Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
File:                     7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json)
Hash identifier:          wuMNZKAwUdrT4kBTh0RqXGw1QSUtUfWOMbXiVtDwOuc=
Subject key identifier:   55:09:E1:E5:20:79:C2:85:6E:8F:A8:C6:76:7E:EF:E7:E3:1D:FB:07
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Certificate issuer:       /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial:       019EB9FD809164747E9444AFAEB4A9A2F3BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
Manifest number:          1721
Signing time:             Fri 12 Jun 2026 04:00:58 +0000
Manifest this update:     Fri 12 Jun 2026 04:00:58 +0000
Manifest next update:     Sat 13 Jun 2026 04:00:58 +0000
Files and hashes:         1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: ghg2vhitwVsQpMrJjBfB3DhG+0RWV4EiG/bWAlOF0Zg=)
                          2: 85hHBUSy8Y2Mc7vYU29WfYNmQrs.roa (hash: hECfZ/fS6sGLnY/Td9cShCJ8J6B4XtgL9wvigKz0Uo8=)
                          3: LBH8ztFntHz17Sq_yk4WOvpZIOI.roa (hash: tYe43lNMSz/FpD84gMI0wKiTsaNLmmzOrcD2RhXlgfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fd:80:91:64:74:7e:94:44:af:ae:b4:a9:a2:f3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
        Validity
            Not Before: Jun 12 04:00:58 2026 GMT
            Not After : Jun 13 04:00:58 2026 GMT
        Subject: CN=5509e1e52079c2856e8fa8c6767eefe7e31dfb07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d2:e6:f8:54:17:fd:66:1f:b8:2a:20:ca:88:
                    e8:55:98:c0:4d:6a:83:64:44:dd:89:27:50:49:dd:
                    ff:c2:6e:13:4c:e5:1f:49:9c:bd:c5:03:d4:34:20:
                    f2:44:ce:17:15:d5:c9:36:0d:51:f6:67:e5:7e:44:
                    d9:49:67:86:22:20:de:37:80:97:8f:70:c1:13:5d:
                    b7:79:86:4d:6a:09:86:9a:23:5e:6e:af:51:5a:4f:
                    f4:64:54:bf:2d:b8:36:53:72:b2:4a:34:e4:0a:f3:
                    3f:d2:e6:89:d2:d5:58:ce:6e:98:1b:41:8e:aa:7d:
                    01:75:e0:54:62:3c:5c:d1:1d:84:04:1c:44:3b:d5:
                    bb:ad:ed:a2:f2:a6:ca:ad:27:29:ce:ab:5a:ae:8c:
                    c7:41:3b:85:6d:90:06:04:b9:8d:75:7d:35:77:1e:
                    3b:f8:6a:be:f6:97:56:04:2f:58:95:71:62:5a:c6:
                    ec:67:a3:11:90:01:cf:9b:e7:1f:63:94:e1:74:7b:
                    6a:df:43:1c:77:53:21:81:4a:0d:bb:3e:ff:b8:b5:
                    88:48:0d:8f:77:fb:50:77:24:77:02:d1:22:e7:12:
                    d2:26:5a:16:8b:47:9c:43:74:bb:2a:29:27:30:6b:
                    c0:01:d7:74:2a:df:d3:91:0e:db:53:25:2e:61:fb:
                    42:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:09:E1:E5:20:79:C2:85:6E:8F:A8:C6:76:7E:EF:E7:E3:1D:FB:07
            X509v3 Authority Key Identifier:
                keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:5d:8b:97:28:0b:8f:32:96:ef:73:45:e3:2e:63:51:aa:35:
         f4:f7:af:7a:aa:61:02:ca:f8:cc:54:98:8e:01:0c:de:dc:49:
         df:e4:51:97:3b:26:c7:a5:0a:c3:e7:1b:5d:65:70:2e:2d:fa:
         6a:43:d3:25:9d:1a:2f:5e:a7:1f:58:0b:7b:ca:50:e6:ce:36:
         de:37:c6:ab:6d:b2:8e:cb:c8:d4:fe:db:29:71:45:ce:27:54:
         56:5a:52:79:0b:4e:a2:cc:13:28:a5:3b:c0:9a:d5:c2:ad:02:
         60:a7:79:96:a4:5d:56:f6:f3:b6:11:8b:e5:87:f2:4d:26:7e:
         e1:51:f2:f0:84:b0:26:fc:9a:95:c2:eb:30:9f:60:83:19:fa:
         1c:89:ea:5c:48:a6:7a:b4:10:4c:bf:21:5b:79:30:90:2e:48:
         bb:0b:94:37:ae:84:28:2d:77:1e:a6:2c:b2:32:ee:2d:06:50:
         9b:41:c7:fe:c1:eb:6f:52:90:ed:1a:d6:82:56:2e:e7:7c:17:
         68:89:91:58:b3:84:ae:cc:80:50:b7:b5:f0:d3:64:21:69:de:
         3a:8f:0d:fb:9d:b5:2d:9f:d2:bb:aa:5e:ef:5b:3c:40:82:6e:
         ed:4c:4c:b9:9a:29:f8:ed:15:44:b3:53:31:83:0b:ef:7f:4b:
         38:02:39:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:10:37 2026 by rpki-client