Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File:                     7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier:          S26KpuJCsb0Jn2LbqDY4Q+MdKPNKBjJq/VdAFPBwvKA=
Subject key identifier:   8F:BD:9E:5C:86:40:0D:EF:E8:DF:96:88:A6:DC:6B:61:47:5D:9C:97
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer:       /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial:       019E311718399B5697DEA04B80C652B2916B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number:          1717
Signing time:             Sat 16 May 2026 14:00:57 +0000
Manifest this update:     Sat 16 May 2026 14:00:57 +0000
Manifest next update:     Sun 17 May 2026 14:00:57 +0000
Files and hashes:         1: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: LU/4WN92IRWRaTj8AUvda4HQt9fpaVhEFy4OPCZw4wM=)
                          2: CM5yTRt39UsRzQIWzuT7HO7bzSE.roa (hash: RH4eRmyLdVDmBQ+RCsFz+zVNIdYG+Aj2Xj1CkOhS/oI=)
                          3: LxSQP0g5iT2gsfHgEm-ts-WDJF8.roa (hash: bMz5HXK6775JKPVW+G1i9ymi7O9XK+msuKRHy3NE0Qk=)
                          4: psWOMQeMbdYZeEJwNKNEAJmZbBU.roa (hash: Kwf/BATNuOaMCMQQKCC+7fI7j3/5LLVOOW7HAw/+s1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:18:39:9b:56:97:de:a0:4b:80:c6:52:b2:91:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
        Validity
            Not Before: May 16 14:00:57 2026 GMT
            Not After : May 17 14:00:57 2026 GMT
        Subject: CN=8fbd9e5c86400defe8df9688a6dc6b61475d9c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9e:19:29:5e:82:45:01:ef:45:cf:ac:c5:d7:
                    86:85:bf:22:39:4e:ff:09:5e:fe:6a:dc:31:39:b5:
                    64:d3:45:01:3d:60:e2:9c:7c:ed:9b:66:ac:b1:85:
                    fe:c8:c8:e9:93:bc:db:e3:37:89:65:c4:b2:96:9b:
                    06:9f:5e:ea:be:7f:19:39:99:14:4b:65:fd:ff:55:
                    33:18:a9:f2:93:de:2b:77:e6:21:b5:ab:ab:69:06:
                    d2:43:f6:42:52:78:bc:22:73:42:85:cc:63:89:2b:
                    7a:71:d4:fa:50:61:00:47:e2:0b:46:28:a3:70:65:
                    9e:6c:46:fc:f4:f7:d0:b1:1c:97:6a:88:89:37:e4:
                    d9:6f:08:22:64:e5:28:c1:45:0a:b6:bf:96:d6:da:
                    1a:1a:59:5f:f2:1d:3a:b6:55:97:67:a1:0c:89:cc:
                    4f:9d:b9:8b:a0:ab:2d:6a:72:03:7a:13:bd:b1:81:
                    34:6b:d2:d7:6a:90:88:18:99:2e:e3:0b:84:07:57:
                    74:2a:cf:bb:e8:f8:c0:13:6e:73:9b:26:56:ac:c2:
                    f4:dc:27:0c:35:9d:fb:3f:73:a0:73:ce:e6:c3:cb:
                    34:65:9c:e7:d8:25:ba:6f:7d:4f:19:b5:32:7e:bc:
                    d7:ec:8b:76:a4:fa:a1:b8:1e:63:a1:b1:7a:21:ab:
                    47:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BD:9E:5C:86:40:0D:EF:E8:DF:96:88:A6:DC:6B:61:47:5D:9C:97
            X509v3 Authority Key Identifier:
                keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:04:77:4f:95:05:51:5f:a0:60:65:40:75:47:b5:4e:9f:9c:
         7a:ad:45:19:f7:9b:95:57:f8:8e:4a:f0:09:c7:8f:ee:bc:07:
         e5:28:9c:b3:bc:e1:05:da:a2:8f:2e:92:d5:e2:ef:7f:f8:13:
         99:ed:8d:c5:53:5a:ee:61:43:b0:6c:c4:6f:8e:ed:80:7e:75:
         d2:dd:2b:90:03:c1:82:13:a0:6f:22:79:f6:77:69:f9:10:db:
         ef:20:eb:e4:2a:20:57:66:8d:88:42:ec:c4:53:09:ae:41:b6:
         22:b2:15:6f:2e:4d:34:e9:b5:61:16:c8:43:de:01:fc:c2:31:
         23:7d:90:5f:74:a2:e4:de:ff:79:11:f2:32:e1:5e:e4:67:4a:
         2e:3f:67:3b:de:06:dc:35:ee:fd:0f:b0:63:4a:bc:37:06:2d:
         c8:01:a7:7c:c3:d3:29:a4:1a:9d:a8:92:ee:d3:80:b7:35:a5:
         9d:dd:93:12:25:fd:06:a7:55:0b:ef:ce:76:fd:d6:e9:e7:c2:
         51:a0:8a:1f:88:ba:56:29:07:c0:54:44:04:5e:a9:bd:5e:00:
         a4:b5:09:0d:8a:22:06:62:ec:35:33:dc:8e:19:f5:16:95:c5:
         22:a7:71:12:72:07:e6:2d:ac:dd:c9:51:1b:18:03:70:34:79:
         6b:2d:78:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:45 2026 by rpki-client