Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
File:                     7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft (raw, json)
Hash identifier:          Hlik2uNYZS+ZU7HKI4T3mtCZxfuUKSrKNv6u8sAdtTM=
Subject key identifier:   54:7E:E7:E8:B1:97:51:EA:84:DC:67:47:C3:EC:45:B7:F5:2A:B1:7B
Authority key identifier: ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57
Certificate issuer:       /CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857
Certificate serial:       019E3004CBECD134A7F965E4170436480025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
Manifest number:          189F
Signing time:             Sat 16 May 2026 09:01:21 +0000
Manifest this update:     Sat 16 May 2026 09:01:21 +0000
Manifest next update:     Sun 17 May 2026 09:01:21 +0000
Files and hashes:         1: 7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl (hash: IvTMeU+l6Vru9UBZGqqWDGtLFz9CAqiZTRqSWMhUAzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:cb:ec:d1:34:a7:f9:65:e4:17:04:36:48:00:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857
        Validity
            Not Before: May 16 09:01:21 2026 GMT
            Not After : May 17 09:01:21 2026 GMT
        Subject: CN=547ee7e8b19751ea84dc6747c3ec45b7f52ab17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:14:40:d2:91:f7:3e:66:1c:72:0d:38:c0:fe:
                    7f:c0:71:cd:5a:98:f7:7b:c3:3b:76:e1:2e:1c:ea:
                    98:84:33:63:b1:cb:57:7c:12:d0:d1:73:75:a7:ee:
                    a7:70:5e:29:0d:79:ee:de:a1:66:86:c4:ce:33:d4:
                    a5:8e:22:4c:41:0e:8a:9c:bb:c5:b5:78:55:7b:c4:
                    9f:12:64:26:67:2e:23:07:f6:95:96:fc:be:0b:fb:
                    74:fc:21:fb:fd:f2:6e:a9:d7:70:92:c5:21:0b:25:
                    64:a2:fc:8e:2e:57:f7:45:59:ac:72:ab:44:36:1e:
                    6d:21:eb:57:6f:53:97:25:be:5a:3b:6a:16:5a:86:
                    9f:19:5c:33:eb:b1:dc:6c:b5:89:e6:d5:20:87:b1:
                    0b:8f:a9:33:4e:89:aa:30:a8:92:9c:ba:bd:c8:98:
                    0c:6f:02:18:be:31:02:1d:31:34:38:cc:96:9e:8c:
                    6e:f5:a2:be:4f:8d:8e:cc:7d:78:ad:87:9d:39:d1:
                    c7:ce:2e:73:75:cb:69:b4:f6:22:0d:ce:ec:7c:40:
                    c1:7b:19:ae:a7:7b:b6:e9:9c:dc:c5:ec:cf:62:72:
                    d0:d7:f0:91:69:2f:9f:73:b5:c2:98:00:bf:63:2f:
                    a7:f6:d3:85:c4:54:72:0e:a7:40:2f:c2:64:69:7f:
                    29:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7E:E7:E8:B1:97:51:EA:84:DC:67:47:C3:EC:45:B7:F5:2A:B1:7B
            X509v3 Authority Key Identifier:
                keyid:ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:65:d6:cb:c1:41:e8:78:fd:fe:cb:fc:15:03:82:b6:9a:2b:
         34:58:00:54:1f:74:44:07:fb:4c:52:bc:bd:f9:93:2e:44:c8:
         f1:17:17:cb:da:ae:a1:09:7f:0a:fa:40:5e:9e:d0:ec:92:39:
         56:7f:e8:20:29:3e:2d:67:b4:23:54:8d:51:44:5d:6a:7e:a2:
         91:54:69:2f:34:56:e2:9c:95:fb:6c:5d:f6:7d:12:cf:57:da:
         08:0f:21:70:3c:3f:ee:84:f2:0f:d3:0e:ed:3c:96:47:fc:c2:
         35:6c:20:9c:56:bf:f9:98:60:91:4e:c6:b9:81:75:bb:9c:c5:
         6a:7d:29:8b:da:95:27:47:e5:16:60:24:91:b7:c2:ff:ab:88:
         38:14:27:8b:7c:97:27:32:b6:3c:2a:93:0b:26:36:9b:e8:06:
         9a:0a:49:65:47:a6:62:17:c6:cf:9a:ac:aa:13:34:31:73:3e:
         30:0a:ae:bb:c7:69:56:f4:cd:7f:e8:f1:7d:dd:f9:2c:17:ff:
         a9:1d:01:ea:2f:13:c5:40:2a:68:82:a8:bc:cb:e4:29:66:4c:
         0d:8a:c9:64:f8:21:08:45:92:bf:16:cb:38:7a:3b:5b:fa:3a:
         ba:ae:1c:21:f5:c2:d0:b0:4b:ad:1f:2c:11:89:da:9e:f0:54:
         d6:99:4c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:37:28 2026 by rpki-client