Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
File:                     7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json)
Hash identifier:          /FXXyU/voEVxM0we+PReLIB0HWplBCzPGDU8LodgwBU=
Subject key identifier:   20:4D:77:38:61:40:70:DF:7A:4B:C4:A8:C9:01:7A:D7:68:18:BD:2F
Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Certificate issuer:       /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Certificate serial:       019E3072C8548D55666FF3B1964F540B093D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 11:01:29 +0000
Manifest this update:     Sat 16 May 2026 11:01:29 +0000
Manifest next update:     Sun 17 May 2026 11:01:29 +0000
Files and hashes:         1: 5M_dzDXzTB3Y0brCjbUvwSZRed8.roa (hash: IY7K+wfx2bW1m/Ix+hlJ62XrT+AVkyx4H7HyP9JrVMM=)
                          2: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: PCnaEKgENvrWyqUBmLOU0WU8pNX1dF3fQOCO/I6ekqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:c8:54:8d:55:66:6f:f3:b1:96:4f:54:0b:09:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
        Validity
            Not Before: May 16 11:01:29 2026 GMT
            Not After : May 17 11:01:29 2026 GMT
        Subject: CN=204d7738614070df7a4bc4a8c9017ad76818bd2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6c:bc:c2:bd:6a:81:ba:a1:aa:05:15:3f:f2:
                    4a:2a:00:52:35:7e:58:6c:c5:d5:91:49:1a:96:ab:
                    52:cb:6c:f4:73:2e:10:a3:f9:ca:8d:9e:8c:80:70:
                    ed:f8:cc:3a:93:ca:87:43:ec:c1:8e:df:15:2f:7d:
                    21:66:9e:df:0b:62:7b:fb:2e:99:d5:fc:fd:a8:30:
                    df:33:26:cd:86:77:8e:94:41:f7:d9:b0:29:1b:fe:
                    b9:3f:06:e6:7c:b6:cc:9b:28:b4:26:e9:3e:26:56:
                    34:cd:c4:95:75:5b:c2:c1:31:aa:65:62:8c:5e:60:
                    b8:a2:75:68:17:26:df:de:43:d1:91:04:7e:c4:1c:
                    c9:d2:1b:2f:54:40:d6:97:01:77:9e:0b:13:d5:77:
                    f8:55:45:18:2b:76:28:ec:18:b3:db:1b:05:9a:0c:
                    fe:f9:7d:32:96:fa:11:d3:d1:cb:50:5a:bf:82:87:
                    d1:bb:2c:17:83:24:d3:22:ba:94:81:91:86:f5:30:
                    1e:68:6c:b2:4a:54:bd:ef:37:78:8b:53:cf:61:d3:
                    aa:fa:cd:c5:e9:46:10:a3:13:c9:6d:b6:d4:8e:cc:
                    03:7b:41:9d:d4:5c:e1:06:84:e5:01:3b:f5:57:d0:
                    e6:33:52:eb:87:ac:8f:a3:69:37:96:d6:67:ba:cb:
                    99:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4D:77:38:61:40:70:DF:7A:4B:C4:A8:C9:01:7A:D7:68:18:BD:2F
            X509v3 Authority Key Identifier:
                keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:e0:4e:4e:14:f9:88:3e:60:e0:f9:4d:aa:bb:82:ef:c4:3f:
         b2:2f:c4:e3:84:80:c1:6d:26:2b:fd:83:e6:a9:ed:1b:13:67:
         58:02:dc:e5:62:8d:c9:8f:fe:56:85:ea:6b:ec:29:d7:e7:3b:
         f7:8d:77:8a:fc:9e:d0:e4:5a:d7:aa:a3:7d:6e:27:16:fc:fc:
         8e:b1:a1:ef:c9:fe:f2:fd:2b:3b:56:65:72:3e:68:10:72:89:
         96:2b:4c:f4:39:f7:a9:1d:bc:88:78:f0:e3:2e:bd:10:95:49:
         43:91:9b:e3:04:77:17:4f:14:fa:eb:05:e4:fc:06:b1:5c:4a:
         6f:5f:2d:01:a1:e4:ee:a1:22:48:94:ee:5e:c1:02:6c:84:5c:
         53:7a:36:1b:5c:ce:93:07:db:53:67:bb:13:40:c9:13:ac:ad:
         2c:6e:9a:fe:42:93:0f:a5:20:63:23:5c:f1:75:5a:81:fa:a6:
         b4:52:bc:52:2f:1a:c7:bc:19:42:ec:87:13:68:e0:9b:a3:36:
         a6:28:9b:c1:09:b8:51:95:5a:c0:58:65:64:70:af:4e:82:c5:
         fe:d5:cd:ea:3f:fe:93:95:3b:4d:41:d2:90:e7:30:08:0c:87:
         3a:d2:91:01:5f:86:36:bb:ea:57:e2:8d:11:fd:24:c3:71:62:
         46:27:43:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:20 2026 by rpki-client