Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
File:                     7jd-2foR7BmVVVl2LeBHpabrFKg.mft (raw, json)
Hash identifier:          Y/fL3pUUfujRqryEtXurt8RS7NtVIj3NGvN/QkTwJ24=
Subject key identifier:   D3:32:02:7A:1F:13:E6:82:77:5F:52:F8:40:02:CE:FB:26:CF:0B:61
Authority key identifier: EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
Certificate issuer:       /CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Certificate serial:       019E314E5BC7F809FAF17921B1C34A2B5C1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
Manifest number:          0EA9
Signing time:             Sat 16 May 2026 15:01:19 +0000
Manifest this update:     Sat 16 May 2026 15:01:19 +0000
Manifest next update:     Sun 17 May 2026 15:01:19 +0000
Files and hashes:         1: 7jd-2foR7BmVVVl2LeBHpabrFKg.crl (hash: hKAYwZHx7ARL3OnRLKC+1uJdz/0PG4utrql0Hgcg0Ac=)
                          2: j6vNoMCJY2rJNTcFiFrK6BxceW0.roa (hash: Qbby+Zxos/Xwy+CO76y4SUXqNg4YubZrm7ece+VByCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:5b:c7:f8:09:fa:f1:79:21:b1:c3:4a:2b:5c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
        Validity
            Not Before: May 16 15:01:19 2026 GMT
            Not After : May 17 15:01:19 2026 GMT
        Subject: CN=d332027a1f13e682775f52f84002cefb26cf0b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5f:95:be:78:4f:16:33:af:ef:c2:44:50:55:
                    45:11:b0:ae:8d:8b:c3:c6:23:24:5f:54:a9:00:95:
                    c2:be:36:b8:b2:d3:41:92:e8:d5:3d:3a:1f:a0:eb:
                    9b:b2:82:1f:a6:1d:43:e8:ad:69:41:2b:35:5b:63:
                    5a:f6:46:3b:51:7f:d0:d3:1d:03:fd:e0:a6:d9:e2:
                    55:71:31:ad:a6:cb:9c:b8:69:95:c7:c5:47:0e:fb:
                    1f:09:38:c7:bf:e4:4f:4e:07:06:5d:b1:20:e7:14:
                    ac:8c:ae:fa:f2:78:4e:76:4f:70:0d:56:06:8a:bd:
                    4a:6c:b3:72:53:d8:1b:cf:d7:fa:30:32:b8:a9:d6:
                    62:96:36:fa:0b:99:03:2a:52:e3:07:4f:48:9d:ee:
                    2c:07:df:20:16:8d:90:c4:f9:1d:c6:b0:02:a7:0e:
                    74:a0:c8:c0:d8:66:a7:c3:be:5e:db:90:93:93:62:
                    82:56:54:ba:64:98:c7:89:29:8d:48:82:e8:79:13:
                    35:db:6a:31:dd:97:fc:01:7b:24:78:5f:78:0d:08:
                    4e:3b:59:16:79:43:1a:db:b5:f7:c3:9f:09:de:93:
                    7d:1b:d6:02:6f:fc:e9:4a:4f:80:94:21:3c:d0:ba:
                    e3:59:3a:79:83:00:5d:ca:41:b7:c5:46:87:c3:db:
                    e4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:32:02:7A:1F:13:E6:82:77:5F:52:F8:40:02:CE:FB:26:CF:0B:61
            X509v3 Authority Key Identifier:
                keyid:EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:63:51:bc:0f:4e:eb:fd:8c:8c:58:3d:1d:0d:e7:eb:21:c3:
         51:61:e2:ec:6e:9b:97:5f:fb:eb:07:00:37:86:35:00:21:5f:
         74:d3:5f:a4:8a:83:f0:0b:99:12:98:e4:97:2c:bf:de:c3:31:
         8e:4c:00:11:6a:9f:97:c2:b8:d9:70:2d:28:f4:8e:68:6b:e6:
         5c:1c:66:cf:48:e2:db:cf:18:71:f6:1f:c0:bb:b7:08:c8:3b:
         61:ca:29:4e:cf:9a:25:dc:87:4d:ed:b5:67:ff:e9:20:4a:9e:
         b1:d9:5e:b2:7c:70:10:65:08:41:3f:d1:fb:ab:ce:03:43:f7:
         ee:72:3d:c8:06:7d:4a:0a:e4:b9:98:93:14:cb:07:d9:06:1d:
         5a:6a:a8:92:f8:de:ee:9d:55:b5:33:30:5c:e5:b6:f6:36:67:
         07:a3:2e:f8:1c:8d:9f:e3:8b:a6:31:fa:7c:17:df:ee:ae:85:
         84:23:de:19:e4:ec:86:42:16:62:40:cc:d2:09:e2:8a:32:8f:
         1a:28:b4:ec:bc:39:92:83:4f:db:e3:ab:4b:1f:8b:1d:d9:a9:
         50:83:ff:2c:32:c7:c6:3b:2e:ef:56:50:eb:ac:5f:1d:a8:2f:
         af:39:45:0a:24:99:4e:18:54:76:3d:68:9f:c4:df:08:67:1f:
         5f:53:6b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:37 2026 by rpki-client