Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
File:                     7B-pzoPKFB0pqr7sAMX598upk8Y.mft (raw, json)
Hash identifier:          vftjFws0r3o63i9DVT3/NzJPYrslSHnSZCGPjlGhJIM=
Subject key identifier:   CE:F3:37:F5:13:97:1C:D1:6F:BB:32:18:0E:FB:65:72:1D:6A:CB:8D
Authority key identifier: EC:1F:A9:CE:83:CA:14:1D:29:AA:BE:EC:00:C5:F9:F7:CB:A9:93:C6
Certificate issuer:       /CN=ec1fa9ce83ca141d29aabeec00c5f9f7cba993c6
Certificate serial:       019EB5B2B6E874D21C98D5928755A650763E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7B-pzoPKFB0pqr7sAMX598upk8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
Manifest number:          57
Signing time:             Thu 11 Jun 2026 08:00:48 +0000
Manifest this update:     Thu 11 Jun 2026 08:00:48 +0000
Manifest next update:     Fri 12 Jun 2026 08:00:48 +0000
Files and hashes:         1: 7B-pzoPKFB0pqr7sAMX598upk8Y.crl (hash: gluD2TqvL34Kntq0C92bHI3LBn5vID6nyodN802lqJI=)
                          2: lty9FU9-lvCivlXe3WOpvJPkZAU.roa (hash: w7emHClyLxjQcPa4VKPJS2kQf8ZhF6GvGuiuy4vd4PI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7B-pzoPKFB0pqr7sAMX598upk8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 08:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b5:b2:b6:e8:74:d2:1c:98:d5:92:87:55:a6:50:76:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec1fa9ce83ca141d29aabeec00c5f9f7cba993c6
        Validity
            Not Before: Jun 11 08:00:48 2026 GMT
            Not After : Jun 12 08:00:48 2026 GMT
        Subject: CN=cef337f513971cd16fbb32180efb65721d6acb8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a9:20:58:3d:3f:a6:3f:40:f7:d2:7c:40:e1:
                    ab:a0:15:55:00:59:b5:4d:13:59:04:5b:f6:98:3d:
                    47:85:c9:16:89:08:e7:3b:3f:39:58:94:ed:1f:8e:
                    91:82:64:e2:4d:ab:72:da:31:df:b2:81:5d:a4:c1:
                    f5:a5:14:71:61:ec:d3:e8:2f:ad:07:e3:a7:c8:37:
                    9d:75:34:6c:d3:71:cd:2e:34:19:76:be:17:9a:ec:
                    6d:92:9d:8e:c8:95:d9:98:34:99:59:3f:bc:6c:63:
                    5a:60:c4:9b:ec:e9:ec:30:65:84:c3:14:6e:b7:3a:
                    f9:56:d4:cb:5e:10:58:a1:a0:cd:42:db:6e:88:31:
                    35:57:f4:58:51:d7:9c:07:b8:ef:5d:4e:d7:01:38:
                    38:99:0c:f3:43:7c:ad:29:cf:81:8a:2a:b0:e2:3d:
                    93:59:9e:01:28:b1:4d:7a:74:29:c5:34:ab:b9:40:
                    74:78:6b:ed:75:6d:c8:94:3e:1b:1f:48:5b:5d:03:
                    08:fa:91:38:01:fa:5b:b2:56:19:2f:e1:50:27:9b:
                    b0:26:3e:c5:13:ce:48:00:09:f6:96:9a:e0:71:44:
                    5e:d0:98:4d:1b:9a:3f:a7:7f:77:51:af:ec:92:b2:
                    7e:4a:4d:8c:48:ee:e9:79:47:b5:0d:af:25:2f:7a:
                    d6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F3:37:F5:13:97:1C:D1:6F:BB:32:18:0E:FB:65:72:1D:6A:CB:8D
            X509v3 Authority Key Identifier:
                keyid:EC:1F:A9:CE:83:CA:14:1D:29:AA:BE:EC:00:C5:F9:F7:CB:A9:93:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7B-pzoPKFB0pqr7sAMX598upk8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c7:55:e6:e5:58:75:7e:e4:d9:c0:08:98:39:45:9c:3d:46:
         a6:33:28:1d:23:13:9e:19:61:68:dd:0c:a6:a4:97:18:13:e5:
         a9:a3:86:1f:cf:6c:72:6d:7c:ae:5e:e3:da:e7:75:7b:c6:c7:
         e2:1a:0f:88:ec:38:e3:6e:86:5d:ee:7f:a0:2c:e3:57:a5:23:
         ef:98:32:17:d0:79:c0:1a:31:aa:79:76:fa:d0:f4:9a:fc:34:
         be:04:21:53:ec:24:86:da:18:07:2e:0c:07:11:cf:8e:66:0d:
         94:fe:c5:56:81:8f:11:aa:f4:25:6c:ab:75:66:ea:64:42:50:
         ab:d7:8c:aa:ed:0f:d1:ec:f1:61:c1:9a:f0:73:7b:3d:14:65:
         be:4c:9d:f3:50:6f:8c:67:f5:2a:63:a9:aa:f0:0e:f2:ec:e2:
         94:60:bc:7a:a2:fd:86:0c:41:89:ec:47:51:82:08:ae:d0:74:
         d9:02:e5:79:80:70:f8:0a:70:37:53:f7:92:db:ad:91:a0:3b:
         b1:8f:12:49:04:3d:3d:0a:72:ec:63:1b:b7:0c:0f:6e:44:b8:
         85:af:ef:73:c2:b8:1c:cb:e4:63:6f:a2:e0:82:2a:73:2f:b5:
         22:dc:e8:6a:f2:d6:0b:c0:15:6e:ae:6e:6b:5a:79:f6:49:c2:
         6a:12:be:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:28:49 2026 by rpki-client