Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
File:                     7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft (raw, json)
Hash identifier:          QpplIS6O59So+/B68yoB5WgjtzzsExj7+m39mmEX4u0=
Subject key identifier:   DD:63:A8:7D:BD:2B:C7:37:DF:A7:95:81:CD:1B:3C:17:0F:B8:D1:8E
Authority key identifier: ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
Certificate issuer:       /CN=edff0ab25662757afb831675319296f63d989b69
Certificate serial:       019E30A8EC976AC5D60A1C7F3157E60C47CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 12:00:37 +0000
Manifest this update:     Sat 16 May 2026 12:00:37 +0000
Manifest next update:     Sun 17 May 2026 12:00:37 +0000
Files and hashes:         1: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl (hash: 6bPBn47I3x8OM/WnX5lpqMnEZlsdl66/D6dbv1wyLCc=)
                          2: SO4ODwKZaMZRbg45FP2nZyJ5JQk.roa (hash: qBOkD1BZLnNRkElqmAEiwmS3WVpC4bigU1naLXiimqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a8:ec:97:6a:c5:d6:0a:1c:7f:31:57:e6:0c:47:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff0ab25662757afb831675319296f63d989b69
        Validity
            Not Before: May 16 12:00:37 2026 GMT
            Not After : May 17 12:00:37 2026 GMT
        Subject: CN=dd63a87dbd2bc737dfa79581cd1b3c170fb8d18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c2:92:8b:ea:77:bb:9e:b5:fb:27:a5:19:8f:
                    67:e3:06:d0:50:8a:0b:75:9a:a7:03:7e:8a:3d:29:
                    36:8a:db:bd:7d:b9:6b:96:2d:c4:60:e5:fc:1c:47:
                    63:f0:31:d7:23:e8:34:19:72:81:1b:b5:91:b2:8d:
                    00:86:4b:47:2f:3c:c4:8e:c2:b2:fd:f7:a4:65:a2:
                    d4:ae:4c:16:1e:d6:43:7f:cf:cc:41:74:33:d7:21:
                    0c:4b:1d:d0:56:26:1b:2b:5e:54:b0:ad:ec:00:a7:
                    0e:7b:30:06:fb:cf:6d:96:84:85:7b:c8:ca:6b:e8:
                    72:9d:db:dd:ce:b6:db:6d:81:a7:98:7b:cb:89:34:
                    8e:52:2d:f4:8b:f5:58:a3:ac:ad:be:93:57:36:15:
                    8d:1f:4e:61:00:12:c0:ad:7b:df:c5:11:d2:ad:66:
                    2f:2b:e8:1a:49:58:ae:c7:b7:a5:e3:d7:23:54:64:
                    b7:e3:90:df:8e:c8:eb:14:04:e1:4f:e8:96:69:f3:
                    79:db:1f:26:07:b8:06:b5:71:c5:1d:25:5e:af:50:
                    a3:97:93:fd:c5:6c:34:90:83:29:ee:3b:f7:66:36:
                    59:fc:00:04:de:c5:f6:2f:c4:d1:29:9e:3f:56:53:
                    1a:f1:5e:06:f3:db:98:ea:93:45:84:56:92:8b:69:
                    52:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:63:A8:7D:BD:2B:C7:37:DF:A7:95:81:CD:1B:3C:17:0F:B8:D1:8E
            X509v3 Authority Key Identifier:
                keyid:ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:4a:89:10:e7:72:92:ca:45:03:b2:f8:89:8d:f0:4f:43:bf:
         40:d8:1a:e6:c2:b8:49:d6:b3:e4:2a:98:d1:1f:87:b7:44:d2:
         f0:d8:b4:a1:98:00:75:4c:7b:7a:20:e4:53:4a:f5:56:09:07:
         48:fe:7e:18:da:e9:04:b8:42:73:da:8d:88:90:e1:b7:ad:14:
         d5:60:55:06:2b:95:76:c5:b7:3a:71:52:12:05:a0:c2:35:26:
         2f:0f:e9:91:96:93:84:01:48:8c:9e:2f:96:e0:d3:97:56:c7:
         17:fb:c7:60:a4:ff:84:c9:2f:d0:5e:a1:3e:99:1f:cc:dd:ec:
         7f:37:01:de:4b:5b:bc:a3:8d:1e:10:5d:3f:c2:39:a7:7d:78:
         6d:45:b8:6f:ce:29:e1:ce:22:d8:53:59:3f:c1:39:2e:70:3a:
         b9:85:20:6c:a8:91:66:82:e9:d5:e9:6f:6a:76:62:41:5a:a4:
         4a:97:59:db:30:39:10:82:20:74:a4:18:c7:38:a9:5f:bc:2a:
         d8:1f:33:e4:7c:0a:81:2b:0d:1c:ec:a6:81:19:30:27:bd:f3:
         66:68:28:43:a9:98:3b:04:96:c1:1e:f7:0a:23:dc:cb:9d:3f:
         57:7b:3a:8e:4a:f6:8c:90:c1:6f:02:77:3e:7c:7c:9d:ad:ac:
         8b:d0:ca:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:55 2026 by rpki-client