6:0d:4e:ea:c7:e0:db:c0:2b:e3:a7:70:91:dc:14:
                    98:61:f9:bd:77:6c:4d:ea:36:e6:1b:e4:cf:e8:23:
                    e0:3a:81:0b:a1:25:65:7b:b5:52:52:89:20:3f:6c:
                    48:18:da:6e:0f:e5:d4:20:be:e3:86:a3:0e:85:3d:
                    51:d4:65:24:d9:3b:c0:9f:5c:8f:41:81:29:f1:18:
                    2f:01:4f:6a:48:22:2b:9f:99:06:a1:ba:26:e3:48:
                    3a:8e:4a:05:a7:c5:6f:3f:a3:12:2d:83:f6:fe:bb:
                    4f:5c:88:47:2a:cd:fd:7b:66:e6:22:63:7a:51:24:
                    02:12:c6:df:d1:6b:19:bc:45:17:86:f1:79:d1:57:
                    cc:36:09:40:1f:ab:9a:aa:f7:d0:d4:b8:ca:75:02:
                    03:80:26:1d:ce:4c:ac:2e:61:de:34:aa:39:0d:6c:
                    0d:86:7a:42:32:bb:de:22:df:a8:6c:66:1f:4e:b8:
                    3f:d4:f3:cf:62:1f:04:8e:64:ce:03:0d:cd:ce:c3:
                    07:a6:e4:8d:cf:bf:7b:d6:1f:ae:1f:39:f3:6b:7f:
                    07:54:7b:b9:19:62:7d:ce:b0:83:95:33:ee:02:7a:
                    23:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:66:F5:45:41:AD:49:C7:F3:2C:3C:A9:10:FA:8A:12:03:CD:58:7E
            X509v3 Authority Key Identifier:
                keyid:ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:49:b3:30:81:38:16:03:54:d6:11:2b:e2:29:6b:20:cd:99:
         9f:47:f1:8d:9f:26:bc:a5:ce:fe:f2:cb:c9:1a:2f:6b:18:98:
         7f:fe:02:29:83:28:5e:ba:0d:19:e8:c3:3e:b7:e0:e0:c5:c9:
         d6:64:3a:41:2d:27:ce:4d:05:44:60:1f:7c:78:ac:af:02:45:
         a9:37:fd:db:c3:60:61:ff:2a:62:70:99:61:e0:dd:c0:a3:cc:
         98:79:8d:10:aa:c7:8b:96:c9:e9:ea:a0:7e:53:4c:d1:91:9a:
         dc:4d:28:d5:2e:20:1d:ef:71:84:b5:44:e3:d2:53:fd:ae:85:
         c2:ac:ea:e0:bd:c8:30:00:5c:58:46:11:cc:6f:16:95:b0:36:
         2c:69:3a:0d:be:c8:ed:e7:1c:28:64:42:26:87:2c:8d:42:f5:
         6f:27:ef:14:4f:6c:65:14:d5:ac:76:dd:75:6f:aa:cc:5a:fb:
         59:07:f5:bc:f3:25:67:5d:d2:73:54:92:62:0e:80:c7:5e:ba:
         aa:db:80:05:24:c8:0c:1b:5c:75:d9:5f:c3:a4:36:74:7a:f2:
         ef:9c:22:4f:d0:32:ae:4d:e9:fa:f2:f1:f4:eb:aa:b3:56:db:
         c6:37:43:66:01:67:1d:42:3d:b9:4f:d8:24:a8:43:fb:fd:a4:
         26:62:51:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:27:46 2026 by rpki-client