Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
File:                     7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft (raw, json)
Hash identifier:          Nrf5A2dDoaThv2v3CB7KBT0ZLDfIQ55kCd9jl3imp14=
Subject key identifier:   09:52:E3:52:FB:3C:46:3E:65:86:D8:CB:C8:87:93:C5:B4:0A:61:3C
Authority key identifier: ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05
Certificate issuer:       /CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305
Certificate serial:       019E30E098717F5878EE7B4A88051FBEB641
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
Manifest number:          022F
Signing time:             Sat 16 May 2026 13:01:25 +0000
Manifest this update:     Sat 16 May 2026 13:01:25 +0000
Manifest next update:     Sun 17 May 2026 13:01:25 +0000
Files and hashes:         1: 7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl (hash: clklxNYP3E5x2YqfE4EH/vWkl9CZlyCj5pHLaKik5Nk=)
                          2: TalCKAxab_gMMHeJvcq48KPYlOs.roa (hash: yPK8jifbQaBLYT5U8Ae5k9YG7IJ/bOiLPK0w75h7kpk=)
                          3: mglUegYtWaUyDz_-mcfoeZK3iuc.roa (hash: 35GBN0aP6FdxTviok26NqcLKHwN12VPItzfJaY9sv8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:98:71:7f:58:78:ee:7b:4a:88:05:1f:be:b6:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305
        Validity
            Not Before: May 16 13:01:25 2026 GMT
            Not After : May 17 13:01:25 2026 GMT
        Subject: CN=0952e352fb3c463e6586d8cbc88793c5b40a613c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:ff:34:ef:5d:ff:e7:fb:5f:2e:2c:b7:fd:
                    be:18:1c:d7:69:cf:0c:17:b4:43:5c:48:c3:b8:fb:
                    b3:b9:9b:ca:a6:30:1d:7b:af:91:03:de:8c:19:0e:
                    65:27:d5:b5:6b:a1:3c:d7:d0:8d:db:35:65:a7:a4:
                    9d:66:33:14:19:84:ca:e6:5f:8f:e3:ec:8a:da:44:
                    02:75:23:0a:7d:25:bb:2c:a7:b7:0e:31:92:c9:70:
                    fa:a5:74:7e:66:93:d3:9e:ce:e4:41:8a:ad:d8:bf:
                    6d:c5:e3:59:03:f2:15:b9:4f:52:c8:9e:bf:9f:61:
                    8b:cd:2c:b5:19:0e:8c:e8:92:b2:d4:e2:45:68:53:
                    51:82:a9:a5:77:82:80:d4:0e:99:66:08:cc:45:3c:
                    51:8e:bb:b7:ab:17:82:80:79:41:eb:93:fa:fb:c7:
                    2b:ae:25:2b:bf:86:b6:47:93:4b:8b:eb:6b:8b:d4:
                    12:5c:81:3b:73:e8:98:bb:fa:ea:83:10:78:a9:31:
                    0d:72:6a:2c:36:9d:a9:79:e7:c2:e9:05:9e:95:fb:
                    47:ae:26:da:83:7a:c8:fd:43:88:ff:48:08:0f:a2:
                    64:2a:1a:de:4d:6c:77:a4:a2:c1:c1:67:ae:ab:bc:
                    2b:2d:f3:fd:2f:7e:fe:cb:a7:52:f5:65:55:79:32:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:52:E3:52:FB:3C:46:3E:65:86:D8:CB:C8:87:93:C5:B4:0A:61:3C
            X509v3 Authority Key Identifier:
                keyid:ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:28:9e:90:cd:f9:21:6b:d1:f8:9b:44:0e:a7:1d:84:0a:42:
         5f:23:3a:ce:25:56:2f:49:ad:ea:4a:a2:b5:7a:95:49:45:53:
         ca:0c:d0:34:18:36:b3:1a:ea:e2:f3:87:48:f0:e4:de:4b:7a:
         d9:4c:ab:c0:0f:aa:a6:a6:bc:52:35:8b:53:92:30:09:c2:a0:
         dc:0d:2d:5c:ac:ff:6f:e8:7e:e3:2d:1f:d3:57:66:e9:4b:43:
         78:4f:d0:a5:8f:68:b3:6a:3e:af:ba:68:3e:eb:35:be:37:08:
         3b:ed:cd:dc:0a:85:8c:ce:dc:f6:df:53:23:06:87:09:79:97:
         36:4e:14:d5:a7:86:50:1e:31:0d:e8:87:d6:c5:1f:0c:02:48:
         b9:c9:0a:37:47:f5:3a:da:b8:34:3f:9f:5e:51:57:ec:35:11:
         6a:3b:29:45:0b:34:a2:78:6f:e2:1d:5c:41:5c:8f:cd:25:77:
         66:7f:0f:d6:d2:69:7a:62:14:ef:56:35:d7:77:ad:8a:21:5e:
         f8:d6:8b:af:4f:75:98:1e:df:36:68:87:3e:a1:da:99:6a:c4:
         67:05:10:6d:b3:a3:cc:7d:66:ab:70:21:a9:01:1c:95:04:79:
         2a:6b:9c:87:5d:12:ee:fe:2a:aa:24:70:cf:ad:4d:55:6b:fc:
         99:8b:af:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:12:49 2026 by rpki-client