Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
File:                     7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft (raw, json)
Hash identifier:          vGb1dmuGFDAzF8z0g2yH2w3ZvsA5f1lZgJRSzck9lXI=
Subject key identifier:   A2:82:59:1B:1D:AB:29:8A:88:1B:39:A4:4E:E8:53:F8:80:43:8E:F2
Authority key identifier: EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D
Certificate issuer:       /CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
Certificate serial:       019EBE7FDF510CEB038EC863EB593BEFCD34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
Manifest number:          09B6
Signing time:             Sat 13 Jun 2026 01:01:51 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:51 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:51 +0000
Files and hashes:         1: 7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl (hash: D9Afz1PTMKzuJtvUV+GSansuE7pkFfrYNK7iW8CYzY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:df:51:0c:eb:03:8e:c8:63:eb:59:3b:ef:cd:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
        Validity
            Not Before: Jun 13 01:01:51 2026 GMT
            Not After : Jun 14 01:01:51 2026 GMT
        Subject: CN=a282591b1dab298a881b39a44ee853f880438ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:86:97:86:4e:eb:ac:98:39:c9:36:6e:44:f0:
                    79:58:e3:95:7b:94:f3:28:9d:0b:6d:3d:9c:88:6b:
                    32:5c:6c:e3:59:b6:9b:ba:55:bf:25:2b:21:cf:2d:
                    74:c5:5b:c4:88:67:55:93:8d:65:da:bb:44:a8:ae:
                    07:13:6a:09:a2:e8:84:fe:c1:e3:e1:8d:92:72:f2:
                    c1:ef:4b:81:66:90:71:a7:dc:60:18:09:ab:0d:32:
                    a1:86:77:ef:18:12:cf:95:81:da:6a:26:33:61:48:
                    79:3a:69:99:cb:56:61:7a:f9:7e:75:91:29:37:92:
                    6e:cb:bc:d6:ab:a5:5d:07:59:09:db:38:ff:b4:1d:
                    44:dd:dd:fb:d7:64:44:ac:14:03:40:55:e4:d8:63:
                    6b:e8:a5:df:9f:07:75:d8:3d:6d:b2:de:bf:fb:03:
                    a3:c7:52:4a:ae:c5:05:95:1a:c0:e4:ad:22:ae:c2:
                    97:1b:fc:d3:b7:06:13:1f:8b:05:63:35:32:13:6f:
                    6c:68:d2:f9:4c:40:8f:b5:06:60:8a:b1:9b:c3:77:
                    01:05:ea:1e:01:c1:c4:bd:f1:66:6c:a9:cd:fb:be:
                    22:d1:3c:d8:f9:5b:f3:df:3b:03:48:e8:84:2f:fe:
                    23:96:e9:b5:a3:a0:78:c6:e4:68:d3:29:e6:f8:89:
                    85:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:82:59:1B:1D:AB:29:8A:88:1B:39:A4:4E:E8:53:F8:80:43:8E:F2
            X509v3 Authority Key Identifier:
                keyid:EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a7:a6:0e:31:64:30:bc:83:70:81:86:fa:c2:45:ab:1f:75:
         7c:c6:5a:10:7d:2c:16:0d:27:a3:0c:ca:4a:b7:52:da:8b:16:
         51:58:a9:2e:c1:d6:9a:0a:a9:90:5b:87:cd:84:fd:85:a0:ac:
         6b:47:6c:b0:a8:0d:24:37:e0:94:25:ca:aa:e6:50:1f:a7:66:
         7f:71:8d:0d:34:81:20:f0:61:cf:8e:00:c0:48:aa:7b:da:8a:
         9e:7a:b0:f3:8a:b1:e3:97:8f:e2:b8:d9:9e:15:05:7a:0b:ca:
         32:99:3e:c4:cb:55:10:36:98:a1:ac:5f:d4:df:de:ac:fb:c4:
         cc:45:1b:d7:c2:b8:aa:5d:16:05:19:d8:6e:29:96:cc:b8:da:
         7d:2e:27:cd:54:65:26:89:ed:4c:0c:be:db:47:ed:0c:3a:b9:
         48:42:ae:bf:78:09:33:bb:68:88:b3:2e:3c:de:08:1e:14:44:
         83:de:1f:4c:19:04:2f:61:16:7a:8b:9d:d3:08:af:67:04:8d:
         f9:81:08:58:56:c9:3c:a2:83:10:c8:96:5a:39:c1:0a:3a:e1:
         7a:6a:09:b8:74:77:82:b9:6c:6b:d2:bb:88:92:39:74:8c:8e:
         2e:8c:6c:e5:14:ae:a0:4c:e8:ff:3e:3f:ec:9f:b2:e9:12:12:
         d7:cc:4f:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+f99RDOsDjshj61k77800MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZWZhOWMyOTUwNmI0ZmNmMTcyOTIxMWE0ZmE3N2MxZjIx
MTQ2OGQwHhcNMjYwNjEzMDEwMTUxWhcNMjYwNjE0MDEwMTUxWjAzMTEwLwYDVQQD
EyhhMjgyNTkxYjFkYWIyOThhODgxYjM5YTQ0ZWU4NTNmODgwNDM4ZWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IaXhk7rrJg5yTZuRPB5WOOVe5Tz
KJ0LbT2ciGsyXGzjWbabulW/JSshzy10xVvEiGdVk41l2rtEqK4HE2oJouiE/sHj
4Y2ScvLB70uBZpBxp9xgGAmrDTKhhnfvGBLPlYHaaiYzYUh5OmmZy1Zhevl+dZEp
N5Juy7zWq6VdB1kJ2zj/tB1E3d3712RErBQDQFXk2GNr6KXfnwd12D1tst6/+wOj
x1JKrsUFlRrA5K0irsKXG/zTtwYTH4sFYzUyE29saNL5TECPtQZgirGbw3cBBeoe
AcHEvfFmbKnN+74i0TzY+Vvz3zsDSOiEL/4jlum1o6B4xuRo0ynm+ImFwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKCWRsdqymKiBs5pE7oU/iAQ47yMB8GA1UdIwQY
MBaAFO7vqcKVBrT88XKSEaT6d8HyEUaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3UtcHdwVUd0UHp4Y3BJUnBQcDN3ZklSUm8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lNDc4MDUtNjliYi00MzU5LWJkMmQt
Y2YzNjA3M2QyZGIwLzEvN3UtcHdwVUd0UHp4Y3BJUnBQcDN3ZklSUm8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9lNDc4MDUtNjliYi00MzU5LWJkMmQtY2YzNjA3M2QyZGIw
LzEvN3UtcHdwVUd0UHp4Y3BJUnBQcDN3ZklSUm8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKemDjFk
MLyDcIGG+sJFqx91fMZaEH0sFg0nowzKSrdS2osWUVipLsHWmgqpkFuHzYT9haCs
a0dssKgNJDfglCXKquZQH6dmf3GNDTSBIPBhz44AwEiqe9qKnnqw84qx45eP4rjZ
nhUFegvKMpk+xMtVEDaYoaxf1N/erPvEzEUb18K4ql0WBRnYbimWzLjafS4nzVRl
JontTAy+20ftDDq5SEKuv3gJM7toiLMuPN4IHhREg94fTBkEL2EWeoud0wivZwSN
+YEIWFbJPKKDEMiWWjnBCjrhemoJuHR3grlsa9K7iJI5dIyOLoxs5RSuoEzo/z4/
7J+y6RIS18xPdg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:01:31 2026 by rpki-client