Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
File:                     7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft (raw, json)
Hash identifier:          zGCQWs4DbSVTMdAIG4GPKLtxBKXy+s3dzka2iAFnk7g=
Subject key identifier:   46:C2:94:AE:50:FF:A9:EA:F1:B4:4E:17:00:7F:7A:B5:5D:0E:FC:B1
Authority key identifier: EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
Certificate issuer:       /CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Certificate serial:       019E3184FAE25AD5717F3E5DEA2C2C297D01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 16:00:58 +0000
Manifest this update:     Sat 16 May 2026 16:00:58 +0000
Manifest next update:     Sun 17 May 2026 16:00:58 +0000
Files and hashes:         1: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl (hash: fSrjznnOIpXmOq9HrArX48T3DGQcv6xbEVBJVJ6Fy/A=)
                          2: oqgwVvgO4WobvG_o2YvqXL-ZxrA.roa (hash: qgN0ZwFa85gMlSMo8H+ZBEVFv906WUNJ1MUKTtcyf+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:84:fa:e2:5a:d5:71:7f:3e:5d:ea:2c:2c:29:7d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
        Validity
            Not Before: May 16 16:00:58 2026 GMT
            Not After : May 17 16:00:58 2026 GMT
        Subject: CN=46c294ae50ffa9eaf1b44e17007f7ab55d0efcb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:04:c7:2c:f0:54:69:65:29:01:67:5a:f1:75:
                    33:ce:23:24:34:01:11:1d:0c:17:55:d6:0e:7d:66:
                    81:93:dc:4f:a2:9f:af:de:56:21:30:c9:72:94:58:
                    eb:8c:ee:e7:97:60:30:57:74:39:65:d2:ce:29:b5:
                    3f:fd:78:ce:43:c8:25:36:da:04:7e:f1:22:cb:a9:
                    3d:11:25:4e:28:e3:5c:7c:0a:1f:c0:9f:9c:ca:4d:
                    69:c5:aa:aa:b1:f1:52:71:3a:5b:3c:2b:3f:23:be:
                    b7:a2:6e:48:92:0c:4e:87:22:1e:67:c5:b3:df:62:
                    8c:0f:15:1b:ba:16:41:00:e7:09:66:78:61:2d:02:
                    da:f1:12:88:f2:3a:67:0f:78:c1:ee:d4:47:bb:a3:
                    9f:43:fd:21:09:11:e7:b5:8b:08:97:c6:71:5b:ba:
                    34:12:3f:cc:49:cd:72:9e:2d:0c:66:33:4e:9a:b1:
                    66:6c:ce:ff:d3:e6:d3:a9:2e:86:e9:8a:d0:fe:67:
                    88:27:76:c4:07:df:93:a7:65:65:7c:7f:5a:33:27:
                    fc:b9:84:36:e0:fc:f9:67:9d:dd:22:20:bb:7b:4b:
                    1a:74:a5:94:27:53:c2:1d:ae:9c:f7:49:99:ee:cf:
                    88:f6:2c:46:1d:7a:10:6c:19:71:ea:08:27:0f:3e:
                    e2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C2:94:AE:50:FF:A9:EA:F1:B4:4E:17:00:7F:7A:B5:5D:0E:FC:B1
            X509v3 Authority Key Identifier:
                keyid:EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b4:ec:af:a2:28:7d:83:e4:7f:41:65:6a:0c:8d:52:ff:cd:
         a5:b1:57:23:58:c2:c9:9d:bf:03:33:f4:8c:05:04:ac:75:e9:
         fa:77:40:ff:67:81:9b:34:1f:58:50:ec:ef:39:8f:98:41:8f:
         6c:88:e9:34:b4:2c:57:f6:ed:82:df:c0:63:fd:d0:e9:38:ac:
         98:7c:7a:6b:7c:44:bf:5b:41:1b:3e:ea:6f:84:4d:96:47:f9:
         0b:a3:98:7e:1e:e1:62:05:c4:69:cc:9b:05:4a:14:55:03:ef:
         54:ba:ab:a3:44:5a:bb:6f:76:95:f6:ab:a7:36:43:d7:d7:af:
         b2:30:93:2c:bd:07:c0:f4:08:bc:47:73:ed:7c:36:14:28:9c:
         fc:41:90:b7:6d:e0:0b:e4:92:25:50:05:60:31:f5:05:7e:fa:
         6f:0a:e8:95:d8:1b:3b:6d:7f:3a:75:24:6f:3f:43:84:71:9b:
         a1:1b:93:cf:eb:ac:51:ae:7d:d1:51:57:31:ea:f3:8d:35:d9:
         9b:63:36:0a:e4:2f:6a:9d:8d:7c:31:89:40:1a:b6:04:ab:d0:
         e4:71:f6:c0:88:e0:f3:6e:55:aa:aa:e0:14:20:b3:2b:02:3c:
         25:d8:96:f7:b8:ff:74:d2:5b:56:f2:e5:ba:73:e2:d0:b6:08:
         70:c0:a6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:18:51 2026 by rpki-client