Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
File:                     7rtMC0r2FchaPNze1LfrtmYxG0g.mft (raw, json)
Hash identifier:          EE0YxLmKNIip0QwEfR5vAMQMxEKPZoVcNvzMmfC76w4=
Subject key identifier:   E7:6A:97:76:48:64:46:C7:3D:44:FE:90:AE:25:03:39:EE:06:B3:D2
Authority key identifier: EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
Certificate issuer:       /CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Certificate serial:       019F111BC1FFA455ECF8E0D1218D29DC4A2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
Manifest number:          1918
Signing time:             Mon 29 Jun 2026 02:00:59 +0000
Manifest this update:     Mon 29 Jun 2026 02:00:59 +0000
Manifest next update:     Tue 30 Jun 2026 02:00:59 +0000
Files and hashes:         1: 7rtMC0r2FchaPNze1LfrtmYxG0g.crl (hash: vvhiQpz7Pm22lPAAu2rsx6qFwqpCITnwkYJkMY6xbRs=)
                          2: guibBNdYNmYjs3BhZ4d37Us7C4k.roa (hash: ERVCfgK3qCQAc++yH8oVuuxPI5EAT0LJxo2iXgCuAbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:1b:c1:ff:a4:55:ec:f8:e0:d1:21:8d:29:dc:4a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
        Validity
            Not Before: Jun 29 02:00:59 2026 GMT
            Not After : Jun 30 02:00:59 2026 GMT
        Subject: CN=e76a9776486446c73d44fe90ae250339ee06b3d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:91:c5:a1:97:94:12:a5:a5:42:27:1c:e7:c2:
                    5f:82:f6:74:5c:a0:36:3e:d4:0a:0c:e8:35:0b:9a:
                    27:97:1d:a0:62:56:25:97:58:a0:04:94:f6:8a:bc:
                    17:ff:98:6d:22:c6:07:dd:39:48:a0:5b:0a:44:c8:
                    02:88:33:6b:f6:d3:17:a7:39:44:ce:f2:43:6d:15:
                    6c:fb:18:fe:99:64:b9:9c:c6:be:36:4e:10:30:46:
                    52:bb:5a:5b:de:49:1e:07:60:9c:94:a5:0b:ca:cc:
                    64:8a:e2:ab:31:81:a5:f6:d4:4b:87:86:ef:4b:ec:
                    88:79:41:60:02:6d:7c:d5:18:13:e8:86:9c:08:fb:
                    37:eb:e1:bf:ac:8d:3e:9b:a1:83:54:9d:ac:db:e4:
                    07:fd:76:98:25:5d:25:75:54:cb:63:10:f5:b8:a6:
                    13:a2:f8:ce:ad:0c:57:86:7e:22:5e:ad:ad:a0:1d:
                    f4:d1:a7:78:af:a3:08:93:bc:19:7b:df:08:60:11:
                    9e:61:10:73:1e:ef:a1:31:73:c1:43:68:0a:6c:8f:
                    07:d0:07:db:fc:2d:71:60:47:de:54:50:1a:80:20:
                    4a:e7:31:f8:c4:09:75:69:00:ee:bc:e8:21:0b:e9:
                    82:17:50:50:28:29:95:90:d7:59:18:5f:dc:34:f1:
                    29:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6A:97:76:48:64:46:C7:3D:44:FE:90:AE:25:03:39:EE:06:B3:D2
            X509v3 Authority Key Identifier:
                keyid:EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:09:1c:24:07:91:b5:f0:ce:d9:b9:ea:de:ae:49:89:24:ea:
         07:c4:ec:23:8b:89:3e:b3:5d:3a:67:cd:69:4d:54:37:16:51:
         f4:d8:3c:58:a2:43:e1:24:f8:4c:ce:37:32:ab:87:0e:fe:5c:
         cb:6e:13:49:56:c0:fb:45:d5:fa:f8:43:d3:91:88:8e:1b:e8:
         a4:31:e3:24:10:1e:c4:72:20:bf:b0:3a:03:4c:8a:48:bf:ac:
         96:c7:3d:6c:2c:39:2c:f7:7d:56:42:c1:46:9a:f1:59:02:fd:
         ed:6d:17:fd:e1:bf:90:a2:ec:9b:55:7a:5d:49:4d:86:ca:ca:
         6c:6a:ff:62:bb:1a:c4:f0:41:81:14:be:3c:8c:f5:93:1e:59:
         65:f6:55:88:cc:4d:2b:eb:1a:14:a7:46:8a:04:01:4c:6f:ec:
         8c:ff:ec:cf:2b:0b:91:76:f1:de:6a:57:d5:cd:c2:84:15:f0:
         60:58:25:ef:d7:2d:ce:60:a4:f1:74:43:f6:1f:9b:74:d3:3b:
         1a:f2:84:99:c9:b9:88:68:4f:6a:61:1c:26:dc:eb:3c:e1:4a:
         8a:7f:b7:8a:43:5f:3e:17:87:7f:3e:c5:3e:0f:78:36:c2:f6:
         03:c4:2f:62:ff:6d:fe:18:4b:98:10:13:bd:d2:f7:dd:3d:7c:
         c5:6d:e5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:40:02 2026 by rpki-client