Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
File:                     7eXtRX90OCqO0LevaG4a2yk1IlA.mft (raw, json)
Hash identifier:          fB7+qCzIFURdOE2IM2o/vVjeTNWwT0p94zW0DpwLJBw=
Subject key identifier:   D3:37:48:41:68:C0:29:ED:61:32:53:2B:41:1B:A6:F9:5F:99:E7:4F
Authority key identifier: ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
Certificate issuer:       /CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Certificate serial:       019E303BFA8D29D2B5698A03DC5AAF1143B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
Manifest number:          12A7
Signing time:             Sat 16 May 2026 10:01:37 +0000
Manifest this update:     Sat 16 May 2026 10:01:37 +0000
Manifest next update:     Sun 17 May 2026 10:01:37 +0000
Files and hashes:         1: 6UcUmEautvpvMnTzbqlUFFqwHPk.roa (hash: ixisQXZ4Rb1bn7n/nHLhuuBXi93MfJ/FXdmklcMC01w=)
                          2: 7eXtRX90OCqO0LevaG4a2yk1IlA.crl (hash: I3r+cyptQGSXiaybHelUfxX8mGvL6jzIAG8KGI3D84Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:fa:8d:29:d2:b5:69:8a:03:dc:5a:af:11:43:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede5ed457f74382a8ed0b7af686e1adb29352250
        Validity
            Not Before: May 16 10:01:37 2026 GMT
            Not After : May 17 10:01:37 2026 GMT
        Subject: CN=d337484168c029ed6132532b411ba6f95f99e74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d2:51:ee:0b:b9:13:27:05:cf:3d:45:52:fc:
                    8b:1f:39:27:ba:56:23:4d:f7:d5:a6:d0:96:4c:70:
                    cf:22:c5:c1:ab:7f:c2:7d:ed:f3:ad:39:fd:23:de:
                    b7:21:49:16:d6:6e:e0:0f:ef:f3:13:63:e7:3d:83:
                    6e:6e:01:de:06:4f:68:3c:76:ed:ef:54:c8:b7:6d:
                    cc:4b:f4:9b:52:29:6d:b5:a6:68:8b:d8:45:6f:3b:
                    b6:5e:60:a8:73:64:6b:c8:e3:3b:d4:04:1a:c6:88:
                    36:0c:3b:11:f8:3d:87:31:bd:d8:96:db:85:bc:d1:
                    dc:58:f6:53:89:2f:15:44:a7:d1:34:6f:23:82:39:
                    80:70:6c:7b:83:b5:7e:0d:e1:77:a5:88:f4:bb:ae:
                    0f:ac:bb:f1:fc:33:36:fb:eb:29:74:12:fe:14:86:
                    e2:f2:35:1e:7f:7e:b8:6e:c2:94:59:8f:b5:1e:bd:
                    24:d6:f9:d1:3a:f0:69:20:60:93:ed:22:cb:8a:d2:
                    02:eb:01:6d:fe:9f:c6:73:bf:02:33:17:7c:35:e4:
                    d8:c3:8f:7d:fd:61:d1:2a:23:63:d9:da:3d:71:fb:
                    d5:b6:a7:56:97:34:ea:cc:f7:28:63:9b:82:d9:5d:
                    94:bf:ba:be:34:2d:d4:52:72:25:68:0e:1e:c0:7d:
                    4f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:37:48:41:68:C0:29:ED:61:32:53:2B:41:1B:A6:F9:5F:99:E7:4F
            X509v3 Authority Key Identifier:
                keyid:ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:15:50:b3:e6:99:b4:0e:9b:81:d9:39:66:ba:62:bf:ac:cf:
         e2:71:9c:25:df:28:54:ec:40:cb:51:07:22:39:a6:05:9e:17:
         d0:ed:87:40:11:96:77:2a:dd:81:a9:09:59:10:38:4c:b8:61:
         e6:f4:04:3c:e5:47:6c:29:42:a3:ba:85:25:75:68:72:ab:e6:
         36:53:d2:27:e7:c9:a7:02:dd:99:80:fe:85:69:ea:90:18:ed:
         f5:c8:d4:15:c2:96:49:89:77:06:45:90:9d:bf:50:9c:b2:1e:
         34:d8:29:e8:00:9f:ac:5e:fd:e0:53:40:d3:3e:39:11:ff:36:
         22:4e:b5:34:0d:8f:4d:d2:1e:17:1b:b4:0d:f8:09:13:60:86:
         68:54:7a:07:18:5f:8e:a6:60:ec:f1:45:0c:af:5e:92:88:f9:
         50:72:de:53:03:e7:98:52:a3:90:d4:29:1e:b8:af:50:4c:6f:
         31:0d:86:68:fa:67:3e:b5:ec:61:f6:58:5f:ab:5d:0c:f4:24:
         39:21:17:35:1c:f6:91:16:de:54:a3:e6:1a:68:85:4c:d1:6c:
         96:7b:09:9c:fd:9b:51:e5:df:69:fd:7c:f1:10:92:99:79:6e:
         d6:c2:fa:85:ff:27:67:bd:71:ed:c5:22:0b:6f:7b:7b:2e:b4:
         5f:5a:a4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:37 2026 by rpki-client