Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
File:                     7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft (raw, json)
Hash identifier:          q4JBxOmkNvgbDYv/EMTETNeuwnUPj0M1Wu50UNbY0WU=
Subject key identifier:   FA:28:5E:3C:42:5C:53:FF:9D:FF:45:B0:D7:E9:E4:A5:0C:2B:1E:03
Authority key identifier: EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
Certificate issuer:       /CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Certificate serial:       019EBE7EDE2C43035CE12E5FC4AE8460CB14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
Manifest number:          1958
Signing time:             Sat 13 Jun 2026 01:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:45 +0000
Files and hashes:         1: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl (hash: 26TCQdlfhVq+DKBo0elRjrntZ/6bVOyBhqtZ6bqt1g4=)
                          2: oqgwVvgO4WobvG_o2YvqXL-ZxrA.roa (hash: qgN0ZwFa85gMlSMo8H+ZBEVFv906WUNJ1MUKTtcyf+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:de:2c:43:03:5c:e1:2e:5f:c4:ae:84:60:cb:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
        Validity
            Not Before: Jun 13 01:00:45 2026 GMT
            Not After : Jun 14 01:00:45 2026 GMT
        Subject: CN=fa285e3c425c53ff9dff45b0d7e9e4a50c2b1e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:30:31:2a:b5:82:0d:36:66:2f:19:56:39:78:
                    9f:7e:51:88:58:61:91:c6:62:d7:99:32:ae:83:70:
                    98:af:84:bc:c1:64:b0:a3:bc:ad:ca:ea:63:70:3f:
                    12:cb:bb:f2:77:f3:86:60:31:49:05:5c:02:6e:ed:
                    70:4b:10:31:eb:15:b7:54:7f:60:96:87:45:56:41:
                    d1:0a:67:56:73:e2:f1:65:89:77:41:e3:01:35:07:
                    fe:0a:8e:20:47:fd:87:59:2c:c8:05:bc:30:82:9f:
                    6f:2b:8e:1e:89:f9:86:57:e4:82:01:b4:8f:b1:b6:
                    fa:30:be:15:be:d3:d1:ba:66:fb:93:cc:0d:44:0d:
                    f4:69:f1:9f:25:b2:c0:81:a6:82:db:e5:8c:9f:91:
                    71:dc:e0:5e:19:ae:28:77:19:6a:86:c8:48:d9:67:
                    1b:55:cb:2d:9b:5a:ec:d9:6d:35:11:31:93:c5:b4:
                    e2:19:ce:11:db:ba:e9:f2:2f:60:7c:63:4e:44:a6:
                    49:82:9c:57:38:41:7e:59:12:02:93:ed:86:2e:c9:
                    fb:9f:24:d6:01:9c:f0:b8:e4:c6:4d:d0:71:e3:68:
                    b2:ec:97:54:87:31:75:d7:66:ca:b7:d8:66:23:b3:
                    85:6c:ed:9e:c1:4a:f4:8c:6f:18:3c:b5:58:2a:f3:
                    2f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:28:5E:3C:42:5C:53:FF:9D:FF:45:B0:D7:E9:E4:A5:0C:2B:1E:03
            X509v3 Authority Key Identifier:
                keyid:EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:16:02:af:7b:fe:8d:98:71:8d:08:88:5c:b1:ab:ea:1d:2e:
         46:89:5e:0f:70:23:03:90:d6:28:bb:81:4e:cb:e3:21:e3:fc:
         41:c4:6b:82:80:87:9d:22:de:5a:22:04:6d:e9:92:48:92:9f:
         96:97:8b:d2:41:51:3b:da:09:29:e0:b9:b4:a7:a9:92:58:fb:
         a9:ec:98:94:90:95:e5:53:09:1e:51:86:ee:6d:f8:72:95:32:
         21:55:c4:d7:2d:4c:1b:27:70:f4:b8:84:47:ac:97:cf:29:45:
         19:86:57:69:89:e6:5f:09:c9:0b:80:16:0d:41:e6:92:2d:a3:
         fc:72:7c:e8:25:50:f0:6b:ab:00:c5:9e:4a:71:44:b9:72:8c:
         96:a9:90:4a:c6:b1:9d:f7:0e:85:ef:da:bc:37:40:4d:4c:3f:
         a8:8a:b6:27:34:5b:0c:66:da:9f:c7:54:ac:8a:a1:95:98:7e:
         3d:b3:dc:05:59:47:7b:ff:0e:c8:95:bb:63:eb:f8:a0:39:a7:
         09:13:74:07:22:22:4e:39:c1:32:f4:87:b4:a3:d5:b0:20:4a:
         86:79:77:ea:10:8b:ee:05:fd:7e:aa:ee:1c:7d:30:12:e8:4c:
         21:4f:54:b8:c8:60:77:70:44:88:8f:57:ec:6c:60:a8:97:d1:
         ad:11:b8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:49:47 2026 by rpki-client