Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File:                     7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier:          gte7aNShsJq6D0XXgTEmNFBL9yfejMgd45XybjBnwS4=
Subject key identifier:   EE:4F:67:E6:4C:AF:14:E8:31:A6:D5:B3:BC:EB:A1:1B:0D:91:A3:B7
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer:       /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial:       019D9B1A0F99E8931A3DFDED912B26F68019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number:          0555
Signing time:             Fri 17 Apr 2026 11:01:09 +0000
Manifest this update:     Fri 17 Apr 2026 11:01:09 +0000
Manifest next update:     Sat 18 Apr 2026 11:01:09 +0000
Files and hashes:         1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: M5cAoOdZWo96RaOmHKhpOrQEVtisdMmAL9ZiDcXgcF8=)
                          2: 9agfB9dVL-Kd6aIq8hf6VJQFr-c.roa (hash: 0rqJmTL+IHF4zuPR+5EuCzywtP32Y0FzvoOjmasnRjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:1a:0f:99:e8:93:1a:3d:fd:ed:91:2b:26:f6:80:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
        Validity
            Not Before: Apr 17 11:01:09 2026 GMT
            Not After : Apr 18 11:01:09 2026 GMT
        Subject: CN=ee4f67e64caf14e831a6d5b3bceba11b0d91a3b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:87:f3:59:02:5f:02:3e:3a:c9:ea:01:27:65:
                    30:90:a2:c5:b3:d3:d1:68:42:92:38:0d:98:6f:3e:
                    d4:73:75:7f:90:b1:de:98:ad:41:ae:49:de:a3:d6:
                    b3:32:df:03:95:1e:38:f4:48:17:cc:04:cb:61:5c:
                    fa:6b:e9:2f:23:27:2d:9e:0e:24:e6:e3:10:56:f3:
                    6b:59:3f:a1:20:cf:1c:62:76:59:c4:7d:f8:c4:a1:
                    af:f6:c1:49:aa:b4:a0:5f:e6:8f:02:b0:38:c2:aa:
                    1b:ab:28:09:f1:c1:4b:79:e9:bc:55:dd:94:c5:a0:
                    2e:f3:7c:12:e5:1f:c4:28:02:d9:cc:a3:e1:e4:05:
                    2b:77:ae:40:53:be:66:66:5e:5d:15:35:b3:33:1d:
                    24:31:bf:41:7a:cd:7e:61:34:99:2e:56:ab:c1:0c:
                    c5:e9:c9:00:9a:42:34:cb:07:c2:65:34:02:e4:ee:
                    2b:35:70:a1:74:24:0e:f0:95:26:42:7f:b1:43:d0:
                    88:34:35:b8:7e:f1:c8:9e:ee:c1:b7:84:c5:e1:84:
                    de:a3:53:ba:16:27:52:bc:a1:1e:33:93:87:9e:90:
                    80:b6:26:3e:ef:c5:d1:e1:81:02:35:20:c8:58:79:
                    ee:bd:fd:8e:93:fc:30:51:63:78:7d:d9:61:74:21:
                    dc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4F:67:E6:4C:AF:14:E8:31:A6:D5:B3:BC:EB:A1:1B:0D:91:A3:B7
            X509v3 Authority Key Identifier:
                keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c8:22:a4:f2:eb:45:a9:55:30:91:ef:6e:b2:d0:57:b6:45:
         c6:51:8b:23:0c:ed:41:b3:f2:48:fb:0e:b5:41:04:27:ef:26:
         17:85:16:69:4b:f7:1f:16:9b:96:ea:59:c1:40:fc:90:88:c8:
         41:9c:9a:e5:ba:b6:a6:d7:54:b5:3e:70:c6:61:ca:a4:13:d4:
         7e:10:f5:c2:61:69:17:1b:9b:0f:85:41:5a:b4:3c:b8:e5:4d:
         9d:82:12:4a:e0:07:4a:d2:f5:c4:9a:5f:64:41:55:a5:89:e0:
         94:40:8f:15:7d:ab:f0:96:c0:46:eb:47:92:ae:c9:c2:da:e2:
         c9:66:68:51:ce:2f:37:81:8c:f6:7b:5a:6a:a1:97:5a:ca:5d:
         37:c9:03:5d:a8:87:df:8b:19:40:9e:c0:b1:9d:8b:02:bb:e8:
         dc:99:ac:d2:db:55:05:54:92:2f:89:85:98:95:71:7a:8a:3f:
         19:10:50:ce:e5:f3:86:f4:4c:7f:15:da:c7:40:22:40:9d:2c:
         c3:d8:ed:09:ff:73:29:8d:46:7c:3f:85:5e:2d:32:ca:54:99:
         ed:2d:75:c1:96:6d:92:39:95:13:3e:40:e6:66:d8:f4:f5:67:
         96:01:b1:08:f9:19:46:02:7f:04:98:a1:b8:71:24:96:86:68:
         d8:b9:42:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:31:13 2026 by rpki-client