Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
File:                     7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json)
Hash identifier:          nlAl1qGRPM5K75p7L0RcyXFKUDe8sHbfe0ubJXPEAEc=
Subject key identifier:   28:F4:D7:D6:CC:18:08:BE:4A:A0:A7:87:39:02:FD:03:9E:2F:2D:9E
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Certificate issuer:       /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial:       019EC0DBA0F25372F5E25CC07454D0B7C3B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
Manifest number:          16A5
Signing time:             Sat 13 Jun 2026 12:01:19 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:19 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:19 +0000
Files and hashes:         1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: 0gUVID8ts2v/7HZw0MuUt4sikQuo6aJXogjAm9xqC6w=)
                          2: Qy_dYjktdWTMwKlvlGZGCPvqukk.roa (hash: HyB9pQQ7gH7LCMcZGQN6Qp3fcmCpTOcafmUokwLnbLM=)
                          3: knZABU6A8bvYatZnGIApuHOdxF8.roa (hash: ZG17hdxOoYWoARbjcCtZd2S+SWHd1m7LFGZzi15/I2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:a0:f2:53:72:f5:e2:5c:c0:74:54:d0:b7:c3:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
        Validity
            Not Before: Jun 13 12:01:19 2026 GMT
            Not After : Jun 14 12:01:19 2026 GMT
        Subject: CN=28f4d7d6cc1808be4aa0a7873902fd039e2f2d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:c3:f6:6c:3c:41:b9:6c:81:72:b2:d5:8a:
                    af:84:3f:35:99:82:a8:0e:3c:5c:b2:76:16:8c:d9:
                    8a:dc:f8:97:70:6b:40:27:48:97:05:de:b9:ef:9e:
                    9a:45:0e:53:bd:65:9e:c7:fb:4d:7e:e7:44:20:64:
                    ef:94:f4:e8:47:b0:56:df:17:5e:6e:ef:c0:7b:93:
                    46:88:c2:a3:9a:c6:f5:4b:36:df:07:1a:0c:a3:f3:
                    3a:fe:c4:37:29:dd:c4:5a:a7:4e:78:c6:98:ed:03:
                    53:03:34:23:90:34:7e:22:14:b4:f6:19:d9:71:c2:
                    ea:4d:23:94:f4:4c:26:eb:c3:5c:4c:41:5f:dc:50:
                    cc:25:5d:25:1b:95:d0:29:4b:23:a9:eb:ff:40:38:
                    3f:46:7f:74:38:1e:11:7e:64:e4:2c:2a:ec:2b:2e:
                    de:a8:da:66:13:82:d1:61:83:bf:41:27:2d:57:56:
                    71:7b:00:af:ff:03:d1:b6:86:74:82:68:a7:99:fe:
                    a0:23:a6:1d:ba:3f:79:a5:f4:ec:74:ac:31:b6:2b:
                    e7:83:5b:fc:11:0a:5a:35:fb:80:a1:f4:de:68:d8:
                    d3:1a:6b:4c:09:a0:2d:9f:01:9b:b5:84:6c:95:6a:
                    9d:93:19:a5:17:5e:66:e0:aa:ce:1e:62:ca:db:08:
                    70:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F4:D7:D6:CC:18:08:BE:4A:A0:A7:87:39:02:FD:03:9E:2F:2D:9E
            X509v3 Authority Key Identifier:
                keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:4b:e4:b6:51:82:da:cf:d4:93:ac:30:6c:4b:24:88:2d:c3:
         a6:97:2a:e0:9e:92:ab:e6:0f:a0:f2:cc:91:ac:cc:bb:35:3f:
         53:72:3b:50:6e:bf:a9:10:d3:c1:8a:19:1b:8f:e2:92:2a:f7:
         7d:0d:1d:91:ce:38:fc:4e:30:91:3c:5f:52:7f:20:b0:1c:e9:
         6f:11:a4:9d:22:f5:a8:85:03:50:e5:e8:80:c9:de:6e:15:2f:
         88:b1:fa:b3:1f:9b:7c:66:a5:81:58:a6:a2:1b:2a:06:c8:75:
         da:ec:1b:98:8f:69:5a:48:61:4d:57:03:e3:e2:1e:8c:20:62:
         a2:3c:4a:39:2f:bd:33:ad:17:a7:fd:ba:eb:29:b5:6e:44:d3:
         e2:cf:eb:6c:a0:19:c0:ee:63:e2:19:e9:b2:d3:ea:37:86:3f:
         ee:3e:0c:aa:7d:c0:17:90:1e:d0:78:5c:9e:0e:4b:40:7e:3f:
         a5:70:42:5c:13:04:74:46:31:b6:0a:b3:ee:3d:13:80:3d:f6:
         c1:ab:c4:b3:3d:21:4e:88:b2:d3:bf:51:5e:2b:a6:7c:77:d6:
         b1:27:bd:e1:8b:3a:23:e3:6b:72:35:e5:7a:c5:56:5b:f2:e7:
         79:34:6c:99:ba:a3:fb:81:50:d1:a1:5d:69:86:0f:2b:33:4b:
         98:f3:ae:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:59:38 2026 by rpki-client