Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
File:                     7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft (raw, json)
Hash identifier:          ri7WZoCpBdz/N3gph+ONdMoT1AMUOjEHNOuQBsr5Kaw=
Subject key identifier:   E2:F0:CA:DA:1A:6C:1F:88:F6:7C:23:0D:4D:9A:B0:31:56:9D:F9:FD
Authority key identifier: EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
Certificate issuer:       /CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Certificate serial:       019EBEEC562240931530C4081655544091BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
Manifest number:          10C8
Signing time:             Sat 13 Jun 2026 03:00:20 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:20 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:20 +0000
Files and hashes:         1: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl (hash: guQerW9xy1n1MYgEAmjNOIn0blPfukkYR4GCL1z9g44=)
                          2: MF5bEoN5sg-nawNjAIcgKbPLo2w.roa (hash: Eoby9ocfXIo2ysG9Id22HAzaklocSsTXx7pabi0Mev4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:56:22:40:93:15:30:c4:08:16:55:54:40:91:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
        Validity
            Not Before: Jun 13 03:00:20 2026 GMT
            Not After : Jun 14 03:00:20 2026 GMT
        Subject: CN=e2f0cada1a6c1f88f67c230d4d9ab031569df9fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:05:f3:fa:12:1e:47:46:20:9a:f9:f0:e0:8d:
                    f6:d6:3f:e5:bb:cd:70:07:7f:ac:8f:19:3f:64:14:
                    55:05:67:50:9d:2c:7d:27:1c:d8:e4:d0:2a:8a:8c:
                    31:b1:a3:ac:28:4e:ce:79:98:b1:31:bb:30:e0:e6:
                    dc:33:cb:f5:ba:0a:69:6b:94:32:7b:24:7d:63:b6:
                    a9:dc:37:92:48:9b:6a:13:61:76:27:29:22:b1:4f:
                    98:9e:b2:68:29:b3:2a:38:56:8c:f4:ba:9c:35:4f:
                    27:cf:31:54:86:40:c0:af:5b:1a:70:f5:e8:ee:5b:
                    b7:c2:40:14:8b:8c:9c:6a:2c:10:55:a8:9a:f6:08:
                    f3:a0:e8:6b:e4:fa:48:f6:57:af:5c:01:10:1d:d9:
                    14:11:90:7d:20:b2:5b:a9:0b:36:10:cf:b0:cf:77:
                    be:35:b1:ed:b5:7d:7e:88:2b:c1:85:3a:37:c0:95:
                    aa:c1:4f:c5:df:17:2b:a7:ac:78:f9:8b:44:11:52:
                    c7:ba:d6:0e:da:66:e8:64:d0:80:49:66:2c:a1:6a:
                    d6:a5:cf:26:8f:ed:04:b7:44:0d:a9:5b:a9:0f:9c:
                    c2:cf:ac:36:f5:42:5a:8b:27:8e:96:ab:a6:a0:ed:
                    1c:05:c4:41:62:8c:f6:63:10:8d:2b:73:c7:4d:69:
                    a7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F0:CA:DA:1A:6C:1F:88:F6:7C:23:0D:4D:9A:B0:31:56:9D:F9:FD
            X509v3 Authority Key Identifier:
                keyid:EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:fb:6d:4e:d1:f6:71:04:ee:0e:d1:b1:0f:ff:81:46:e4:5f:
         0d:e6:6f:0b:18:96:fe:dc:09:56:18:36:3b:f9:a8:c7:3c:b4:
         3c:93:af:66:f9:39:98:6c:5b:70:fc:ba:65:1b:9c:b4:f8:02:
         60:fe:6d:dd:76:2f:2f:93:c1:83:1e:a2:52:21:4a:b4:7b:df:
         64:71:6b:fc:e3:92:fe:1e:dd:be:c7:f5:a3:c5:ef:b9:87:ca:
         96:8e:59:8b:50:d7:23:3f:7e:f4:27:79:b1:47:d0:3f:1c:86:
         a2:fc:57:08:e3:19:07:3e:ee:f6:19:57:90:7e:f8:f6:e9:19:
         a3:d2:ac:12:a8:1b:91:df:fd:d3:a7:a7:f7:eb:57:59:d6:d7:
         2f:39:3f:e6:18:0d:d1:22:e7:cf:26:af:37:bc:4c:50:40:80:
         3a:b1:96:db:df:ec:3c:78:0b:fb:58:7a:c0:49:2d:1d:5e:b7:
         4b:53:3e:cb:fa:e1:8a:31:15:22:7c:47:f7:09:40:12:b0:3a:
         6b:d2:26:c3:8f:8d:0d:b0:af:5a:13:a0:6e:a3:a3:08:ee:cc:
         34:f2:37:58:8a:71:c6:0e:ed:f0:8b:31:47:77:6b:e9:33:c9:
         9f:4e:eb:3f:b9:4b:61:1e:eb:8d:9d:7c:e0:3b:9d:fb:62:dc:
         f1:b8:d4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:09:11 2026 by rpki-client