Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
File:                     7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft (raw, json)
Hash identifier:          2Wa5lLKp3e6zhesRoaW1ehZK8TBZr2PapMSbSXQH0Dw=
Subject key identifier:   49:24:4F:88:BC:1A:FD:E3:D1:36:87:D2:E8:F2:99:1B:6D:CA:B4:35
Authority key identifier: EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
Certificate issuer:       /CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Certificate serial:       019EC224F6B5BC9920B862BBADC992CB436E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
Manifest number:          17C5
Signing time:             Sat 13 Jun 2026 18:01:02 +0000
Manifest this update:     Sat 13 Jun 2026 18:01:02 +0000
Manifest next update:     Sun 14 Jun 2026 18:01:02 +0000
Files and hashes:         1: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl (hash: f7LekyuotbS3iM9y7MTM0OFrnLpLWZ14zffb3Rnrlcw=)
                          2: JKtuYAZj6V_iBv09WZvX1K5boYU.roa (hash: cKfPg8sNS79bgJa5PrvUDPTVTEFYtl+oJ3wNQ/Dq8wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:f6:b5:bc:99:20:b8:62:bb:ad:c9:92:cb:43:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
        Validity
            Not Before: Jun 13 18:01:02 2026 GMT
            Not After : Jun 14 18:01:02 2026 GMT
        Subject: CN=49244f88bc1afde3d13687d2e8f2991b6dcab435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:41:66:93:58:91:40:5e:8f:da:79:a5:0a:69:
                    b8:ca:a5:18:24:1f:9b:5d:5a:86:cb:86:58:d8:7f:
                    d6:9e:2b:20:ec:0b:4d:2a:b1:c6:9c:2e:d5:e3:d8:
                    d3:92:e8:2c:33:39:07:e1:1a:f6:93:6d:04:2a:9a:
                    83:cd:10:ab:d2:8d:30:9b:d9:9e:c6:90:89:38:63:
                    61:f2:7d:87:b8:c6:a3:f1:c3:28:3f:47:ab:c0:84:
                    64:e5:5e:c6:53:cd:7f:cb:1e:c6:4b:2a:6f:93:26:
                    dc:c4:d2:b0:02:75:39:d8:8f:d3:09:99:11:97:c6:
                    1f:04:94:36:7e:5d:bb:39:c1:d0:67:2a:42:fc:a6:
                    0a:17:a2:24:89:33:46:26:f3:0e:f3:2b:b6:7b:49:
                    e4:ab:e1:49:47:ba:b8:8d:40:ee:2a:0c:d6:79:e1:
                    11:27:13:0c:91:24:54:f9:06:1d:0c:aa:d0:88:d1:
                    10:3e:65:fd:22:d5:ef:b6:37:d9:e7:9a:0b:b0:8d:
                    2d:d1:43:7c:aa:6c:2f:95:e6:87:e9:68:5f:24:ca:
                    47:0c:01:92:92:e5:8c:10:52:28:05:40:38:27:40:
                    67:07:fe:ce:63:a2:7e:65:4f:bb:92:5a:1a:ed:cd:
                    ab:09:ec:33:d5:fd:58:57:d2:9a:f4:18:5c:e2:8b:
                    07:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:24:4F:88:BC:1A:FD:E3:D1:36:87:D2:E8:F2:99:1B:6D:CA:B4:35
            X509v3 Authority Key Identifier:
                keyid:EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:00:aa:f6:05:88:09:9a:34:36:88:62:4c:d5:19:84:18:7a:
         51:09:29:5f:94:0a:a0:05:98:a7:e2:d9:e2:95:36:a9:ec:6a:
         e8:14:41:5f:e0:67:b5:90:f7:09:0e:2d:05:50:39:5f:ee:69:
         e3:ff:24:aa:bc:9e:94:6b:80:53:91:83:7f:65:43:14:a1:e3:
         d1:de:42:4c:26:cd:86:a0:eb:ec:63:36:66:7b:cf:e8:f9:98:
         90:cd:8c:47:7f:8b:60:02:00:d0:05:44:a3:ca:37:94:9d:35:
         3a:d5:84:50:fd:1c:49:d7:70:d3:7e:dd:03:9e:3f:14:03:d6:
         00:63:5a:62:e7:96:45:de:77:61:f7:82:d2:da:34:e4:40:2f:
         e6:85:1b:c2:d8:8b:e1:ee:6a:69:93:b5:20:dd:f6:0c:28:02:
         0f:08:1b:73:1a:c1:65:eb:93:94:92:48:65:8b:ad:d3:a5:d0:
         6d:35:04:a5:f5:ad:c7:78:f3:73:1e:1a:d3:51:62:c1:fa:df:
         5f:7c:c9:54:40:23:be:04:60:f3:30:6a:c0:f1:2b:24:95:9c:
         40:01:fe:4e:2e:b3:f5:b4:39:8e:ba:db:16:9e:61:29:46:06:
         18:61:f7:03:9a:06:50:43:90:37:61:e5:2e:1c:9c:f6:77:e6:
         9a:02:a5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:18:11 2026 by rpki-client