Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
File:                     CR7HzPD6dh7Zm8WnqewNDusL8FU.mft (raw, json)
Hash identifier:          WN50slzdopcEYfdCOKdKf2qG1Zf0ZPzyHesWXnVtzn8=
Subject key identifier:   61:81:E9:5B:80:E3:E3:29:A4:EA:CA:FA:DB:F3:4C:99:E1:A5:D5:59
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Certificate issuer:       /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial:       019E984D3AF1EC1CB35D568B8CB8029F0FD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
Manifest number:          12F7
Signing time:             Fri 05 Jun 2026 15:00:58 +0000
Manifest this update:     Fri 05 Jun 2026 15:00:58 +0000
Manifest next update:     Sat 06 Jun 2026 15:00:58 +0000
Files and hashes:         1: 07XYxZm2jgrEmO1HuzMvRYzMMuA.roa (hash: nY7m4KC7AI0Ecpy/qnFSivU7gbK1MuLa2jlBoOfj+EI=)
                          2: CR7HzPD6dh7Zm8WnqewNDusL8FU.crl (hash: 5COAR2Tj69YAjDSMJ3aQ7vmWKH+RIOp1m6nARIkuaFM=)
                          3: Cop4QBFgPz7q3SAgsCzxjQw2-I4.roa (hash: 3+KMIe4ykTPEMsf6KYjZSYj0RLNxjRnmFAFq/w1rKME=)
                          4: GmoWBFdZxgpgR02IJOtNWXU60Fg.roa (hash: JAxT+56ClLIWR3r+vCv75YuOZRohTPeo2TN6vnnL43w=)
                          5: HClmRpwZ5qb-6Tw5Lpkkp6vUq24.roa (hash: R6anRTSdgq6QM25eUKnQ4vUTar0ktx5VjKKHjNUMua0=)
                          6: Idn5X01I8ewaC6lH5aMO8qDPZR8.roa (hash: inaT9YDkDzXeVmAusXdqKqfZJOTOaFo7hAptlKwjJcY=)
                          7: OJ1w1WvW4k3Ga1EBJCqY-_2nqzU.roa (hash: b5bk7yZz1Is4O8Xir/sTrR/mIRsoYCAaY6BCfdgn5ZQ=)
                          8: RuMQUL9WOmEJvLWt-qr_BF1Gb5Q.roa (hash: 43NWQzsz8KlfwddLNubmNg8ArqPU7FB+g1mEx1VSbLQ=)
                          9: TiqcBX8Xr8pCHaLkUx1X8iTEFj4.roa (hash: 3bwGL1/nE8oEOwOy0jR0e8JowdddSDpqjg7t1twul8Y=)
                          10: X8XbI1H9IfSg3qQsQSowZ5W9qIQ.roa (hash: 9tYchkibyiGf63vXdkvYVj/MGH8M6+b7g0ZGSiDWW4k=)
                          11: XOw8JNJO-uIg9HHlnw548ZJ5LdI.roa (hash: jEOkOMDISMGQm6lDZ5S6iuPlerKdJ4lpqsbuzz6ZhmY=)
                          12: Zp_dQMxeK4s5cFJUs-SkUn4FjXk.roa (hash: gjQNsvq1Su+L7BoPrc7WNGYbmEUyjE7QFdUTdDWn9gA=)
                          13: _muqkDefxMn6elW9A6x3-u89qsI.roa (hash: hm15ty/qT5a1amDhQKBPxEwo6xcyPJbCH7A9J8+gqhU=)
                          14: bXpAY6oapcJJSsH74H_lsZNy-FA.roa (hash: lyF3GT0AHqEUFHykQSaeBtexwb64bMUL9++L8uFcKf0=)
                          15: b_TRZnQbpKGGr7WruYBNW7N39mI.roa (hash: vbQnurk8ZzdTBK99uDa/ZNS1iZlMBI/qDpBfj+6WAww=)
                          16: bbtN_5mwzIbiwz2iYZsWxgs7DYc.roa (hash: qaL3qNP2rfqqJbxA2Yxe7UXhzeA/+z+h+72ODdJbZt8=)
                          17: ffQ9wRR3lmZ7SrnLaJ08cFzb4uw.roa (hash: jojS/hwBp8bJCEys0uBEnShnLC0EMlO6n+Kx5AShBU4=)
                          18: g_Cj5GDUwa2HLHUJiCflYDLH1LI.roa (hash: cBANxlLCPRrDnxn+SNqepP9E9vwZCWHdv7vEfvn4Idc=)
                          19: gr7bdy0VGRdMj5tfmP6Hs9UXaj4.roa (hash: QyHstRZRdvd47ZQl36Rd/igqRzb8/8PpW8S7eiZiQPM=)
                          20: hYRrlG4ePJA5Yx73qthpN3BdmIY.roa (hash: i1ovuAdJSnvNJTo743kB/D+xmK1EozUSuKfnkZOGoUY=)
                          21: uTHa6sFwz7iHdcsHyP4fqm0OW5k.roa (hash: v43HCGHUrt3AhlDzq1vOZbFXiCOEf6fmSyNlKWtvXnE=)
