Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
File:                     7jd-2foR7BmVVVl2LeBHpabrFKg.mft (raw, json)
Hash identifier:          J75aNYcQVhAsp1xGQQC9nVxrFV66wtFXhu0gbxj3XLM=
Subject key identifier:   BA:78:B0:B6:42:0F:01:90:B0:9B:9B:D0:7C:56:A0:26:82:EA:AA:81
Authority key identifier: EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
Certificate issuer:       /CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Certificate serial:       019DA4539C5EC0F6A77865A0BBF3185AA273
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
Manifest number:          0E60
Signing time:             Sun 19 Apr 2026 06:00:36 +0000
Manifest this update:     Sun 19 Apr 2026 06:00:36 +0000
Manifest next update:     Mon 20 Apr 2026 06:00:36 +0000
Files and hashes:         1: 7jd-2foR7BmVVVl2LeBHpabrFKg.crl (hash: jOh7iryCjDkz4TfhYnDyPGGtuzZmXwK5zhqAwB2eoz8=)
                          2: j6vNoMCJY2rJNTcFiFrK6BxceW0.roa (hash: Qbby+Zxos/Xwy+CO76y4SUXqNg4YubZrm7ece+VByCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:53:9c:5e:c0:f6:a7:78:65:a0:bb:f3:18:5a:a2:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
        Validity
            Not Before: Apr 19 06:00:36 2026 GMT
            Not After : Apr 20 06:00:36 2026 GMT
        Subject: CN=ba78b0b6420f0190b09b9bd07c56a02682eaaa81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5e:97:92:0d:c2:6c:07:c7:2c:6f:b9:83:5e:
                    95:88:19:92:d2:11:89:de:85:b0:76:ad:25:8f:97:
                    ab:dc:6a:24:81:b5:51:22:e1:90:af:ed:79:7a:76:
                    f4:b7:d4:d5:b3:f1:e2:e1:bd:b2:61:66:11:18:80:
                    ff:83:53:2a:d8:13:2e:bd:b8:f6:ae:65:cc:63:ea:
                    09:43:27:de:96:86:cc:18:14:0c:8b:38:e3:0a:e2:
                    71:b0:4f:d5:8c:74:c1:b2:9c:d3:8c:e9:ea:73:a3:
                    86:b1:22:e5:84:ed:3d:3a:b5:d4:89:af:11:93:3e:
                    b6:f1:a8:11:ca:5b:42:12:0e:a2:dc:e5:0d:29:aa:
                    1a:81:b1:c4:88:94:1b:fa:64:07:ca:ce:47:86:0e:
                    48:2e:dd:c3:4f:5a:c9:d6:10:36:b1:10:0c:09:3e:
                    90:45:a0:c5:ac:50:90:1b:cf:0a:85:f5:82:24:ec:
                    26:01:f3:3f:81:e9:a3:41:0c:50:3d:c2:c5:28:68:
                    5d:00:87:54:33:0f:9f:c1:9a:27:36:e7:e3:69:6a:
                    22:4c:48:c7:17:ed:3e:b0:12:98:72:bd:45:e1:ff:
                    20:90:1a:20:dc:91:c9:8d:03:02:97:0a:a3:08:2b:
                    c0:b3:22:56:10:9f:c0:3f:da:88:a0:28:41:a9:e1:
                    bb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:78:B0:B6:42:0F:01:90:B0:9B:9B:D0:7C:56:A0:26:82:EA:AA:81
            X509v3 Authority Key Identifier:
