Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
File:                     7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json)
Hash identifier:          fva1GlkhR0RjUXXJP7Q7JVPL9M+B3dqXopzJgGhteUs=
Subject key identifier:   23:22:4E:B5:AD:FB:C2:DA:BF:F1:C8:2B:F4:62:D6:83:FA:46:75:52
Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
Certificate issuer:       /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Certificate serial:       019EBEED1FD8796B339DA37AC3737A6487AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
Manifest number:          0DDB
Signing time:             Sat 13 Jun 2026 03:01:11 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:11 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:11 +0000
Files and hashes:         1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: e6SGBpEueQmIcVpyswGA0l6OBQT8+mC5Bfzddk6Yqns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:1f:d8:79:6b:33:9d:a3:7a:c3:73:7a:64:87:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
        Validity
            Not Before: Jun 13 03:01:11 2026 GMT
            Not After : Jun 14 03:01:11 2026 GMT
        Subject: CN=23224eb5adfbc2dabff1c82bf462d683fa467552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:5d:27:1b:e4:a7:39:54:55:ec:e8:9b:17:
                    b3:18:3a:3f:6c:88:bc:e1:5f:6f:f4:95:16:d5:8c:
                    83:28:5e:37:f7:36:6e:d6:56:91:68:e7:56:86:0b:
                    5c:d5:84:24:7d:1a:51:2c:d8:dd:7b:37:93:e8:b5:
                    ab:55:73:d8:f8:1c:a9:e6:7f:f1:4d:c3:51:84:ce:
                    24:fc:9a:81:6c:cd:d6:61:2a:8c:ca:92:4f:80:4a:
                    ca:bc:c4:7d:24:55:83:a2:61:39:4a:97:fc:34:ae:
                    9c:c1:0d:c0:85:4c:04:11:53:54:9b:af:38:88:12:
                    39:fa:c7:18:08:58:36:dd:07:c2:57:c5:b7:5f:52:
                    af:81:a6:fb:ac:f8:86:4d:94:1a:6f:3e:7f:a8:35:
                    f3:7c:99:49:07:0d:a4:67:a4:3e:38:b5:c3:79:33:
                    d7:87:76:eb:38:a5:0d:a8:be:4e:6a:36:8e:04:c5:
                    e2:3d:25:03:ab:38:7b:8b:ed:5e:91:f6:6b:00:cc:
                    0c:2e:bd:24:3f:6a:e6:a0:e7:34:dd:55:99:20:1d:
                    39:ff:29:50:f4:0f:96:86:c8:6c:80:59:ac:17:c6:
                    04:ee:05:e5:17:11:40:01:a4:86:d3:91:cd:2d:98:
                    a0:ce:92:66:72:1f:4c:94:fd:36:0f:54:19:96:00:
                    f2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:22:4E:B5:AD:FB:C2:DA:BF:F1:C8:2B:F4:62:D6:83:FA:46:75:52
            X509v3 Authority Key Identifier:
                keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:09:73:a5:b4:95:bd:dc:f1:2e:37:61:45:24:6f:f2:17:f5:
         ad:5c:02:55:b1:fa:11:e5:0b:f3:44:24:75:f0:ef:98:43:31:
         78:bf:fc:c6:0d:3f:af:d6:cd:e7:3a:d5:9b:23:1d:e8:43:32:
         c6:19:19:17:a1:fc:f0:3e:3c:3f:4f:f9:73:69:59:6a:bd:f3:
         38:35:8a:4d:8f:2f:aa:c4:5f:78:fb:94:e0:f2:ff:f2:8b:7d:
         0f:f7:70:9d:a1:e6:62:c5:8d:e7:45:e9:df:af:c3:a4:64:13:
         bc:70:3d:4e:c3:c4:a5:cf:e8:d5:12:52:b9:93:c9:0b:83:aa:
         a3:db:8e:1a:4e:73:4d:a4:e6:6a:73:17:8f:62:c0:3f:76:37:
         20:62:b5:c9:45:68:e6:9d:c0:57:a7:7f:22:f4:61:20:e1:d8:
         eb:1e:a9:77:f8:94:ca:3d:34:25:b9:2f:26:25:5d:2e:ff:33:
         df:e3:8c:04:33:2a:25:73:60:76:27:d1:f5:ce:6e:27:3d:2a:
         05:77:11:5e:ee:ac:2d:03:66:63:54:f4:56:2e:e8:15:7c:30:
         f2:14:9c:17:fa:56:e8:25:9d:93:c9:46:86:d2:cd:a9:37:9c:
         69:9c:d8:5f:cf:43:68:90:74:0c:72:e1:15:5e:ef:2e:1f:78:
         19:49:5b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:18:24 2026 by rpki-client