Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
File:                     7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft (raw, json)
Hash identifier:          0R4jKIF1X9blgmpWA4izq6mdG5w9oV21Vi++aaqfHow=
Subject key identifier:   B2:2A:68:B9:26:66:15:7F:E7:B8:9A:4E:AB:11:97:7C:52:55:6D:DA
Authority key identifier: EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19
Certificate issuer:       /CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
Certificate serial:       019EBEECC8A1317FD584D0C1038C5B3DD62A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
Manifest number:          11B0
Signing time:             Sat 13 Jun 2026 03:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:49 +0000
Files and hashes:         1: 7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl (hash: Viwv/9m8S6OOaFJHUTWXJsS/I2tKOjlMPOck3ZJLRAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:c8:a1:31:7f:d5:84:d0:c1:03:8c:5b:3d:d6:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
        Validity
            Not Before: Jun 13 03:00:49 2026 GMT
            Not After : Jun 14 03:00:49 2026 GMT
        Subject: CN=b22a68b92666157fe7b89a4eab11977c52556dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:8a:ba:44:06:33:af:e5:b9:66:fc:d1:d4:8f:
                    d9:36:07:28:a0:c3:e0:7f:95:f6:86:ac:32:18:da:
                    67:21:3c:47:10:57:7d:bb:01:6c:e7:54:9f:b8:e5:
                    e6:eb:75:55:b2:2d:9d:cd:6b:c0:52:60:fb:b4:18:
                    ef:5d:1f:a9:fe:e2:53:99:e1:36:4e:b7:ad:66:b1:
                    28:59:b6:bf:e4:37:b5:fe:78:d9:fd:63:a1:b6:cd:
                    ba:c8:12:69:a1:e7:78:8c:b1:b8:44:21:7e:51:26:
                    18:81:be:2a:b0:1c:8a:75:a9:7e:a0:1f:61:62:30:
                    31:0f:f4:a7:f9:8d:90:92:33:e7:0f:e2:c8:66:ff:
                    29:d1:80:67:bb:a8:8f:ce:cb:04:6e:3e:c6:88:d9:
                    15:58:57:43:9a:99:0a:98:af:5e:5a:8b:f7:3e:a2:
                    68:53:f9:ab:42:9f:a8:fa:2b:2b:81:89:7a:a8:13:
                    b8:1c:e4:18:32:61:ea:f2:ea:f4:ce:70:86:c4:3f:
                    f9:12:f5:fb:2d:a6:7c:17:67:7a:67:14:ee:7c:c6:
                    51:b4:c0:e8:cd:2f:98:25:ef:3d:15:17:70:82:da:
                    d0:5f:c2:9d:91:2c:6b:a8:d7:4a:65:9c:44:73:f6:
                    7b:a3:06:2c:90:0b:23:fe:65:2a:36:9c:4b:18:3a:
                    c8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2A:68:B9:26:66:15:7F:E7:B8:9A:4E:AB:11:97:7C:52:55:6D:DA
            X509v3 Authority Key Identifier:
                keyid:EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ca:05:1e:8d:f0:8b:28:d5:9c:39:02:e7:0e:27:c8:be:f4:
         9b:b6:1f:c0:2e:14:8e:e0:b9:48:ac:89:4c:00:e9:74:33:3c:
         4a:21:b0:ae:b1:75:fb:1d:e6:2f:24:3e:45:37:dd:2b:e8:94:
         6a:f5:22:bc:77:b7:f2:ca:c7:87:ea:01:a2:44:d2:e8:0f:9c:
         63:cf:2a:55:5d:de:87:ce:81:49:ce:3b:e4:2a:63:65:2e:33:
         3b:f6:9f:1b:7b:a4:64:32:0c:48:f7:58:f7:2a:6a:89:48:2f:
         af:5e:65:f4:6f:b8:4e:e9:c9:26:f7:ef:eb:96:91:ba:e4:9f:
         91:8c:39:bb:27:3d:94:69:f5:c9:9a:f5:ee:23:b4:dd:16:0d:
         bf:cc:1f:03:91:89:01:9c:b1:07:80:34:db:a9:f2:a3:26:9b:
         75:07:6b:3b:36:37:5a:56:f4:73:71:81:66:7d:11:2e:12:7a:
         a2:ca:6d:bb:6b:f1:26:de:b6:1d:2b:75:56:89:08:a6:6d:26:
         41:58:a3:e1:de:2f:a6:52:7d:af:3e:0e:27:64:57:8b:dc:4a:
         70:c9:54:45:6f:de:64:1d:45:7d:3b:f8:5d:71:16:18:13:8a:
         2c:e4:44:1c:b1:1c:b7:0c:08:2c:eb:28:74:ae:fa:0a:38:59:
         9f:ad:7c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:33:20 2026 by rpki-client