Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
File:                     7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft (raw, json)
Hash identifier:          8yzuGYnOmPHknLMAIdWv6ZBZLNHw02e76D5AoZDwZu0=
Subject key identifier:   F3:C9:30:01:16:48:6C:FF:B9:18:12:E1:1C:53:99:B2:FC:52:65:CE
Authority key identifier: EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D
Certificate issuer:       /CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
Certificate serial:       019E2F973A7D41A934A368B58027E110B8A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
Manifest number:          096C
Signing time:             Sat 16 May 2026 07:01:40 +0000
Manifest this update:     Sat 16 May 2026 07:01:40 +0000
Manifest next update:     Sun 17 May 2026 07:01:40 +0000
Files and hashes:         1: 7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl (hash: LH9BrjdqBXTbuNqddiOheQbgJhGgnOOJe7Y4/o3wP4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:3a:7d:41:a9:34:a3:68:b5:80:27:e1:10:b8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
        Validity
            Not Before: May 16 07:01:40 2026 GMT
            Not After : May 17 07:01:40 2026 GMT
        Subject: CN=f3c9300116486cffb91812e11c5399b2fc5265ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:0c:dc:d1:b6:0e:c3:f1:6d:c1:04:85:7a:
                    52:ba:b6:92:86:d6:79:da:4a:c0:3f:43:aa:9a:1f:
                    db:ea:bc:82:a5:48:ee:33:21:d2:7b:91:e6:fc:37:
                    52:79:49:ef:6c:d1:db:1d:82:17:48:8c:10:06:70:
                    60:6c:9e:77:c7:db:a9:24:21:41:f4:02:84:ab:fc:
                    d7:2c:6b:62:cc:5c:89:16:60:00:41:42:63:e0:0a:
                    2c:ac:83:63:82:87:0c:cd:7e:a0:62:0d:c3:77:b1:
                    49:b3:33:a6:20:f6:e6:25:f2:62:4b:8c:15:42:da:
                    ce:4f:c8:4b:23:a2:ba:1d:43:18:86:f1:b4:62:96:
                    5d:cd:02:11:d4:8d:24:cc:75:10:cc:e5:1c:d4:53:
                    af:4a:a5:46:9b:5b:21:65:f3:ce:39:0b:28:b6:e0:
                    fd:d9:c0:cd:a0:8d:e5:65:ec:25:40:9c:49:df:be:
                    2c:ed:65:c6:32:ed:49:77:d7:6d:8f:aa:b2:7d:f7:
                    47:c5:c8:e1:ce:a3:b7:c3:f9:95:a4:0e:84:c1:4d:
                    62:32:24:9c:2a:8a:51:55:e1:05:d5:d5:21:50:8b:
                    8c:92:a2:cf:32:97:e0:42:8d:07:3e:fc:b3:64:63:
                    35:37:d7:c6:ec:b7:ee:58:14:1b:30:93:ed:2e:79:
                    a3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C9:30:01:16:48:6C:FF:B9:18:12:E1:1C:53:99:B2:FC:52:65:CE
            X509v3 Authority Key Identifier:
                keyid:EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:8d:9d:5e:89:43:2d:29:f7:67:f4:cb:28:d2:38:3e:7b:27:
         93:ba:5c:aa:32:20:f8:89:3e:85:97:fe:de:f4:ec:0f:e0:a7:
         17:37:cf:8c:15:bc:bd:31:d0:d5:c1:af:15:94:3d:94:3e:af:
         bb:3f:25:57:88:73:8c:c8:91:f1:25:32:29:5d:59:a6:29:a7:
         aa:9c:6c:dd:1a:2f:b5:13:14:fd:94:0c:9b:62:91:2c:98:66:
         fc:69:8a:44:54:91:80:98:75:32:29:d7:7e:1a:93:7c:b6:f0:
         9a:00:49:23:27:8f:ba:6f:99:27:80:81:a7:5a:02:82:50:6e:
         55:15:32:1e:5f:ff:72:c6:97:92:aa:4b:f0:43:e8:d5:88:ae:
         2c:15:be:71:47:04:b6:7c:f0:78:37:d7:44:a4:94:c7:e1:80:
         f7:a9:45:c3:ca:a5:d1:7d:ae:df:78:f0:66:9b:0b:c0:49:2c:
         0c:13:be:57:bc:56:8e:e3:d4:5d:ac:d7:e3:d4:0b:b0:7b:f2:
         4c:f9:ca:34:65:0a:02:84:67:ae:0f:d7:75:9d:4e:26:73:18:
         1b:4f:03:5d:df:50:c1:ca:21:11:d9:d7:32:49:74:35:11:a6:
         dd:12:3f:e2:44:d2:99:92:f9:0d:7f:42:b7:2a:ae:51:f0:d1:
         2f:38:49:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:23:56 2026 by rpki-client