Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
File:                     7KM8lvAqnwvvJc04BqJGfKFlY3s.mft (raw, json)
Hash identifier:          5Z8TacRKi9CVfVGCINc6s3pmH1C2qNC7zSStVFYunEg=
Subject key identifier:   CA:27:D2:11:D1:E9:21:0F:58:64:35:C6:C6:4F:F7:C5:98:B2:B4:17
Authority key identifier: EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
Certificate issuer:       /CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Certificate serial:       019EC06DBC3333278562C2472CC7EB00007D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 10:01:17 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:17 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:17 +0000
Files and hashes:         1: 7KM8lvAqnwvvJc04BqJGfKFlY3s.crl (hash: Y/f2TmNgZed48K4lwy65w3ad2pVlhgp5jfVgobprq54=)
                          2: C7fQ7Ve9jd1KjW3OO8oxR9QhSyI.roa (hash: R/aIjhVfQy4DuH2HYkC6Yf9teDlMa+Wx7kzzvb2vFZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:bc:33:33:27:85:62:c2:47:2c:c7:eb:00:00:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
        Validity
            Not Before: Jun 13 10:01:17 2026 GMT
            Not After : Jun 14 10:01:17 2026 GMT
        Subject: CN=ca27d211d1e9210f586435c6c64ff7c598b2b417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:2d:bc:e1:cb:72:b8:b4:9a:da:ae:c0:ee:
                    3f:c2:62:bd:72:1a:21:e5:ed:bf:57:07:8f:06:e4:
                    ea:83:d9:0d:38:76:45:f3:d4:78:8a:20:f0:7c:81:
                    7e:09:d2:59:47:bb:06:5e:50:cb:0a:60:c9:02:40:
                    52:0d:b6:bd:bc:37:b3:1e:75:0c:7e:74:d9:2f:ef:
                    27:72:1d:bd:b0:6e:ea:f9:b4:8f:61:5e:ed:44:62:
                    dc:1f:ba:bc:4a:95:b5:78:11:e7:22:da:76:7e:84:
                    29:bf:7a:3a:f6:68:72:b7:63:50:fc:5d:d8:ae:b3:
                    ab:1f:10:ad:06:34:b8:45:32:4c:d0:11:95:cb:06:
                    26:dc:58:13:f6:1d:d4:ba:ab:c9:dc:ee:3c:9f:99:
                    8d:3f:0a:8b:89:32:5f:d4:db:76:e1:cb:90:2f:cd:
                    3d:0c:31:29:ca:12:ed:32:23:0e:f1:a5:34:cc:22:
                    b0:d3:26:eb:34:09:13:94:cc:16:4a:f8:0a:9e:9b:
                    6c:a8:b9:cb:ff:2a:f3:46:24:93:87:8c:6e:af:15:
                    f1:fa:2a:5d:39:a6:7d:e3:14:40:d7:39:59:72:e6:
                    38:46:5b:66:44:b1:77:50:22:41:5a:42:c2:cf:9f:
                    25:08:34:4d:04:63:c6:af:60:d8:d6:c0:d0:56:31:
                    fc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:27:D2:11:D1:E9:21:0F:58:64:35:C6:C6:4F:F7:C5:98:B2:B4:17
            X509v3 Authority Key Identifier:
                keyid:EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:16:4a:ac:52:39:e5:75:2c:1c:44:57:fd:9c:dc:6e:00:ba:
         10:a2:28:4c:bd:84:ef:54:a1:05:74:f3:6a:7c:d0:29:0e:a0:
         45:f0:63:9f:96:5a:53:06:a1:24:ae:31:55:9a:53:3d:81:ef:
         0a:c9:51:1e:a8:5b:8a:9f:b2:2c:3e:67:10:23:f5:32:62:9b:
         8c:c3:3a:ab:09:84:60:ce:44:90:a9:9d:27:2a:16:2e:85:42:
         80:16:07:54:25:ed:76:f0:75:a4:ef:e7:f1:c7:4b:af:c6:e6:
         fc:d2:22:2f:8f:10:48:53:23:b4:c6:c6:10:7e:f9:e3:f3:24:
         64:56:25:f5:33:40:8c:df:0a:5c:0b:32:d2:a3:42:11:84:89:
         19:c9:5a:3e:08:21:f8:66:df:c1:51:60:0f:6b:ef:a4:6d:5f:
         cf:a4:9d:39:dd:aa:59:76:26:7e:18:eb:66:1b:ee:56:ad:95:
         e1:d6:05:0e:bf:43:5b:0f:f8:ca:27:e2:d4:0f:4a:d9:25:8c:
         8e:24:a1:e4:6b:95:0d:da:2b:b6:38:9e:75:75:94:ad:5b:c5:
         78:c4:b6:aa:c4:5f:c6:23:48:84:f9:86:c0:de:f3:a5:66:98:
         23:49:93:d2:73:e1:18:f4:9e:a3:93:d1:85:a3:98:75:78:8d:
         f3:35:7c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:03:01 2026 by rpki-client