Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
File:                     7JjcJavXq2PjW2KOqsKlTZSan0Y.mft (raw, json)
Hash identifier:          zuM7OCD12PRDl6648JeXTfC1ebECesOrI9Zkucj7B6Q=
Subject key identifier:   7B:31:AB:A4:59:7E:DF:86:7C:82:CD:A9:40:1B:B7:78:08:7B:AA:13
Authority key identifier: EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
Certificate issuer:       /CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Certificate serial:       019E2F96459030295087BD1D94578576F057
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
Manifest number:          0C93
Signing time:             Sat 16 May 2026 07:00:37 +0000
Manifest this update:     Sat 16 May 2026 07:00:37 +0000
Manifest next update:     Sun 17 May 2026 07:00:37 +0000
Files and hashes:         1: 7JjcJavXq2PjW2KOqsKlTZSan0Y.crl (hash: iFZdYtppAax+J5ObcMqXQrjridKxsewQwcDa32+avDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:45:90:30:29:50:87:bd:1d:94:57:85:76:f0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
        Validity
            Not Before: May 16 07:00:37 2026 GMT
            Not After : May 17 07:00:37 2026 GMT
        Subject: CN=7b31aba4597edf867c82cda9401bb778087baa13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:2d:a9:46:c6:ea:f9:fe:6b:09:72:b4:b9:
                    d3:05:c1:ac:5e:ff:d8:c0:f1:87:c6:ab:5c:08:20:
                    b1:4a:46:67:28:3d:ab:8a:ae:5e:19:04:35:d9:2c:
                    10:1b:8c:2f:e4:c8:1c:eb:33:0e:3b:49:37:31:53:
                    6e:81:46:e7:05:6c:f1:6e:f5:3b:c7:14:9d:57:50:
                    37:10:94:33:bd:72:21:5a:de:89:fe:00:48:00:52:
                    af:57:d4:7c:2e:07:a0:76:6d:fa:35:a2:20:f0:c8:
                    ab:9c:ae:fb:84:f7:e7:36:48:dd:5e:3b:d7:75:45:
                    b6:6b:d6:a7:80:d4:3f:fd:3b:dd:2e:ec:0a:3d:7f:
                    6b:eb:ff:bb:f6:32:af:62:08:22:c1:79:f9:75:d2:
                    2f:43:36:bb:80:12:95:bb:65:8d:e2:cb:25:ca:a4:
                    97:7c:b0:3b:1c:c2:bf:7e:a9:89:fc:40:51:4e:31:
                    99:0c:cd:c0:b7:7e:8e:a9:0c:3a:68:bc:17:cf:41:
                    5e:0b:7f:07:fe:24:e0:03:67:15:70:02:dc:ea:ff:
                    09:b4:73:17:b9:46:ac:aa:0c:8e:86:59:6c:16:8c:
                    ad:bb:a7:7c:8b:b0:c4:6a:94:95:98:49:9b:0f:51:
                    36:a4:01:5c:ba:93:3b:2d:a8:07:9e:b5:73:a9:a2:
                    9a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:31:AB:A4:59:7E:DF:86:7C:82:CD:A9:40:1B:B7:78:08:7B:AA:13
            X509v3 Authority Key Identifier:
                keyid:EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c8:78:60:7e:4e:cf:93:27:65:1f:96:51:81:5b:3e:e5:f8:
         f5:75:02:2e:f6:52:89:b6:e9:59:1c:b8:c5:49:09:aa:d9:e0:
         5a:96:a7:89:57:db:f6:c0:a5:dd:75:53:63:72:ca:0e:99:65:
         b0:4b:e9:db:d5:ad:ba:fe:d6:62:f3:9a:80:eb:fd:74:b4:ff:
         88:c6:4e:ac:84:b1:74:c0:e1:4e:7a:29:7c:90:90:cc:97:ab:
         10:b5:0c:d6:74:8b:1b:fd:8c:f9:ef:5f:96:e3:8a:9d:40:7a:
         06:7a:93:31:c9:f3:3d:c1:bc:0f:f3:0e:6e:95:9e:e4:18:51:
         48:9a:7c:4e:70:5e:e7:53:1e:de:0d:f9:78:aa:42:10:24:0e:
         0e:ac:8b:fe:10:7b:2b:a7:b7:2e:5e:c0:43:41:8f:b9:70:f9:
         ee:58:97:d5:67:17:d3:d6:9f:7e:d7:ec:73:b7:8b:70:3c:74:
         62:5f:e7:b0:83:47:33:07:1b:75:84:d9:94:71:97:80:fc:64:
         9b:a9:9d:1b:2b:b5:95:29:3c:2b:98:e3:62:66:db:fd:4f:23:
         40:bf:3f:63:81:24:9b:c7:07:67:1e:a0:06:78:ed:b3:6c:75:
         80:ba:f7:9b:f9:53:4f:28:61:2b:3c:68:e9:36:a5:39:41:58:
         f9:58:6b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:53 2026 by rpki-client