                keyid:EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b2:46:7c:7c:11:5f:3e:8e:dd:d3:b1:48:65:20:81:86:e3:
         ad:09:e8:98:53:15:05:75:df:ab:34:be:2c:e7:1a:db:a5:76:
         3e:d0:2f:90:1f:0d:11:ea:50:d5:32:64:99:42:52:3a:46:1e:
         a2:34:52:90:09:65:66:d2:c9:3d:aa:ba:7d:c9:80:0c:9f:19:
         89:e8:81:c0:09:51:86:3a:82:1c:9c:b5:6c:c8:1e:5d:d1:44:
         ed:a1:c6:5c:b5:2f:28:cf:1a:9a:90:d1:41:ff:c3:a8:7b:fc:
         d1:cf:e6:85:2f:6c:f0:9e:c2:6a:a1:5b:03:44:07:bf:ae:4e:
         8d:97:43:2c:51:24:51:a7:52:bd:ad:58:b2:3d:bf:6c:57:d4:
         ae:1e:b6:c8:6e:f7:4e:5b:1d:97:1f:48:5a:d7:cb:4d:fc:36:
         1f:9c:94:eb:02:05:92:ec:26:c0:27:85:0d:a9:f5:42:6c:98:
         6a:93:2c:f6:96:75:88:0c:08:d2:09:ac:f0:d5:59:cb:12:ef:
         e7:64:34:93:51:3d:9e:4b:42:e1:bb:de:1d:e1:04:da:4a:01:
         f1:13:34:4a:e6:d1:c9:d2:03:f0:5e:d1:08:04:4b:d9:ea:8a:
         15:3d:6c:ad:0c:68:b9:2f:88:40:c9:7c:ea:ea:8b:16:f6:68:
         0a:8e:23:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU5xewPaneGWgu/MYWqJzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzc3ZWQ5ZmExMWVjMTk5NTU1NTk3NjJkZTA0N2E1YTZl
YjE0YTgwHhcNMjYwNDE5MDYwMDM2WhcNMjYwNDIwMDYwMDM2WjAzMTEwLwYDVQQD
EyhiYTc4YjBiNjQyMGYwMTkwYjA5YjliZDA3YzU2YTAyNjgyZWFhYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl6Xkg3CbAfHLG+5g16ViBmS0hGJ
3oWwdq0lj5er3GokgbVRIuGQr+15enb0t9TVs/Hi4b2yYWYRGID/g1Mq2BMuvbj2
rmXMY+oJQyfelobMGBQMizjjCuJxsE/VjHTBspzTjOnqc6OGsSLlhO09OrXUia8R
kz628agRyltCEg6i3OUNKaoagbHEiJQb+mQHys5Hhg5ILt3DT1rJ1hA2sRAMCT6Q
RaDFrFCQG88KhfWCJOwmAfM/gemjQQxQPcLFKGhdAIdUMw+fwZonNufjaWoiTEjH
F+0+sBKYcr1F4f8gkBog3JHJjQMClwqjCCvAsyJWEJ/AP9qIoChBqeG7IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLp4sLZCDwGQsJub0HxWoCaC6qqBMB8GA1UdIwQY
MBaAFO43ftn6EewZlVVZdi3gR6Wm6xSoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2pkLTJmb1I3Qm1WVlZsMkxlQkhwYWJyRktnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjY4OTYtZDczNC00YjlhLTljMzMt
OWU3MWNiZDQyMTdiLzEvN2pkLTJmb1I3Qm1WVlZsMkxlQkhwYWJyRktnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wMjY4OTYtZDczNC00YjlhLTljMzMtOWU3MWNiZDQyMTdi
LzEvN2pkLTJmb1I3Qm1WVlZsMkxlQkhwYWJyRktnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7JGfHwR
Xz6O3dOxSGUggYbjrQnomFMVBXXfqzS+LOca26V2PtAvkB8NEepQ1TJkmUJSOkYe
ojRSkAllZtLJPaq6fcmADJ8ZieiBwAlRhjqCHJy1bMgeXdFE7aHGXLUvKM8ampDR
Qf/DqHv80c/mhS9s8J7CaqFbA0QHv65OjZdDLFEkUadSva1Ysj2/bFfUrh62yG73
Tlsdlx9IWtfLTfw2H5yU6wIFkuwmwCeFDan1QmyYapMs9pZ1iAwI0gms8NVZyxLv
52Q0k1E9nktC4bveHeEE2koB8RM0SubRydID8F7RCARL2eqKFT1srQxouS+IQMl8
6uqLFvZoCo4jjQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:36 2026 by rpki-client