Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
File:                     7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json)
Hash identifier:          uWL0JcZnJq6c9WIwC/GvR7VVfcsdzOj7w+PBGOe8w0Y=
Subject key identifier:   67:EB:A2:17:66:49:65:58:50:24:56:D7:2A:C8:5F:C3:CD:90:7F:78
Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
Certificate issuer:       /CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Certificate serial:       019EBE7EF3A91C73B8D41AAE7FCD7E650560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
Manifest number:          0D65
Signing time:             Sat 13 Jun 2026 01:00:51 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:51 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:51 +0000
Files and hashes:         1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: OJ2XyISdqvltBlcHSrE7vsvCvA7kLqdIfbjncvcy+es=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:f3:a9:1c:73:b8:d4:1a:ae:7f:cd:7e:65:05:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081
        Validity
            Not Before: Jun 13 01:00:51 2026 GMT
            Not After : Jun 14 01:00:51 2026 GMT
        Subject: CN=67eba21766496558502456d72ac85fc3cd907f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9a:1b:7a:d1:23:96:dd:c3:ed:16:ce:83:22:
                    77:1c:74:a2:cb:e0:56:4c:e8:53:44:ab:cb:80:eb:
                    bf:5d:7b:40:08:69:33:03:d1:a8:a9:14:f2:7f:00:
                    52:bd:b3:88:a6:1f:6a:5c:38:d0:28:b5:04:1f:8b:
                    f6:ae:a5:5c:40:2b:42:56:54:69:4d:9a:f8:13:fa:
                    b5:61:f9:94:cf:c6:54:8e:62:e3:70:96:fa:d4:c7:
                    35:5e:5e:36:13:e8:29:e3:11:99:c4:28:27:19:09:
                    63:ec:c5:6b:10:7c:07:39:7d:52:bc:d8:70:ca:8e:
                    3a:7c:5e:0f:61:35:15:a0:5c:34:a9:62:18:26:46:
                    ba:31:70:7b:f9:c1:cb:c6:63:a2:a5:b3:0a:7a:02:
                    f5:de:9e:61:eb:8e:12:3d:fc:99:d2:b1:7e:8f:ef:
                    de:aa:5d:cd:d0:2a:22:c0:19:8b:60:ff:fc:ea:a7:
                    9b:fe:ce:ed:62:87:27:12:9e:24:9c:94:30:f7:73:
                    12:e2:cc:14:7e:ed:79:bd:5e:51:48:ed:5c:ec:ed:
                    b4:ca:74:e3:03:68:b9:a4:fb:4c:c9:b4:3b:d5:42:
                    3f:8b:4b:d6:f4:a8:af:c2:de:30:3d:67:6b:1b:03:
                    62:c0:e7:8d:68:41:8b:d3:6d:fa:fa:2d:5f:f4:74:
                    96:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EB:A2:17:66:49:65:58:50:24:56:D7:2A:C8:5F:C3:CD:90:7F:78
            X509v3 Authority Key Identifier:
                keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:75:cc:b4:79:65:65:a1:aa:1b:54:3c:ea:50:b2:3b:8e:cb:
         8f:c9:00:05:bf:0d:87:9e:f2:d4:6b:3c:5d:96:67:4c:e6:17:
         9a:2c:ba:58:e8:40:7e:c9:b9:ac:a2:28:80:19:7a:37:c1:4f:
         cc:8f:15:83:de:82:d4:44:b8:7e:fa:26:02:32:12:5e:61:f6:
         5f:42:f0:dc:e4:e8:40:f7:d3:ec:8a:ae:d3:41:49:1e:20:07:
         93:ce:4d:9a:1f:9a:1f:d3:44:f0:35:9b:d7:36:f6:be:82:71:
         2f:35:14:f9:01:0c:23:94:74:bf:ee:49:06:87:5d:4e:f9:af:
         d1:8d:d1:a5:52:77:e2:59:5f:bd:ca:65:e9:6d:54:a5:ba:db:
         7a:90:c9:2d:2e:51:c7:40:79:2c:95:5f:55:38:80:0b:b3:f2:
         31:3a:83:b5:e6:c9:a0:cd:c4:cf:89:f4:40:91:e2:cf:0f:48:
         c1:b9:16:a0:08:9e:fb:22:4f:92:42:88:a9:05:86:b3:25:fc:
         25:cd:41:f4:1a:33:e8:68:21:86:43:7c:58:45:09:26:81:c9:
         8b:0b:06:f1:f8:5a:96:79:ba:88:21:b2:68:42:8d:7d:49:9b:
         ed:ee:b2:4e:60:61:1b:ff:cb:b6:f2:54:a4:5d:11:56:14:6d:
         38:85:4f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:19:34 2026 by rpki-client