Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
File:                     7iUCbllV3N0RFHb5toSdcoGFRps.mft (raw, json)
Hash identifier:          vHSDlPM2iwM3jGRmNhc3QqR4eg2FLkt//oaRKzoqOzc=
Subject key identifier:   D2:30:10:90:CC:A6:8C:76:A6:B8:E6:05:F3:31:A0:C5:2D:52:1C:5F
Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
Certificate issuer:       /CN=ee25026e5955dcdd111476f9b6849d728185469b
Certificate serial:       019D98F48333BF4C5BF2C825846AE28E6D52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
Manifest number:          072F
Signing time:             Fri 17 Apr 2026 01:00:54 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:54 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:54 +0000
Files and hashes:         1: 7iUCbllV3N0RFHb5toSdcoGFRps.crl (hash: THlx93mM0vZ3KTjMEQFALUss7jJk/jCaQpnV6xT3wVY=)
                          2: JU735praQ5D7ZouW4n12dU9bM-4.roa (hash: dXXp6fBpmMfrGgRgIwTGPcESSVbHsTgXLylCNhPpDJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:83:33:bf:4c:5b:f2:c8:25:84:6a:e2:8e:6d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b
        Validity
            Not Before: Apr 17 01:00:54 2026 GMT
            Not After : Apr 18 01:00:54 2026 GMT
        Subject: CN=d2301090cca68c76a6b8e605f331a0c52d521c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:76:75:9e:61:93:05:70:12:6e:81:b4:84:16:
                    ad:fb:d0:4b:df:c7:43:42:53:1f:55:a5:54:9a:a4:
                    7a:67:81:13:f6:32:31:15:75:fc:38:b0:6b:df:43:
                    23:c7:15:9d:62:d2:9a:8b:7e:06:52:6d:f1:7d:d1:
                    1a:41:9b:05:5f:9a:e9:54:ff:9b:ba:f2:d1:b7:af:
                    6f:8c:23:30:0b:49:3b:78:ce:fc:37:ab:2f:34:3a:
                    e7:4c:9d:22:ed:26:a9:e2:ec:2c:76:81:da:e1:db:
                    1d:8a:3e:ef:15:3b:ed:3d:48:24:37:a8:af:13:b2:
                    36:d2:95:77:d8:a7:3b:94:39:9c:08:71:d4:04:15:
                    f4:25:6c:9e:d3:6f:2b:6e:8c:61:83:9e:72:6a:b5:
                    5d:a4:44:d0:c6:c1:2f:bc:56:8e:c2:f2:97:af:0b:
                    76:e3:e7:7c:25:c1:5f:d3:2c:1b:9e:4b:3d:51:bd:
                    64:4e:6d:69:18:c4:ec:bb:d8:25:8a:51:55:16:56:
                    c3:2a:2f:aa:d5:2e:0f:13:d4:d0:ce:2e:ec:98:03:
                    23:b1:ca:18:15:d5:8e:e9:37:ff:39:1a:09:f6:da:
                    86:a9:25:e6:87:60:d3:05:f5:d8:5f:16:6a:c6:c7:
                    1f:52:8d:23:69:00:24:ec:e5:62:17:de:63:a8:7d:
                    76:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:30:10:90:CC:A6:8C:76:A6:B8:E6:05:F3:31:A0:C5:2D:52:1C:5F
            X509v3 Authority Key Identifier:
                keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:fe:c2:c1:9b:5c:83:b6:48:74:14:1b:35:2d:bb:0d:0b:03:
         1a:69:b6:4d:7f:5c:a4:32:63:c1:ef:63:dc:c6:ac:06:9c:f6:
         c3:70:c5:1f:5c:9a:c7:f8:64:a1:f7:08:7e:e2:f9:4c:3f:bc:
         c2:a9:75:57:d2:1b:43:52:39:c8:09:df:07:0c:ee:d5:15:29:
         9c:97:12:e0:36:3d:09:dc:c8:44:de:66:05:a8:ae:0d:1f:28:
         6a:93:a4:fb:99:f4:a7:dc:b8:b6:74:55:41:df:f9:be:07:75:
         2f:6a:e7:eb:b6:fc:30:cf:9f:80:3c:e2:4c:30:ce:11:7d:22:
         5b:bc:2f:1c:03:ad:5c:0a:84:ef:6f:1b:e7:d5:6b:8d:a9:cc:
         de:fa:9a:50:28:c5:8a:1d:2e:2b:64:74:90:1b:f5:b0:b5:75:
         e1:7d:82:5c:ea:e1:ba:3c:38:85:aa:82:30:90:32:68:d5:62:
         a6:d5:61:58:c8:1d:fc:83:96:7c:69:f9:87:5b:4d:ce:db:04:
         9f:7b:7b:a3:cd:c9:7e:ec:4f:84:94:29:b7:1d:c7:c4:ac:7b:
         6f:c9:f9:d4:e7:14:27:8c:02:4b:71:6d:e2:51:71:51:47:f0:
         5d:ba:00:83:df:28:03:52:7c:71:bf:a3:9e:a2:d3:27:87:d9:
         da:16:8c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:33:30 2026 by rpki-client