                          22: vLOjUUwtaa2X8-IAaOxu3DokPYs.roa (hash: Bd/6/C/bLXGN6G8sPVtzxe1SWgzPo0VD9bGAGFxwbq0=)
                          23: yPPudgQzJCUtVTuuzqJps2ZZOcg.roa (hash: ps1MAAJtV3fUVlLrQIgjyj1ZoNoHchwEw8Y92fP5Qps=)
                          24: zsWUC_e9yhKUrFPIEUkIvI5aHHA.roa (hash: NI+95z1P6YBvuLPF/+hkyTmgVTfETjJIbBe1gLRv9dk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:98:4d:3a:f1:ec:1c:b3:5d:56:8b:8c:b8:02:9f:0f:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
        Validity
            Not Before: Jun  5 15:00:58 2026 GMT
            Not After : Jun  6 15:00:58 2026 GMT
        Subject: CN=6181e95b80e3e329a4eacafadbf34c99e1a5d559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:da:cc:cf:90:a6:96:61:5e:44:16:0b:7c:
                    c8:fa:f1:b2:2a:6f:51:26:bf:41:93:a7:27:4a:aa:
                    e2:10:73:f7:73:6e:19:2f:07:c9:d5:ef:d8:75:d0:
                    87:fb:f9:57:c5:bf:ee:84:49:bf:4f:a0:2e:0d:33:
                    2e:c0:32:d0:6e:64:3d:08:6a:ee:f6:40:18:57:40:
                    0b:61:cc:b6:5a:fe:05:05:84:e0:67:ee:f3:a7:fc:
                    7d:db:ed:7f:01:48:6d:9a:5c:27:fc:3d:06:b8:03:
                    e0:71:6a:34:87:2c:e4:68:0a:64:a3:ce:fd:14:35:
                    49:3c:3d:0b:be:a7:0c:6e:7c:d2:ae:10:d9:92:d3:
                    d8:76:af:01:4e:c0:9e:36:f2:16:0c:dd:69:48:d2:
                    fd:ca:bd:e8:21:f0:7e:c2:67:a1:23:65:ed:13:ee:
                    95:b9:4b:f7:16:ba:96:df:0b:cc:eb:2d:a0:36:5f:
                    5d:d9:a2:d3:92:e3:93:80:21:5e:a3:e3:3a:9a:0f:
                    e7:b7:22:e0:36:e4:b5:af:60:4f:61:95:fb:a2:85:
                    d6:b6:cd:d2:2c:2b:c5:bd:fc:6c:48:93:e9:fd:9d:
                    7b:bf:39:9a:fe:6e:31:0e:46:eb:c4:76:f0:93:f8:
                    4f:11:fd:c1:7f:4f:dd:d8:88:e8:f7:fd:49:46:60:
                    cf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:81:E9:5B:80:E3:E3:29:A4:EA:CA:FA:DB:F3:4C:99:E1:A5:D5:59
            X509v3 Authority Key Identifier:
                keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:0c:52:03:a1:05:ab:12:f1:ab:06:a4:e4:5e:20:0d:64:72:
         2b:77:de:d7:02:16:01:3e:d0:2a:ba:62:9d:87:b9:32:d9:0d:
         3a:a0:46:ac:c7:97:e3:e1:04:f8:4f:1d:41:7f:47:8c:cf:3a:
         39:e8:cd:d6:28:31:6e:e9:86:1d:fe:df:22:62:9e:14:3d:25:
         10:0e:55:50:ae:66:7c:64:9e:44:d6:2d:3a:83:0d:9a:91:05:
         0f:2a:44:d2:01:b9:fd:a7:e5:a9:b1:94:42:f8:54:a3:ee:80:
         fe:e0:30:2b:47:b6:cf:ed:32:9a:0a:87:85:30:fa:2c:81:3e:
         51:d7:c6:e3:fb:2c:e6:a7:53:3a:24:c5:f7:93:95:87:72:ce:
         2c:89:ad:f3:59:90:f5:2a:f9:cf:29:2e:e8:e7:08:2d:58:0c:
         0f:b1:5e:80:36:b8:55:5e:d4:9e:33:eb:fe:01:a0:0f:c0:3f:
         dd:3e:e0:f5:0d:08:57:2b:b9:93:43:a8:b7:d0:78:5d:b7:85:
         00:c6:95:bc:97:29:61:06:7d:6e:bc:54:bb:c6:dc:80:b3:36:
         ae:46:3f:bc:23:e6:f8:e7:91:fe:8c:11:33:28:de:cd:4f:15:
         e0:ec:2c:f4:17:2a:84:ba:45:da:e7:bc:a3:f0:78:d5:d1:b0:
         55:0e:47:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 01:07:16 2026 by rpki-client