Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
File:                     7e4lp4qBa942LEDIbjm5R9DuL_M.mft (raw, json)
Hash identifier:          w6h7rel8ZBoBI+GHJwxaPoC6Uv6KoBPeuCWJPSmFrXQ=
Subject key identifier:   16:20:7F:E6:22:9F:F5:09:39:4D:00:99:CD:CD:71:B7:1B:3F:AB:27
Authority key identifier: ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
Certificate issuer:       /CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Certificate serial:       019E2F976D2AA6E43DDBC8A52EF2B02B30ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
Manifest number:          1654
Signing time:             Sat 16 May 2026 07:01:53 +0000
Manifest this update:     Sat 16 May 2026 07:01:53 +0000
Manifest next update:     Sun 17 May 2026 07:01:53 +0000
Files and hashes:         1: 7e4lp4qBa942LEDIbjm5R9DuL_M.crl (hash: 1ONtscZ0EfRKl9x6lXp663nmDTpIfdHPcKNtTjmdmzk=)
                          2: Ro8iEiW7rbl5__Js738-X47zd7o.roa (hash: +phYjFZmxaM+pbKEjfOqXvZnYdeDvt8m3Nbx57x5ex4=)
                          3: xzeSROAZ4o5YtWLRSODt0z_nT28.roa (hash: ewTMl0RKi+Myrcx5oJN4DOCA09oZLzVzmbs3wk5czR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:6d:2a:a6:e4:3d:db:c8:a5:2e:f2:b0:2b:30:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
        Validity
            Not Before: May 16 07:01:53 2026 GMT
            Not After : May 17 07:01:53 2026 GMT
        Subject: CN=16207fe6229ff509394d0099cdcd71b71b3fab27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:16:88:d6:82:ea:f0:59:fc:ca:9e:b4:10:aa:
                    23:b6:51:c9:89:14:58:90:c5:f6:5f:90:be:c2:38:
                    7c:fb:a8:ce:87:15:6d:43:98:a5:21:d2:50:55:6a:
                    31:58:9d:4b:09:3c:09:91:dd:f0:9d:2c:cd:2a:00:
                    5c:c6:4f:3d:4a:b5:8d:c9:b1:0e:ec:ad:73:6f:b5:
                    14:9d:f9:da:26:b2:dc:a5:d1:38:da:84:81:ab:c7:
                    b7:29:c5:c6:80:a3:53:a4:c0:b7:16:e6:b9:27:9d:
                    b2:b7:3e:12:f6:f1:8e:57:73:7a:ba:a9:87:65:3b:
                    04:52:63:10:8c:e9:fa:08:19:a0:0a:52:b4:5d:8e:
                    20:5b:8e:a0:2f:f7:c7:e3:c7:bc:cb:c6:b7:8b:e5:
                    a7:14:b8:f3:2f:47:dc:30:5f:79:e2:ae:94:99:9b:
                    60:46:e6:a3:88:b1:3c:a4:dd:81:00:eb:3a:65:dc:
                    79:0c:6c:76:26:e3:37:3b:98:eb:f2:d8:a1:44:49:
                    86:d8:07:24:6c:b5:9b:43:15:e5:3e:7a:8e:98:61:
                    8c:03:f7:2a:f6:2a:a5:0e:de:8b:44:2c:1b:00:47:
                    d6:06:a5:86:a8:8a:df:a8:76:6f:5a:12:41:ae:0b:
                    7b:1f:39:b3:02:cd:7e:ce:86:c4:c3:c1:ca:f7:47:
                    68:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:20:7F:E6:22:9F:F5:09:39:4D:00:99:CD:CD:71:B7:1B:3F:AB:27
            X509v3 Authority Key Identifier:
                keyid:ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:88:fa:5b:bc:3a:6e:0a:f8:e9:47:c8:a5:62:16:b3:f2:e7:
         da:f9:3e:b4:cb:ee:d8:90:8f:7f:13:84:a0:ac:15:95:90:ef:
         fe:5c:dc:df:5a:14:a3:9a:d1:5e:e7:aa:04:d3:37:2d:a7:6c:
         36:e0:dc:9e:24:27:f0:3c:76:c3:39:b6:85:bb:4f:fe:35:f9:
         f0:5f:92:85:d9:34:96:8b:29:ce:8a:fc:82:2f:fd:c8:85:ea:
         3e:43:2d:f2:38:d2:5d:cc:da:66:e6:a7:b8:e0:25:22:64:66:
         07:70:3e:4f:58:71:96:e5:c2:50:6d:db:aa:0c:56:9b:2f:7d:
         02:48:6b:b1:95:cf:bb:2b:7b:06:04:30:ee:23:58:a3:07:37:
         b6:52:6f:66:e2:59:7d:55:02:70:57:bc:6e:f7:6f:3c:c6:24:
         cd:c4:c3:7d:bf:9e:79:f1:7b:3f:cb:c0:fb:ca:0b:4c:b6:19:
         88:ff:f5:2c:b5:59:07:c0:08:6f:dc:33:bb:33:b5:68:f3:e9:
         4a:c0:be:2a:bf:05:08:18:4f:52:38:00:77:58:3d:99:25:ef:
         b1:51:d0:39:d4:b0:c5:62:0d:69:8d:40:12:e0:90:5a:26:a7:
         af:69:91:68:e2:38:5d:b6:94:7f:5c:97:e6:24:da:b5:4b:d0:
         65:10:0d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:38 2026 by rpki-client