Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
File:                     7rkpOOqM96P2CZym1uPlonuJfPA.mft (raw, json)
Hash identifier:          GYEZDDIfvxNpugxNtPB05EsKBhmMMHVp8HoIm5QqTp0=
Subject key identifier:   CF:CB:3B:86:8B:5B:30:42:21:C7:20:D3:C1:A1:91:E7:5C:B8:F2:13
Authority key identifier: EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
Certificate issuer:       /CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Certificate serial:       019EBD34C54DE809EA8B4C8C8C5B94C14262
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
Manifest number:          0937
Signing time:             Fri 12 Jun 2026 19:00:12 +0000
Manifest this update:     Fri 12 Jun 2026 19:00:12 +0000
Manifest next update:     Sat 13 Jun 2026 19:00:12 +0000
Files and hashes:         1: 7rkpOOqM96P2CZym1uPlonuJfPA.crl (hash: wdeQvABJoAq5EePr7x1BhaVE+9JefR3NoiN/ypKcczw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:34:c5:4d:e8:09:ea:8b:4c:8c:8c:5b:94:c1:42:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
        Validity
            Not Before: Jun 12 19:00:12 2026 GMT
            Not After : Jun 13 19:00:12 2026 GMT
        Subject: CN=cfcb3b868b5b304221c720d3c1a191e75cb8f213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e3:6b:fd:17:42:45:63:2d:41:66:8d:cf:eb:
                    67:c1:86:a3:b0:8b:5b:fc:0d:b7:16:e1:89:47:ef:
                    37:b6:3c:93:54:65:e4:9c:cc:d3:b9:23:21:38:d9:
                    84:c0:a0:6d:27:db:34:43:7d:17:6a:f4:80:07:d2:
                    ee:92:6f:c0:08:bc:9e:22:ad:12:be:95:02:8a:0a:
                    c4:f8:c7:57:5e:3e:22:40:2e:65:51:fa:46:f7:e3:
                    89:dd:b3:a5:6d:64:d9:12:2a:c8:c7:33:c3:59:89:
                    10:43:a6:e6:9a:b1:d4:13:d8:53:3d:c4:9e:f4:bc:
                    3d:71:db:c4:e9:5f:cd:28:66:33:b2:68:bb:41:4c:
                    a1:c0:8b:01:a1:fd:74:92:e4:24:ee:63:06:b2:41:
                    87:db:1d:74:eb:5d:14:83:e8:3a:fb:df:13:b2:f8:
                    43:69:be:84:c6:d9:ce:6d:b7:e1:4c:3d:c6:c6:25:
                    65:f9:18:63:12:38:db:21:06:be:2a:e5:2d:62:d1:
                    d5:a9:66:b2:5a:7c:89:98:87:31:bc:49:db:b5:5d:
                    f0:31:d7:58:19:58:de:74:5f:7d:8a:14:df:e9:39:
                    28:af:4a:73:46:97:85:ac:bf:a9:a2:1e:8c:d5:88:
                    e2:ac:3e:db:44:cc:13:97:cc:75:1e:77:cb:d2:c4:
                    b8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CB:3B:86:8B:5B:30:42:21:C7:20:D3:C1:A1:91:E7:5C:B8:F2:13
            X509v3 Authority Key Identifier:
                keyid:EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:47:a9:30:91:27:aa:e7:f8:04:6f:a1:61:c3:fc:9d:e9:b3:
         da:39:0a:c3:e6:2e:bd:f2:92:8e:c3:71:cf:a2:78:40:de:bb:
         7b:5e:0b:e7:17:8c:a2:ba:3d:e0:e1:ec:d1:a8:22:9e:3b:aa:
         b0:cf:5f:55:fd:9e:05:59:e1:13:db:da:20:f1:90:41:19:c8:
         94:71:bc:3f:a5:eb:5a:bb:8b:19:b7:8f:63:06:00:f1:2a:1c:
         9b:93:ae:cb:e6:87:c7:ad:d0:cf:b4:61:05:22:7d:ba:44:9c:
         6d:e0:1d:67:51:57:3d:3b:c7:88:59:95:df:1d:3c:67:1f:ec:
         2f:38:a6:73:91:73:72:08:4d:9d:cb:9f:7d:60:38:4a:ed:e8:
         3d:1c:ec:56:2e:02:d9:62:c9:79:e7:85:06:13:83:03:dc:65:
         70:9b:93:a1:9c:80:a6:55:59:ee:6b:23:13:ea:b8:cf:cf:b0:
         3d:db:fe:94:12:ae:40:b8:00:bf:ef:f7:55:d4:6a:64:96:fb:
         2f:34:f2:02:c9:5d:25:bb:c1:3c:fd:e8:d3:8c:29:bc:4d:d7:
         6d:27:f6:70:dc:53:cf:75:30:23:1e:c3:e6:be:e0:ea:14:fb:
         1a:09:8e:ed:42:c3:14:37:5a:09:02:18:9f:0b:79:4a:60:3e:
         a6:69:0b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:58:07 2026 by rpki-client