Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
File:                     7x8BiBtzyOm12SI5IppuUS7KTnw.mft (raw, json)
Hash identifier:          sc67SUI73MDdQtygWHRo8ZoSRFAUFaZkhF9K0rrCZlM=
Subject key identifier:   56:A6:6B:71:BC:FD:74:82:AE:DD:A2:7B:C1:AB:E5:AB:FA:48:6A:4C
Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
Certificate issuer:       /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Certificate serial:       019DEDB6F2CC009903FCF5A05E6814B2CD1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
Manifest number:          18F5
Signing time:             Sun 03 May 2026 12:01:23 +0000
Manifest this update:     Sun 03 May 2026 12:01:23 +0000
Manifest next update:     Mon 04 May 2026 12:01:23 +0000
Files and hashes:         1: 7x8BiBtzyOm12SI5IppuUS7KTnw.crl (hash: CFtA2Gyhqatkz8DxJ0UNW2mre2xL9XkRUcnCzqR8Umg=)
                          2: PpC-jCzEwXeURniqNoGbKQGbl80.asa (hash: 7eLqxofeK33/erPeKMITS9BNvXjGW/yqWgOEh7bn4OU=)
                          3: Y7mpLNYAxNrmVFE668fj26_4slk.roa (hash: sStKHdLvZFVko1S3+XaMnFnoZ14/U/Jcc7V7adFjD7Q=)
                          4: dwClVTFnGbjR7R5pMvtxezd_4PI.roa (hash: KUWgcD7L1mhB0Dl0zJGhLCYpqe3MeHBScDAVK3E2gf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ed:b6:f2:cc:00:99:03:fc:f5:a0:5e:68:14:b2:cd:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
        Validity
            Not Before: May  3 12:01:23 2026 GMT
            Not After : May  4 12:01:23 2026 GMT
        Subject: CN=56a66b71bcfd7482aedda27bc1abe5abfa486a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e1:7f:e8:6d:12:ab:44:8d:68:da:1d:1c:4e:
                    90:d4:cb:44:e2:9a:2b:90:3e:d7:c2:81:a1:be:3d:
                    09:c2:ab:b4:d4:ca:b3:fa:16:c8:e2:45:f0:8c:9c:
                    3c:60:60:15:1d:d1:ef:5c:67:89:2d:a2:c0:e9:26:
                    f2:02:57:9b:2a:7c:2f:36:67:eb:59:85:7e:d5:e0:
                    51:a7:ef:f7:5b:81:4d:df:e1:77:b0:18:a8:5b:2d:
                    31:37:7f:a2:01:72:84:6a:5c:5b:7f:64:f1:ab:fe:
                    85:f1:f0:07:86:da:94:c0:d7:82:d7:89:63:89:45:
                    21:df:84:0f:14:cf:d7:36:68:e7:4d:6b:9d:25:92:
                    c0:70:ac:26:41:dd:ea:dc:2a:3a:c6:51:09:8c:0c:
                    0b:7e:e3:65:50:6d:8d:28:02:0f:42:74:f5:f7:48:
                    a7:73:04:5e:0f:40:9f:dd:6e:8b:df:c9:ac:33:8b:
                    32:5c:9b:32:69:69:22:ac:28:3c:21:b9:1b:21:84:
                    e9:30:5c:7a:a7:41:41:32:2d:50:c0:c3:b6:ac:6e:
                    bb:dd:83:b4:f8:45:1a:ac:60:36:ef:1f:05:65:c6:
                    34:28:99:72:2e:d4:26:4b:5a:00:c8:51:f7:68:e7:
                    8e:27:4e:8e:97:b8:5a:14:40:65:40:57:ba:d0:da:
                    90:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A6:6B:71:BC:FD:74:82:AE:DD:A2:7B:C1:AB:E5:AB:FA:48:6A:4C
            X509v3 Authority Key Identifier:
                keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a7:d2:06:48:ce:56:cc:f0:53:9d:ae:a3:9d:cd:1d:29:b2:
         1f:23:2b:80:c0:e4:7c:b1:30:0d:b0:b5:93:5a:ae:f1:13:2a:
         56:7f:a4:21:8b:d7:95:69:7c:99:ab:a5:f9:90:53:4a:7a:ba:
         20:9d:f3:16:0d:60:0a:86:e6:88:d6:35:85:cf:4c:d8:ec:c9:
         2e:dd:68:60:5e:c6:df:42:ab:86:d5:83:93:7a:b2:5b:e0:3b:
         cd:58:5c:74:e3:62:ff:8c:47:a8:55:a1:d0:e5:cb:46:72:a3:
         95:4a:dd:d7:78:88:07:b8:d6:a0:10:64:07:57:f2:61:6b:08:
         45:00:5c:49:39:54:41:6c:bd:50:60:05:95:49:14:a4:5b:3c:
         16:11:15:5f:5c:63:31:83:f5:52:87:72:cf:33:99:b7:a9:f4:
         85:23:4a:70:f0:48:af:d6:9b:9e:de:35:00:ba:5b:95:98:fc:
         a0:46:d8:9e:f4:3e:08:16:5a:3e:6b:95:7f:bf:e3:eb:45:4b:
         22:ed:71:2e:58:e1:c5:05:75:69:bc:62:fc:3c:f1:04:44:32:
         7d:15:80:e6:dc:37:56:44:30:2d:26:d0:60:9b:66:98:b3:8f:
         b9:51:bc:2d:71:d3:be:50:a8:f2:88:5d:55:51:b1:d6:e9:31:
         e9:e5:21:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 18:46:12 2026 by rpki-client