Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
File:                     7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft (raw, json)
Hash identifier:          e47iIrzGwdNWk9nbL/Hvltcz7GHz0vXG0ZZfG98Rqog=
Subject key identifier:   FB:DD:B2:29:65:9E:09:08:DB:EE:5C:F4:86:CA:6D:22:4D:EE:81:4E
Authority key identifier: EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96
Certificate issuer:       /CN=eff987189da4e38385b0721854feccc3ef466a96
Certificate serial:       019EBDDA74D6DCC519E216D7737EED4172CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
Manifest number:          0FF1
Signing time:             Fri 12 Jun 2026 22:01:11 +0000
Manifest this update:     Fri 12 Jun 2026 22:01:11 +0000
Manifest next update:     Sat 13 Jun 2026 22:01:11 +0000
Files and hashes:         1: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl (hash: lGe1pfkI/jKT7r3hpsg4FRsP2HhxLAAF05LYKO4XdHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:da:74:d6:dc:c5:19:e2:16:d7:73:7e:ed:41:72:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff987189da4e38385b0721854feccc3ef466a96
        Validity
            Not Before: Jun 12 22:01:11 2026 GMT
            Not After : Jun 13 22:01:11 2026 GMT
        Subject: CN=fbddb229659e0908dbee5cf486ca6d224dee814e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c1:a7:ed:0f:0a:cf:06:4a:9e:6c:18:e3:a5:
                    d8:a6:e6:dd:ea:f0:89:fc:92:8b:d2:bb:fa:2d:01:
                    85:4d:80:3f:fe:a2:f7:3f:01:46:83:5d:2c:05:08:
                    04:e7:3c:eb:b8:b6:81:a3:81:bd:89:93:eb:97:cc:
                    2e:3a:2d:17:7c:5b:db:09:c2:cc:5e:99:09:36:2c:
                    91:ec:48:cc:14:aa:64:f5:4a:d7:bf:aa:de:e9:4d:
                    65:98:32:7f:a7:50:7d:79:27:7f:c4:bd:9c:0c:21:
                    34:f6:2b:51:be:51:9c:8e:6a:3d:81:19:0e:98:0e:
                    eb:50:ef:19:41:71:af:e4:96:05:f2:a6:38:f8:10:
                    48:6e:08:c8:22:a5:1c:7f:27:85:20:26:e6:14:7d:
                    52:02:f4:fc:d1:63:b0:eb:30:20:5c:7a:af:62:aa:
                    55:6f:d5:5b:ed:ab:b8:95:da:85:bf:30:0b:72:97:
                    8e:7b:19:48:00:eb:31:8f:d6:e9:2b:3f:49:1a:24:
                    be:ab:2e:61:98:f6:02:19:8d:cc:b2:2b:7f:27:a1:
                    17:79:46:18:f8:68:86:f5:3e:87:ad:bc:a3:1e:cd:
                    d8:10:11:d5:83:4e:85:7f:14:a2:86:64:6c:c8:5d:
                    ad:43:6b:00:dc:c7:85:b2:52:c2:c0:e8:79:49:74:
                    55:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DD:B2:29:65:9E:09:08:DB:EE:5C:F4:86:CA:6D:22:4D:EE:81:4E
            X509v3 Authority Key Identifier:
                keyid:EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:bc:94:de:c0:2b:77:d4:03:2b:c5:6b:47:91:bf:7c:0e:a7:
         b4:5b:a2:11:b6:33:bb:34:f7:2f:68:fb:09:94:f1:da:26:16:
         6b:92:94:ff:de:b7:2c:4b:71:10:01:e9:be:95:15:1f:16:b5:
         e6:4a:9c:2e:f1:aa:ef:54:dd:c3:8b:d5:dc:1f:91:4b:45:2f:
         7c:ba:e9:f5:79:72:7b:30:69:2d:a9:42:0b:3f:72:23:92:d3:
         8b:3b:d9:79:ce:b5:bc:fa:04:ce:ee:d4:09:9d:ae:93:91:44:
         83:9d:79:30:63:8a:b3:a6:24:01:6c:fb:81:b9:bc:67:c3:de:
         88:5c:3d:6b:28:41:26:71:c6:c4:0e:b3:22:be:fd:b0:34:23:
         65:d7:80:b0:93:cc:49:de:74:82:5b:4d:43:54:48:c3:7f:3c:
         93:e3:16:59:43:35:82:e6:fb:52:08:50:62:cf:9f:0a:a4:75:
         8b:27:93:6c:20:59:20:92:a8:be:aa:5e:8c:ef:23:27:4d:31:
         78:07:75:a4:2f:e0:bf:0e:7e:b4:b3:f4:90:6e:aa:a3:84:21:
         e3:51:0f:ba:48:95:42:12:c9:93:f6:d8:a9:61:19:59:01:c9:
         fb:23:04:91:69:b1:8c:93:76:77:da:1f:f8:36:de:ae:4e:9b:
         10:80:d3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:35:01 2026 by rpki-client