Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
File:                     7gZE9wYh3Uokp4tntGApSFc3WMA.mft (raw, json)
Hash identifier:          lJfgsBs7+KGGPlwlZjaMPI2DOJ2TClLMSb5DJkzFQf4=
Subject key identifier:   57:E9:9F:11:7F:18:F4:97:F2:B3:3F:87:6D:52:76:C7:D7:A3:96:BC
Authority key identifier: EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
Certificate issuer:       /CN=ee0644f70621dd4a24a78b67b4602948573758c0
Certificate serial:       019E303B375A074A3F0E0A0242EA6F2852D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 10:00:47 +0000
Manifest this update:     Sat 16 May 2026 10:00:47 +0000
Manifest next update:     Sun 17 May 2026 10:00:47 +0000
Files and hashes:         1: 7gZE9wYh3Uokp4tntGApSFc3WMA.crl (hash: bpQ83fGHeN9Xj2TPtmOu3/qbDiox9KtfjrFN7Ihx9GI=)
                          2: Rrw9o3WCpwNOEYYVtK8wHu_QJkY.roa (hash: 6I0ghzBeN79J1UAgpVFm5cx7tXZBN44byXnGOpV99sA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:37:5a:07:4a:3f:0e:0a:02:42:ea:6f:28:52:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0644f70621dd4a24a78b67b4602948573758c0
        Validity
            Not Before: May 16 10:00:47 2026 GMT
            Not After : May 17 10:00:47 2026 GMT
        Subject: CN=57e99f117f18f497f2b33f876d5276c7d7a396bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3d:79:c8:ae:20:e3:5a:eb:5b:fc:c4:39:1a:
                    70:b1:f0:41:5d:d7:1b:fb:9a:47:db:10:f8:88:7a:
                    91:ff:f1:f7:3f:1e:7c:b9:6a:fd:b4:ea:23:ec:24:
                    28:6f:a9:92:8c:52:9c:b1:e0:be:25:46:a5:de:13:
                    6f:ab:42:19:98:b6:77:26:71:e7:4d:d0:36:2b:07:
                    f7:4a:40:aa:5a:a4:a7:be:31:d4:6a:1a:c5:8d:b8:
                    07:55:a0:ce:64:7e:04:6a:7c:e6:a6:77:9a:b7:3c:
                    f6:7e:33:e3:a1:1a:0a:40:8f:1a:2b:42:9f:00:f3:
                    2c:11:d0:fa:d8:97:ed:3f:81:02:f8:38:4d:7f:f7:
                    85:01:ef:85:df:17:2b:f7:f2:ec:f9:a4:7e:06:5f:
                    8d:87:59:48:6d:b8:02:d3:f5:a6:6e:05:0e:ae:50:
                    ff:b9:c1:aa:93:d8:4a:cd:b6:58:ab:69:1f:33:5d:
                    c5:74:ab:53:c9:f1:5f:b6:d0:8a:3e:1c:a2:53:05:
                    2f:8c:dd:0b:53:7e:cd:70:23:1a:d7:91:6b:10:25:
                    a5:47:6b:3f:39:da:b9:10:72:b0:84:8a:7b:26:05:
                    a1:a1:41:52:7d:df:7c:18:09:5a:1b:6a:b6:cd:40:
                    a4:9a:4d:e8:2c:04:89:bb:97:dd:76:42:e3:3d:31:
                    42:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E9:9F:11:7F:18:F4:97:F2:B3:3F:87:6D:52:76:C7:D7:A3:96:BC
            X509v3 Authority Key Identifier:
                keyid:EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:11:e7:77:f9:ca:c6:85:85:42:9a:c6:10:6c:55:2b:26:82:
         ad:ae:40:47:7e:7c:da:0c:7c:32:60:2f:d0:1f:eb:37:1b:8c:
         20:be:34:bf:d1:88:f2:e2:1d:64:40:30:c7:4a:96:5b:3f:5e:
         12:c6:b2:4d:b8:d2:45:80:74:86:37:52:95:0c:e0:35:64:4a:
         18:e7:55:c2:4a:05:84:d7:82:21:be:ec:c0:96:33:39:2e:c6:
         03:7b:88:8a:7f:b5:e9:a3:3e:53:c9:5d:d8:d8:da:90:e2:b7:
         26:0a:25:ea:a5:b0:f6:b8:5d:7d:74:87:d8:4a:cc:49:02:ac:
         71:aa:8b:50:97:18:73:fa:24:31:30:80:5c:46:97:9d:fb:40:
         e8:ea:31:83:ec:f3:d8:9a:25:29:fe:7a:ab:65:e1:8a:fd:ae:
         3b:61:7a:da:68:25:6b:45:8b:5e:7d:6c:19:38:35:16:1e:5c:
         41:56:72:9a:6a:03:f3:1f:33:55:45:7b:d5:28:84:87:29:34:
         fa:45:40:70:1b:de:59:ca:bf:e9:34:a4:20:3d:12:88:5b:6c:
         87:46:a0:c0:b2:ff:3d:ca:ff:26:8f:13:c3:15:a1:75:57:f5:
         85:2c:4a:73:a9:e1:97:46:c4:2c:be:cd:c6:bf:7f:c3:13:ee:
         cc:d8:f3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:35 2026 by rpki-client