Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
File:                     7LLMRABmS6sLCRvDmYwN4f73FZs.mft (raw, json)
Hash identifier:          nemz2vPBTSGQHCckUiOEqkvbzGf3wQdvfacMALRcKi8=
Subject key identifier:   70:56:70:D1:4D:42:25:08:A7:C7:37:82:DA:33:36:C9:F2:4D:90:34
Authority key identifier: EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
Certificate issuer:       /CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Certificate serial:       019E2F9747D03B0C05622A6FEB344BF71AB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
Manifest number:          12D7
Signing time:             Sat 16 May 2026 07:01:43 +0000
Manifest this update:     Sat 16 May 2026 07:01:43 +0000
Manifest next update:     Sun 17 May 2026 07:01:43 +0000
Files and hashes:         1: 7LLMRABmS6sLCRvDmYwN4f73FZs.crl (hash: hDzFha3UYeDM22Mt4EjXws5WJAUpqPt1RHJvyd6d6L4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:47:d0:3b:0c:05:62:2a:6f:eb:34:4b:f7:1a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
        Validity
            Not Before: May 16 07:01:43 2026 GMT
            Not After : May 17 07:01:43 2026 GMT
        Subject: CN=705670d14d422508a7c73782da3336c9f24d9034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:df:38:e8:32:62:00:f2:ba:0f:5b:24:d0:cc:
                    55:3e:d8:7a:e0:82:0a:c5:a7:4a:1c:c0:66:20:d6:
                    46:1d:e3:cb:c4:36:90:18:46:33:dc:ed:fd:5a:c3:
                    ca:8b:48:0c:16:4b:51:cb:85:51:f5:78:87:02:95:
                    87:ce:3f:81:93:77:6c:03:4e:43:eb:a7:56:da:bf:
                    03:a5:81:60:26:65:7a:3b:2e:27:2d:a2:fe:fa:de:
                    c4:2e:64:f8:27:cd:7f:14:00:04:c1:d3:6d:15:dd:
                    c5:ba:0e:7f:1c:34:26:5d:83:5f:ac:ba:b4:38:34:
                    8b:f7:c1:09:4f:46:93:77:6f:91:0b:f8:b5:7b:b2:
                    7f:1c:e9:ad:84:ac:f4:ad:91:66:6f:72:22:2c:f2:
                    9c:3a:5a:df:5b:31:da:13:76:ce:63:5f:9c:5a:78:
                    2f:f2:ad:d1:b2:2d:fa:de:19:ad:ca:a6:f5:e8:8e:
                    5a:21:a3:ce:8f:72:0a:07:33:8b:73:70:e4:e1:a1:
                    45:25:f9:11:b8:c5:c2:42:1b:f7:e8:95:a0:2a:41:
                    54:67:79:75:86:55:09:a2:c1:bf:4a:91:35:61:d3:
                    ea:d1:65:aa:f4:d2:61:b3:62:45:d4:f9:2d:f9:b0:
                    bd:36:92:01:24:72:54:f5:05:58:87:00:fa:41:dd:
                    27:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:56:70:D1:4D:42:25:08:A7:C7:37:82:DA:33:36:C9:F2:4D:90:34
            X509v3 Authority Key Identifier:
                keyid:EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f3:b9:c2:d1:f3:5c:6a:17:97:97:d1:aa:c7:23:c5:ad:86:
         d4:c2:d6:22:74:3b:30:4d:b5:5a:b9:4f:19:71:ba:8a:5f:9e:
         e5:23:ca:43:72:17:e1:18:7a:43:6e:cd:23:29:66:65:8c:cc:
         81:b3:68:14:3b:55:db:b3:aa:24:dd:a7:ab:69:b0:a2:91:02:
         35:e7:a7:4a:29:13:2e:82:bd:21:ed:79:8f:8e:ce:62:78:13:
         6c:e2:4d:37:73:de:4c:41:c3:c9:52:8d:35:f8:40:55:31:0a:
         d8:3b:79:34:f1:dc:84:a7:fa:e8:b2:17:a5:75:79:95:62:6c:
         b8:19:c3:7f:83:74:67:fd:e4:a6:1d:6e:3a:fb:c1:f8:10:dc:
         52:46:42:4f:2f:00:81:c7:5a:8f:2a:32:f9:96:72:ac:f8:ff:
         68:51:7d:f1:95:f0:1c:87:5f:8f:43:28:39:f0:68:41:e7:7c:
         3c:d5:5f:67:c0:79:f1:65:30:ca:89:89:db:51:98:0d:3a:7b:
         52:d6:5a:f4:a6:1d:16:e4:78:b5:f0:0a:2a:19:b8:0b:d0:cc:
         16:d0:c6:8b:26:f5:b9:cc:63:80:b9:4b:f8:ef:83:22:c6:d5:
         0f:8b:76:ed:b1:e9:86:6d:d4:a7:3b:cf:e6:ba:61:e6:0a:67:
         99:d7:c9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:16 2026 by rpki-client