Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.mft
File:                     G1ZI14Ze9lxHeNgj37_qC6sa3Qg.mft (raw, json)
Hash identifier:          43TOexbuToqafOhMtGMk6manpVoHUOEHL9X5VezodJc=
Subject key identifier:   F4:FF:E0:DD:45:6F:78:A4:24:DB:5C:8D:8B:75:2E:46:BA:39:BC:66
Authority key identifier: 1B:56:48:D7:86:5E:F6:5C:47:78:D8:23:DF:BF:EA:0B:AB:1A:DD:08
Certificate issuer:       /CN=1b5648d7865ef65c4778d823dfbfea0bab1add08
Certificate serial:       019E2AA73D7B16981EDEC2EE4992C529D105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.mft
Manifest number:          07
Signing time:             Fri 15 May 2026 08:01:03 +0000
Manifest this update:     Fri 15 May 2026 08:01:03 +0000
Manifest next update:     Sat 16 May 2026 08:01:03 +0000
Files and hashes:         1: G1ZI14Ze9lxHeNgj37_qC6sa3Qg.crl (hash: SHf8K0YtdPaNxd7hhwMPcGoRtCc01TRnk3mvw9x6bjg=)
                          2: VW-yfyXm2BfDYOtGsIByfba8GjY.roa (hash: m5w3Cs66lipJPg61wjza2fM59lMVwR2ZUJBgpGXqP/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:a7:3d:7b:16:98:1e:de:c2:ee:49:92:c5:29:d1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b5648d7865ef65c4778d823dfbfea0bab1add08
        Validity
            Not Before: May 15 08:01:03 2026 GMT
            Not After : May 16 08:01:03 2026 GMT
        Subject: CN=f4ffe0dd456f78a424db5c8d8b752e46ba39bc66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5e:a1:b1:68:4a:51:85:4f:c2:12:df:84:48:
                    43:39:f3:a7:5b:14:ef:7e:6c:51:fa:60:82:fd:25:
                    77:5c:8f:53:14:27:09:89:73:12:79:20:ba:7e:8c:
                    b9:40:57:a9:1f:0a:f1:2e:d7:81:eb:ad:c9:66:66:
                    21:90:88:bb:d9:47:3a:f0:5e:ef:3a:b8:42:49:6f:
                    3f:0a:e2:98:be:70:56:a4:bc:21:7f:cd:50:58:b0:
                    b8:2d:a7:4f:d2:cd:35:2c:24:5f:16:55:18:56:2a:
                    19:db:10:21:ec:0e:f9:c6:7a:ba:ad:79:37:f8:11:
                    3b:64:9a:e8:ed:5b:90:81:5d:15:eb:32:4d:a5:fd:
                    53:ed:96:e2:ed:4c:1a:70:6f:a9:cb:a0:d5:ed:09:
                    14:f7:e6:a0:df:87:cc:a7:bf:a6:00:ff:07:b7:11:
                    dd:d6:28:95:8a:d5:bb:26:71:d5:d1:04:f7:42:da:
                    19:83:f0:f8:db:be:7c:42:e0:24:27:7d:30:d5:72:
                    54:69:ce:79:3f:76:07:87:5c:96:c1:62:f3:b2:b8:
                    d6:ad:e6:08:f8:5c:51:3d:75:ae:5c:5f:e7:5c:03:
                    e2:16:9d:de:29:1e:5f:95:29:32:a3:34:85:7f:bc:
                    87:27:05:df:6e:79:25:18:f2:2d:3c:51:72:e3:72:
                    2d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FF:E0:DD:45:6F:78:A4:24:DB:5C:8D:8B:75:2E:46:BA:39:BC:66
            X509v3 Authority Key Identifier:
                keyid:1B:56:48:D7:86:5E:F6:5C:47:78:D8:23:DF:BF:EA:0B:AB:1A:DD:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b3:25:9b:35:83:be:c9:dd:20:3a:29:fe:6b:41:b2:a3:bc:
         2b:52:f6:7c:11:6f:1b:44:21:7d:00:03:96:f8:35:8d:10:fa:
         12:e9:a3:6c:83:ca:c0:26:51:9c:b7:fc:a1:3a:cb:3a:f5:b3:
         99:b7:0d:04:2b:c0:03:07:3c:2d:d1:48:6a:9d:70:e9:e1:93:
         59:bd:51:1a:be:1f:38:08:cd:53:0c:e6:c0:a8:40:a7:71:b9:
         88:d0:ca:f7:9b:27:fd:a2:b6:6d:54:46:21:79:6b:07:45:b4:
         87:3e:25:92:d0:54:a7:2e:78:88:f1:c5:86:be:1e:32:bf:d7:
         65:9c:ff:16:96:23:99:e7:73:30:33:ab:96:a2:c3:05:52:dd:
         8b:28:1b:bf:c1:9f:ef:3e:56:7d:ac:2c:b5:f8:ec:0a:35:3f:
         8e:f7:b9:22:9d:f7:27:46:90:2d:4d:25:23:57:c9:bc:ec:f1:
         36:72:88:28:22:a2:40:f7:9c:02:0f:c5:b6:56:82:9a:8d:fc:
         55:b7:9a:1d:6f:a4:04:d3:d5:62:c1:84:9b:77:1d:93:77:cb:
         66:99:68:12:b7:1d:eb:49:af:b4:de:f5:c6:45:3d:f6:e0:6b:
         ee:45:2a:75:e9:f9:ef:2e:ba:ee:bf:00:4e:bc:f4:69:84:f2:
         6c:5c:d5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 10:34:51 2026 by rpki-client