Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
File:                     7ouogkxcjSBzJqSjq4k-u49Qlq0.mft (raw, json)
Hash identifier:          eOgDzUCFPP83k1FpKPtkdZ9CpxUXcrUp57Ij9SSii4s=
Subject key identifier:   1F:E4:DD:9D:F5:49:33:AC:83:3A:A4:C9:B7:8E:45:7D:55:4B:54:90
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Certificate issuer:       /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial:       019E3185D10F138D2BF6DD5C0B28DE77F995
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
Manifest number:          19F2
Signing time:             Sat 16 May 2026 16:01:53 +0000
Manifest this update:     Sat 16 May 2026 16:01:53 +0000
Manifest next update:     Sun 17 May 2026 16:01:53 +0000
Files and hashes:         1: 7ouogkxcjSBzJqSjq4k-u49Qlq0.crl (hash: ycXXqN15NesCbXv2h1lvR/m0hH2GRjzg0DrSOmIcbvs=)
                          2: 9_qzaYR-EszIpBxI4ownqBBUFGw.roa (hash: VhzjhZWKdSpMHocreuG2Si0iTaWmN7K1sjii56hPLwc=)
                          3: KjzZQ3XHTR1E4K2w5QoidTvxCog.roa (hash: 0FtQ/w38a9SAPO2B+4vZGc9BxQRkeEmmddcJQ1zQ63s=)
                          4: LwmdhCsy2Lr7yGc7jCRxpWKqi7o.roa (hash: bhETh7/jHUVT3epJybw1HG3uEDrhX6CKDJ8yGmY6haU=)
                          5: PdBo5LYrW3mTEROFtgvAOtWJw7o.roa (hash: FthkQ7lp8mIcRsIs/VRf4z45qSoRaUz1xKUgBE6qdA4=)
                          6: QOp6ldZ4aq2zfMPYvuOeV0oKmeY.roa (hash: 8YOvlrB9urinWAqeR4fd1zgfcxdDnYVPoOrAJi9cHqo=)
                          7: YuD6mYeegaW9d29Ci66BL3l4jWw.roa (hash: cYyPCH7nR9uMcm/IXKU1fKBDvQZmREUlYnB22XhXA1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:d1:0f:13:8d:2b:f6:dd:5c:0b:28:de:77:f9:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
        Validity
            Not Before: May 16 16:01:53 2026 GMT
            Not After : May 17 16:01:53 2026 GMT
        Subject: CN=1fe4dd9df54933ac833aa4c9b78e457d554b5490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e0:bd:25:40:70:e1:e7:ce:ac:52:4d:aa:a1:
                    96:cd:c0:9d:b2:88:e2:0b:e0:3e:12:a2:6f:8e:53:
                    7a:8b:65:44:cb:b0:e1:0c:4a:21:53:48:1b:d8:e8:
                    37:d7:21:b8:b4:c7:33:94:b3:a1:30:45:08:8d:49:
                    18:4d:38:aa:79:b1:d9:d0:21:98:ad:bb:56:e1:85:
                    ae:91:4a:17:54:b7:85:b3:83:19:31:15:16:e2:42:
                    a7:17:32:9d:d1:46:5f:33:cc:9a:a0:03:40:79:9c:
                    13:31:96:95:67:f1:02:a5:1e:e2:65:2e:b5:f1:60:
                    45:3d:e0:08:d0:1f:bb:45:ba:4c:a0:18:07:34:85:
                    c3:0e:1e:71:39:b5:69:47:da:02:95:a1:bf:60:46:
                    b2:2b:f0:e8:68:af:74:e3:65:eb:0b:32:b4:53:41:
                    23:d4:a7:1b:3f:f8:aa:13:ad:cf:7b:38:91:9d:44:
                    22:78:e0:9a:3f:7d:f7:9e:d1:73:da:11:36:2f:95:
                    15:24:53:d3:6d:08:fa:c7:5d:af:bc:dd:a6:0f:b4:
                    21:e8:f0:ea:c2:48:78:93:4a:66:e4:4a:0a:83:20:
                    d4:af:44:4f:f0:9d:a4:1c:11:89:c6:f4:1e:80:81:
                    38:6f:4d:58:6d:f6:12:ed:40:4c:90:50:dc:6c:4c:
                    85:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E4:DD:9D:F5:49:33:AC:83:3A:A4:C9:B7:8E:45:7D:55:4B:54:90
            X509v3 Authority Key Identifier:
                keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:43:fb:e2:0c:a0:65:ba:f5:ce:a2:78:19:30:97:bb:24:c4:
         51:4c:cf:c6:1f:ab:c3:c8:bf:91:ea:ca:d7:d0:9c:b5:ac:b8:
         a9:78:d7:c0:3e:63:5c:14:1f:5e:f6:6f:06:56:54:40:ea:89:
         03:b6:ae:7d:05:65:85:5f:e9:be:e7:4d:50:3b:bd:05:76:eb:
         61:c6:c6:6f:4c:9c:43:cf:83:3a:12:3d:00:32:8b:b2:3d:98:
         b9:0c:9a:b4:c1:12:e9:e3:f0:ce:41:f3:31:13:a5:25:9d:1a:
         5b:60:54:fe:69:86:8f:98:08:6e:db:da:66:7b:00:03:f4:82:
         64:1b:36:77:e4:88:8a:7d:d9:13:aa:56:3c:b5:d9:7e:5f:48:
         05:ca:14:b1:2c:9c:3b:3e:2c:f9:b7:ef:8b:8f:17:60:7c:d4:
         38:48:5d:30:c1:07:c1:9f:9f:c2:ab:4a:03:2b:58:83:b0:48:
         ba:94:db:3c:1c:f7:89:f9:a5:e8:6a:bc:09:21:c3:02:0a:d2:
         d3:53:e1:c3:b5:23:1a:2f:ab:44:95:87:7b:13:40:06:88:68:
         3b:20:37:06:38:f1:28:bb:bf:49:8d:c4:b9:69:08:37:1f:b4:
         58:35:ca:6e:32:2b:18:11:20:ff:28:34:37:b2:3b:c7:c8:f8:
         ac:33:c7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:19:44 2026 by rpki-client