Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
File:                     7giC55F0FC1OVM0R9xwVum45chM.mft (raw, json)
Hash identifier:          BCkCq47xFJfNq8JkvRouh9QVZW8c5Qf9QoIEmUNhI+U=
Subject key identifier:   02:03:E0:4C:27:E5:81:79:E4:65:4C:B1:6F:CB:67:FF:C6:21:01:59
Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
Certificate issuer:       /CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Certificate serial:       019EBEED3EABA368CBC8A85E5FABA814D657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
Manifest number:          1026
Signing time:             Sat 13 Jun 2026 03:01:19 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:19 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:19 +0000
Files and hashes:         1: 7giC55F0FC1OVM0R9xwVum45chM.crl (hash: qXj9dUMrz6cv3lFzmgSJ+t5HQVDRjn0WLun8ezODSPQ=)
                          2: rkOQVmNrUrdY7_BGJo06hjnXKUQ.roa (hash: KQFoNA+jPIAj7lXy7/IWWZc0S9NISU/38W2iXUYI9HI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:3e:ab:a3:68:cb:c8:a8:5e:5f:ab:a8:14:d6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213
        Validity
            Not Before: Jun 13 03:01:19 2026 GMT
            Not After : Jun 14 03:01:19 2026 GMT
        Subject: CN=0203e04c27e58179e4654cb16fcb67ffc6210159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2a:d7:72:2a:96:d7:81:c1:10:6d:aa:2c:0a:
                    d4:db:b5:94:9c:9a:18:7c:33:bc:f8:c8:df:f2:b5:
                    33:92:28:d6:92:4d:55:51:6b:b7:89:46:14:7b:8f:
                    d7:ad:fc:0e:b0:39:9f:1d:2b:8b:0a:71:f3:12:01:
                    77:a5:de:6d:6a:33:e2:f2:22:69:1a:f5:dd:0e:03:
                    2d:cc:31:28:31:be:a6:31:df:71:31:54:38:2d:9f:
                    5c:a5:9b:b2:28:ea:c2:5f:38:ea:cb:1c:0e:9d:23:
                    51:03:6f:17:5b:b5:d3:df:89:c3:3e:67:aa:01:ce:
                    70:b7:a5:3d:2d:cb:95:5b:c8:07:52:05:ba:c8:e0:
                    c5:03:70:4e:08:6d:9d:2d:5c:80:cd:5a:da:04:2e:
                    4f:2f:c0:79:1c:61:8f:55:96:7c:c1:f4:26:97:4c:
                    76:64:7e:64:f9:c4:16:ce:22:c9:01:b3:32:40:c0:
                    be:b9:aa:28:1d:2e:1a:6e:b7:ab:e0:31:76:70:f8:
                    78:e9:fe:ee:1f:b3:bd:61:15:cf:3a:63:f7:4d:3b:
                    82:36:2f:10:e8:e4:3b:ad:6d:7d:63:3d:03:73:ff:
                    5e:a4:94:37:e1:2a:90:b6:2d:8f:5b:a4:90:aa:ec:
                    e3:e5:ac:c2:d3:87:14:26:f3:66:a7:2c:4b:f0:c3:
                    02:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:03:E0:4C:27:E5:81:79:E4:65:4C:B1:6F:CB:67:FF:C6:21:01:59
            X509v3 Authority Key Identifier:
                keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:3c:57:68:61:f6:c9:ae:8e:c7:ae:f7:df:bc:3d:6d:65:94:
         06:c3:50:c2:c4:fd:a5:b6:9d:31:bc:11:18:78:3f:7e:a8:28:
         25:fc:9f:98:77:44:da:c5:b0:2c:11:57:15:fa:7c:4b:2b:01:
         39:8b:dd:d5:30:18:c6:7d:a2:69:e8:97:fd:e9:6b:a0:9f:bf:
         05:27:d4:77:11:4f:af:2b:9b:66:ce:ba:37:6b:96:59:fa:ae:
         fa:4e:da:1e:67:bb:ae:79:fe:2e:ee:56:d0:66:40:cd:7d:a9:
         84:27:78:a1:c5:7a:f6:37:4d:16:40:94:e2:dd:05:f8:98:df:
         31:22:7d:3e:05:0b:df:2f:18:e8:27:70:7e:70:cb:eb:26:9e:
         f6:fd:17:9e:a7:0e:e7:3e:78:d9:57:16:11:75:52:11:76:b3:
         b2:c7:bf:3e:c5:30:1c:19:7b:a8:95:16:b9:d8:a4:0c:e7:99:
         43:a5:16:52:94:10:34:6f:f0:3d:9a:a4:a6:2a:d7:5a:f3:f1:
         60:4d:de:c8:08:b6:34:0b:58:e4:18:87:68:40:0f:cc:8b:b4:
         a3:04:89:fe:9e:51:d7:9f:5c:9f:21:07:18:c2:ed:4a:b0:4d:
         f8:24:47:8d:7d:84:dc:b1:58:b1:b9:28:1a:c0:5c:97:67:9a:
         0a:39:03:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:57:30 2026 by rpki-client