Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
File:                     p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json)
Hash identifier:          7W1DOOD6NysnPVHS7NVG36LPUjmfjGeCSASDIrv1moQ=
Subject key identifier:   E5:2A:C6:D3:6C:E8:79:44:28:F9:35:FA:98:F8:C6:4E:3F:87:7D:D5
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Certificate issuer:       /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial:       019ECD4E16AE7B7C2000CF254BDD86077A51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
Manifest number:          1672
Signing time:             Mon 15 Jun 2026 22:01:47 +0000
Manifest this update:     Mon 15 Jun 2026 22:01:47 +0000
Manifest next update:     Tue 16 Jun 2026 22:01:47 +0000
Files and hashes:         1: 2U0mDkF6k188FlI68TZ1uJWmy1k.roa (hash: 7JEOUa3UIN+/J9E0Zd5VhYU2fI+uSkBnOTYRU58DUPc=)
                          2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: M+/UGW190wVKvVzGbi2t7UJT4Tchr0qp5rlTx04pFUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Jun 2026 22:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:cd:4e:16:ae:7b:7c:20:00:cf:25:4b:dd:86:07:7a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
        Validity
            Not Before: Jun 15 22:01:47 2026 GMT
            Not After : Jun 16 22:01:47 2026 GMT
        Subject: CN=e52ac6d36ce8794428f935fa98f8c64e3f877dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:d1:5c:0a:ce:a6:3e:0f:88:7f:d3:14:a3:
                    ee:6d:1f:9b:49:4f:34:a9:0e:d2:ab:ac:9e:cf:b7:
                    2f:f6:97:a8:cc:b9:ae:39:ea:e0:e1:78:13:c8:8b:
                    7c:af:8a:ea:e6:15:91:66:81:d9:a1:8e:5a:ab:77:
                    08:dd:3f:01:b1:47:f9:07:58:dc:5f:cc:2e:c7:19:
                    12:17:8b:e6:90:76:29:b1:57:09:17:94:d7:4f:13:
                    ef:16:0f:99:ef:71:6d:fc:e8:d6:c6:0e:e1:e2:44:
                    67:e7:75:70:3e:8a:75:b8:57:61:83:b0:56:3a:92:
                    8d:3a:c2:8e:80:43:70:2e:41:39:dc:cc:8b:82:48:
                    60:c6:b5:a5:5c:89:78:cb:9f:41:4b:23:75:3e:24:
                    ec:2a:67:f2:82:4a:4f:56:cb:37:db:ec:51:02:33:
                    f8:45:ac:65:f8:09:69:91:44:44:8e:26:78:7b:e6:
                    97:ff:e8:63:f5:02:68:17:8d:59:0d:41:9c:7b:0a:
                    38:f1:73:c3:e5:b5:e1:e7:53:b1:24:2b:28:0a:f9:
                    40:7c:29:fe:a3:c6:c0:22:54:aa:9d:ae:ec:25:df:
                    b1:71:b8:10:b7:ec:b5:88:77:d3:3b:d9:45:50:f3:
                    1d:25:8f:7f:44:76:56:0a:7d:04:2d:25:88:ee:58:
                    e9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2A:C6:D3:6C:E8:79:44:28:F9:35:FA:98:F8:C6:4E:3F:87:7D:D5
            X509v3 Authority Key Identifier:
                keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:15:ce:ba:ed:2f:40:9c:92:71:a9:eb:bb:af:36:b8:72:18:
         9e:c7:19:39:34:a6:6d:f9:a4:3f:db:57:61:8f:b4:d9:00:c1:
         af:48:f0:3d:e8:c2:45:d4:3a:a5:23:43:01:f0:47:2d:18:74:
         01:50:f9:b2:8e:4f:5c:3e:f4:22:a0:c0:f7:38:ff:5d:af:a9:
         ae:73:3a:26:7a:3b:11:e7:34:dd:96:6b:80:d1:b4:4f:75:bb:
         2f:ec:cf:53:3f:9c:12:d5:48:7e:f4:5f:a7:55:13:ff:6c:ad:
         b7:d8:81:60:0a:e1:f8:a9:67:f1:d2:32:66:31:49:33:41:5c:
         42:24:ec:fe:71:65:a7:6b:fe:75:e8:e6:13:b0:55:44:d8:de:
         b2:40:f5:90:9f:04:ab:a8:d1:87:85:28:ec:fc:ea:f7:5e:03:
         b0:00:5d:2c:ae:14:e5:97:15:8e:a7:e2:f4:80:0b:74:7d:bb:
         ea:5f:bf:e7:2d:d7:39:52:c7:f7:be:dd:4e:17:e6:32:2e:10:
         2e:3b:54:a9:8f:47:f9:d8:e0:cd:a1:d7:30:f6:37:3a:23:42:
         f1:7a:fc:df:1e:34:39:c0:4e:51:10:74:a5:23:e3:c1:1b:3f:
         83:1b:2b:af:c7:fa:25:b2:44:de:ce:d4:46:68:27:10:b5:33:
         58:df:5a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 03:46:36 2026 by rpki-client