Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5d384d-18c2-4f79-9d3d-3fdf09094a51/1/u7euON6JHAQDJ5uC2-qstjgfhUQ.mft
File:                     u7euON6JHAQDJ5uC2-qstjgfhUQ.mft (raw, json)
Hash identifier:          BHtLzZv34LbQ9PLD40nHxlp1uCcaBbb2Wluqb4Tnsqk=
Subject key identifier:   DE:7C:D1:2D:73:AE:74:0E:C2:58:7D:D4:2F:72:DB:3F:B8:05:A2:88
Authority key identifier: BB:B7:AE:38:DE:89:1C:04:03:27:9B:82:DB:EA:AC:B6:38:1F:85:44
Certificate issuer:       /CN=bbb7ae38de891c0403279b82dbeaacb6381f8544
Certificate serial:       019E29CC31CCB713372806EFA3A95520007A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u7euON6JHAQDJ5uC2-qstjgfhUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/5d384d-18c2-4f79-9d3d-3fdf09094a51/1/u7euON6JHAQDJ5uC2-qstjgfhUQ.mft
Manifest number:          10
Signing time:             Fri 15 May 2026 04:01:48 +0000
Manifest this update:     Fri 15 May 2026 04:01:48 +0000
Manifest next update:     Sat 16 May 2026 04:01:48 +0000
Files and hashes:         1: u7euON6JHAQDJ5uC2-qstjgfhUQ.crl (hash: 6birkIF96WKugYgVFZXxWu6LKqVAit4/jJfu+DYgkLI=)
                          2: wg1O8vMF1P6kKYtc3YbGaLBGZjM.asa (hash: 3HW2lixoyp5LUue87EGbUO+5KrIbwiw5awXC4QOWbsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/5d384d-18c2-4f79-9d3d-3fdf09094a51/1/u7euON6JHAQDJ5uC2-qstjgfhUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/5d384d-18c2-4f79-9d3d-3fdf09094a51/1/u7euON6JHAQDJ5uC2-qstjgfhUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u7euON6JHAQDJ5uC2-qstjgfhUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:cc:31:cc:b7:13:37:28:06:ef:a3:a9:55:20:00:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbb7ae38de891c0403279b82dbeaacb6381f8544
        Validity
            Not Before: May 15 04:01:48 2026 GMT
            Not After : May 16 04:01:48 2026 GMT
        Subject: CN=de7cd12d73ae740ec2587dd42f72db3fb805a288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:00:08:f5:97:b8:64:68:33:77:b0:99:2b:65:
                    97:7a:ae:a5:99:3d:e1:22:bd:d5:f1:8d:8f:f7:d1:
                    39:aa:9b:f6:e7:67:dd:64:17:db:71:0f:de:3a:48:
                    85:d2:92:ae:46:40:35:2b:db:be:bb:2a:23:84:39:
                    21:8d:a9:95:fa:9b:52:9a:4d:9a:6c:3a:08:3c:85:
                    28:87:50:5a:d9:fb:f7:89:b0:95:53:ca:60:22:20:
                    e0:04:30:f3:97:69:4e:02:26:6a:6f:e2:5e:09:5f:
                    7c:9a:8c:93:a6:5f:7c:da:f7:d2:f7:40:a7:51:17:
                    7d:dd:10:95:6c:58:4f:9d:9c:2e:75:85:5a:c2:7e:
                    da:d1:ea:1b:07:09:12:c2:e3:76:78:de:2a:20:ad:
                    6b:a7:01:28:af:24:7d:fd:dc:de:0f:30:34:63:03:
                    e3:e6:97:15:5b:44:09:ad:30:04:29:a1:03:fe:ca:
                    7e:42:1a:a3:44:d2:40:57:f3:5c:ad:a3:d0:3c:08:
                    28:69:c0:4a:a2:30:2c:cd:be:c3:d7:b3:ea:3c:61:
                    56:3e:fc:74:9f:23:0a:da:9a:ff:75:df:04:62:55:
                    b4:9a:e3:94:43:8c:ec:e5:7b:c1:2f:7c:36:99:6b:
                    24:55:65:10:b9:bb:29:9f:80:f3:4b:6f:c0:3e:4a:
                    d9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7C:D1:2D:73:AE:74:0E:C2:58:7D:D4:2F:72:DB:3F:B8:05:A2:88
            X509v3 Authority Key Identifier:
                keyid:BB:B7:AE:38:DE:89:1C:04:03:27:9B:82:DB:EA:AC:B6:38:1F:85:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7euON6JHAQDJ5uC2-qstjgfhUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5d384d-18c2-4f79-9d3d-3fdf09094a51/1/u7euON6JHAQDJ5uC2-qstjgfhUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5d384d-18c2-4f79-9d3d-3fdf09094a51/1/u7euON6JHAQDJ5uC2-qstjgfhUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f7:57:ae:85:ce:67:e6:63:95:3a:45:c3:88:57:3c:b2:a9:
         ee:0c:81:71:eb:56:48:e1:6d:32:07:2a:bb:81:c6:45:52:4f:
         0a:37:73:39:6f:b1:1e:87:8a:9b:aa:ad:ff:d4:d9:d4:2c:88:
         c7:58:9a:21:51:e8:33:e2:1a:fc:64:10:49:b0:7f:ff:ad:20:
         b4:37:af:ae:a1:de:b4:4c:0d:2a:3a:ce:72:fb:ac:a6:92:9d:
         65:58:49:cd:62:46:56:32:1e:2c:e2:a0:8b:b5:3f:df:65:7c:
         d3:32:2f:db:bd:40:5b:f1:13:4e:89:b4:f3:b4:7e:e1:4e:c7:
         27:ec:c4:bb:f3:52:7b:d8:7c:52:98:cc:3e:15:d4:03:66:37:
         73:ed:66:af:45:5e:1b:38:17:f5:19:95:b4:12:22:3a:83:10:
         9a:6e:a7:b3:b7:b2:b8:ee:cc:ea:54:03:37:f7:6d:22:60:c9:
         b7:f6:19:69:a2:3c:d2:d6:70:73:bc:e2:35:02:82:ea:70:e1:
         3b:67:ed:97:ae:f9:a6:e3:6d:d5:a9:14:4a:89:5d:22:46:27:
         8d:52:af:9d:4c:28:f8:a1:d1:ec:28:c2:cc:ed:47:fa:73:e6:
         37:26:47:ff:39:d4:9d:a6:e9:31:00:a8:91:e2:22:3d:e4:05:
         6d:74:5c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:14:38 2026 by rpki-client