Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
File:                     7dUb8eKlMAC8IwYFYPLMCznUlu8.mft (raw, json)
Hash identifier:          cdPl8+qPs0UAmhveGuODndPv0iwlNkbEZjcDnBlF60g=
Subject key identifier:   99:B4:D0:37:C0:B8:93:8C:87:DA:A6:A1:37:F0:6E:56:C2:11:A5:13
Authority key identifier: ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
Certificate issuer:       /CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Certificate serial:       019EBE7EB38C54157E9ADE093016122DFF32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
Manifest number:          1957
Signing time:             Sat 13 Jun 2026 01:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:34 +0000
Files and hashes:         1: 7dUb8eKlMAC8IwYFYPLMCznUlu8.crl (hash: zJrh9VMXhmmfYD3bRT+eKwpZ5gcIT42DeS1IX+0cHJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:b3:8c:54:15:7e:9a:de:09:30:16:12:2d:ff:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
        Validity
            Not Before: Jun 13 01:00:34 2026 GMT
            Not After : Jun 14 01:00:34 2026 GMT
        Subject: CN=99b4d037c0b8938c87daa6a137f06e56c211a513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ca:75:20:75:60:07:a2:f0:c1:f0:93:8e:62:
                    8b:0d:e2:af:7a:ff:bc:60:fe:d8:53:c1:60:43:b4:
                    f9:dd:8c:a3:2f:c1:1f:00:b7:fa:32:5a:ef:84:fd:
                    ce:3e:51:1d:18:a4:ed:02:9a:8b:67:6a:c1:d4:a0:
                    e6:94:55:6f:c3:1f:58:6a:fd:11:93:26:fa:74:d5:
                    fa:c7:d7:6b:8c:dd:7d:1b:9a:e7:5d:b8:a3:54:3c:
                    37:a6:e8:c5:d7:43:fb:29:2a:cc:75:b2:fe:11:dc:
                    fa:94:46:25:64:7e:36:84:40:97:2d:f8:9b:2f:e6:
                    30:0f:98:3c:ff:1e:d1:7f:ec:a8:bf:e0:ba:8e:7d:
                    71:ec:5a:20:2c:8f:82:e3:cd:0e:3b:e2:83:eb:47:
                    fb:da:97:cd:3f:d9:b6:56:35:56:3c:3f:ea:b4:a8:
                    f8:6a:8e:9b:ed:65:3b:bd:0d:90:87:12:c2:26:4c:
                    db:a4:61:91:18:bf:a3:41:c6:66:37:84:a8:88:03:
                    62:26:d0:06:5d:0a:c2:49:55:4d:3e:cc:41:7f:69:
                    c8:20:78:ed:7a:b2:8d:f1:a0:dd:9d:dd:0a:40:ae:
                    a3:ad:54:d2:fa:86:f8:b5:e4:be:09:ca:43:7f:41:
                    7d:94:53:b2:af:33:ad:f5:bf:d6:46:43:28:30:0e:
                    47:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B4:D0:37:C0:B8:93:8C:87:DA:A6:A1:37:F0:6E:56:C2:11:A5:13
            X509v3 Authority Key Identifier:
                keyid:ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:0c:b0:7f:82:f5:4b:44:b9:c3:d8:a6:54:fa:05:59:64:7a:
         00:e6:7b:7e:ec:ed:d9:0a:c4:83:06:35:e4:3e:c0:02:ee:f4:
         17:e7:2b:eb:89:3b:d0:0a:31:21:41:f2:96:e4:d6:d0:07:22:
         66:a9:ca:fb:24:cd:ba:6e:7c:83:df:f2:51:4c:50:be:91:21:
         22:2a:ad:c5:dc:8f:e9:87:26:56:aa:f1:e9:e1:70:c1:b4:1d:
         a9:93:ba:ff:21:da:6e:9e:f4:99:0e:83:50:14:70:72:10:4c:
         c5:03:38:21:ad:17:81:b3:27:8c:6a:26:fa:8d:7d:7d:13:b7:
         75:46:2b:ed:f8:fa:f0:53:e1:61:fe:6d:62:f6:22:6c:eb:0c:
         20:f9:bc:71:da:90:3f:31:5f:77:36:34:06:a0:5b:f1:c8:ce:
         2c:2c:63:9f:80:b8:d3:b8:9a:f5:b2:5b:d9:d8:58:fd:53:07:
         a9:88:9a:c3:15:d3:7b:0b:b2:41:1b:c7:1d:7e:70:c8:af:e6:
         5c:17:1a:66:dc:75:82:db:6e:3f:48:e8:99:85:ac:4a:d4:db:
         f8:0b:ac:3d:29:bb:f0:15:58:38:f0:13:de:fa:d1:ce:17:1f:
         0c:db:df:48:79:b8:7e:33:28:e9:d6:cc:d5:03:7d:6f:f2:74:
         1f:8c:68:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:02 2026 by rpki-client