Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
File:                     7gc50FKNy0_OV40R9-w0sON0Us8.mft (raw, json)
Hash identifier:          Ny7aiYDL33cenh/JF3gnVoOlOD6GCHqLAU9zc9qCyO0=
Subject key identifier:   4F:2A:63:96:7A:BA:95:57:B1:76:65:6D:7D:23:BF:AD:71:F1:E2:DD
Authority key identifier: EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
Certificate issuer:       /CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Certificate serial:       019EBFC873B4E0A6F53119BD0321C3E34528
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
Manifest number:          15A8
Signing time:             Sat 13 Jun 2026 07:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:45 +0000
Files and hashes:         1: 7gc50FKNy0_OV40R9-w0sON0Us8.crl (hash: y0CT1nSmbgtp09b+mya4mxlhpabYokkKzrGxVu+2ohc=)
                          2: JcR3YDi06JT6Wl_eQYsoL_-4XeY.roa (hash: jOukTvc7ghec56xAJX59+DDpg3Q2klioM1BU5lwJY5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:73:b4:e0:a6:f5:31:19:bd:03:21:c3:e3:45:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
        Validity
            Not Before: Jun 13 07:00:45 2026 GMT
            Not After : Jun 14 07:00:45 2026 GMT
        Subject: CN=4f2a63967aba9557b176656d7d23bfad71f1e2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ba:5e:c6:cc:69:1a:e5:ad:b7:32:cf:c6:6e:
                    20:bf:ac:41:19:29:5b:80:ff:51:9c:13:13:a1:ac:
                    4b:cf:ca:25:38:d7:2f:45:e2:d2:b5:69:1c:46:d7:
                    b2:04:ef:71:d7:fe:fa:19:90:7e:bb:7b:54:23:33:
                    d3:99:99:d4:ea:8c:5e:41:84:f3:a7:80:49:c4:6a:
                    c6:af:21:1c:45:ae:18:fa:b7:07:34:8e:40:46:c7:
                    3f:84:84:11:ed:0c:3c:cd:da:5b:c3:c6:4b:ff:90:
                    bc:f6:ec:75:d1:52:c8:8d:d8:48:82:ea:c6:95:f3:
                    e8:ad:58:7b:27:80:5b:e8:81:04:da:17:92:c6:ab:
                    1b:d8:07:81:17:8b:9f:19:5d:84:5c:76:41:6b:99:
                    f8:94:f9:44:a1:c7:1b:f1:9e:bd:b3:9c:49:ab:78:
                    68:65:a8:68:35:08:fc:e5:fe:25:a8:94:dc:ad:1d:
                    2e:ec:a9:df:31:58:c8:66:18:65:bf:ad:d7:67:d7:
                    68:ac:ca:aa:88:0a:03:21:53:5f:29:2e:05:53:0c:
                    e8:00:e7:57:3d:39:11:56:32:ff:e7:06:53:b6:8a:
                    ae:97:97:aa:45:5a:d5:ca:df:f2:79:9d:2f:68:82:
                    88:2b:dc:5e:ed:59:40:11:2f:3e:56:f9:0f:63:a9:
                    17:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2A:63:96:7A:BA:95:57:B1:76:65:6D:7D:23:BF:AD:71:F1:E2:DD
            X509v3 Authority Key Identifier:
                keyid:EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:90:55:ae:a5:38:d8:85:43:8c:e9:38:8b:80:91:e8:a4:81:
         9c:ef:38:f0:8b:92:16:ed:1a:3e:6d:c8:23:38:b6:37:57:e5:
         28:1f:f7:cb:30:40:a6:42:fc:a9:83:d2:93:bc:25:85:80:1a:
         ed:5d:6e:2c:c4:4f:94:0d:d3:c4:63:fc:a2:b7:dd:7c:42:9a:
         32:95:e7:86:b6:7c:c5:0e:0b:58:aa:36:e3:5a:2b:55:33:01:
         76:ad:b1:32:97:98:b8:cd:e8:c9:d3:79:07:f9:29:b3:6c:a6:
         60:64:40:14:f0:36:df:4d:bf:95:35:5c:23:98:20:d6:d3:d6:
         e7:df:d6:b6:8e:b6:8e:0d:5b:02:72:25:88:31:bb:b7:81:7b:
         5c:95:e3:27:7e:8f:94:ad:52:72:16:cc:a1:3e:12:01:f9:8f:
         71:91:6e:73:e0:27:57:fd:56:5b:17:b0:19:1e:b4:ee:67:1a:
         7d:64:25:60:0c:85:6b:93:b9:f5:ed:81:48:10:fb:6f:31:2e:
         57:71:11:17:79:24:28:c4:0a:a9:3c:a2:7e:9b:ca:7e:15:b6:
         88:ae:b4:c4:25:81:62:18:a7:01:2a:4a:79:1d:61:98:74:86:
         02:f3:85:c2:9e:ed:ad:90:a9:6c:35:29:f4:4c:76:71:a0:a7:
         22:42:73:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:02:57 2026 by rpki-client