Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
File:                     7AWYaJfQJOSMfNJeGJHEII_zu7I.mft (raw, json)
Hash identifier:          tOEkCoGsM7V/SZJq4TzCtnEQzPMLU5bxcsUaVA5HDWQ=
Subject key identifier:   1E:17:75:8A:9E:8C:C3:BA:AB:45:39:03:DD:B6:1A:3F:FE:94:7E:FA
Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
Certificate issuer:       /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Certificate serial:       019E2F96570CD4FB6FD3F35D0FA36388BF52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
Manifest number:          12CD
Signing time:             Sat 16 May 2026 07:00:42 +0000
Manifest this update:     Sat 16 May 2026 07:00:42 +0000
Manifest next update:     Sun 17 May 2026 07:00:42 +0000
Files and hashes:         1: 7AWYaJfQJOSMfNJeGJHEII_zu7I.crl (hash: TL/pcvVdfhUMHH7axIf70yx55EPeIztexQgJrvISEho=)
                          2: HXGNMLUxYfLt2IxSXdMd7iMfgVw.roa (hash: rGZ8j3Yypq0spYgSmlQPy3xpKi1OQAliNPVd0/dnsVw=)
                          3: NdtOCJvzGmFZlmDg7mwNpBd1B_Q.roa (hash: W9vZQt0X+AIDjmeyVAUiJ2h6aMzNBj5GBkBeIxqmyoM=)
                          4: zb3M5sCfdcroGbb7sb_8fFyKbFk.roa (hash: DT+a2ocZ5cYF7PMlIn/Yq8jpDiPXnKsM/EWJpn65oWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:57:0c:d4:fb:6f:d3:f3:5d:0f:a3:63:88:bf:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
        Validity
            Not Before: May 16 07:00:42 2026 GMT
            Not After : May 17 07:00:42 2026 GMT
        Subject: CN=1e17758a9e8cc3baab453903ddb61a3ffe947efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:85:0c:8b:e3:ec:2c:48:d0:ef:4e:93:4b:
                    84:a8:0e:13:d9:cf:9d:83:9b:1a:90:7a:74:97:62:
                    0d:31:7b:16:7d:c3:cf:d3:83:ec:9b:2e:75:3a:8c:
                    fd:1d:b1:20:dd:2a:66:89:8f:db:6e:e4:ca:c2:a0:
                    89:0c:68:61:ff:57:fc:54:41:0c:40:76:e7:c8:d3:
                    ec:d8:84:b2:cf:76:12:f5:a1:02:b5:fc:ee:f0:99:
                    db:a7:ee:43:c6:52:5c:fc:b2:97:0a:a6:37:1b:9c:
                    42:ba:4a:50:21:c1:a9:ae:bb:87:30:8d:4c:cb:9e:
                    4a:7c:d0:23:25:0d:93:78:d8:5e:27:03:7e:1c:6f:
                    5d:37:b2:f9:ec:fb:a0:ed:f2:09:01:8a:45:9a:fa:
                    18:97:ff:ad:0b:71:01:73:7c:7e:e9:12:a6:cf:3d:
                    1d:09:d8:48:7b:4e:dc:08:a5:c6:79:4e:76:48:c9:
                    b2:b3:64:c7:ec:65:cd:83:a8:ef:32:b1:ba:44:44:
                    c5:6e:d3:e3:cb:31:70:3a:e2:00:e1:72:d0:0c:2a:
                    f9:9f:7d:80:e3:fb:2c:5f:3a:61:8e:53:41:0c:a5:
                    bd:a8:ed:a1:f0:ec:32:80:38:4f:df:b7:f0:5b:3d:
                    b3:80:d4:70:6e:87:9b:75:2d:e1:02:d4:3c:29:ea:
                    cb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:17:75:8A:9E:8C:C3:BA:AB:45:39:03:DD:B6:1A:3F:FE:94:7E:FA
            X509v3 Authority Key Identifier:
                keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:d1:5b:d0:e6:85:6e:fb:29:d3:60:ec:c6:31:c5:13:f4:96:
         3e:5f:2a:27:c6:56:c1:70:36:84:bb:f9:8d:85:16:27:e8:df:
         62:5d:99:32:ce:49:50:5d:73:b6:69:ab:57:95:13:62:13:1a:
         3b:19:5c:6f:da:1d:01:49:81:d9:87:8b:15:80:6d:70:a4:84:
         0a:23:9e:08:7d:13:47:04:3f:b8:11:61:95:18:48:16:30:dd:
         4e:7d:0f:be:34:44:70:fb:65:fc:d7:03:ba:fd:97:7e:a1:1c:
         b9:2a:9c:e9:0d:a9:21:63:e0:e9:c0:02:34:23:88:47:b4:bc:
         c5:4f:2b:56:a4:76:93:74:46:7a:e8:a3:a0:40:16:85:42:77:
         39:2c:8e:93:5c:3b:29:2e:bd:6a:f5:53:f1:c0:b8:29:22:1c:
         fe:29:4e:7e:28:99:0d:36:c8:c0:ef:03:2c:92:75:ec:2b:fd:
         6c:3f:f7:02:f4:0c:7c:2f:75:04:e1:96:78:9c:8f:8a:fa:67:
         c8:00:9e:72:4d:f0:cb:67:c5:c4:bd:78:7b:8c:f0:34:70:e0:
         20:08:58:5c:41:de:8b:ee:18:d3:cc:32:13:00:85:ab:e8:55:
         c5:7f:93:4e:36:0e:5d:43:8a:47:1d:d4:e2:f8:49:09:97:71:
         a7:15:da:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:23:00 2026 by rpki-client