Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
File:                     Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft (raw, json)
Hash identifier:          3KySbcZweluDqI8sQpqVVMQs9/gWKny+G1QL+HRbcs4=
Subject key identifier:   63:77:FA:35:AA:9A:8E:8A:63:33:1B:A2:79:EF:3F:69:77:45:98:75
Authority key identifier: 13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D
Certificate issuer:       /CN=132e1e484fca8e9528df6ac1483056c88786771d
Certificate serial:       019D97E1D995FE5F7B71A4EB4D8ABEF9BB9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
Manifest number:          0F8B
Signing time:             Thu 16 Apr 2026 20:00:54 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:54 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:54 +0000
Files and hashes:         1: Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl (hash: 9kWpFNi9Pi+DnEIZK6rNcHVyncMypNRkg5QSAVWgXL4=)
                          2: xf_QUU1oboJfw8GDN5-xVx0M_-E.roa (hash: rDjY7MiBuFT4JV2RH/A0NQJ6KgI0D96lXBHlUo5cGuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:d9:95:fe:5f:7b:71:a4:eb:4d:8a:be:f9:bb:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132e1e484fca8e9528df6ac1483056c88786771d
        Validity
            Not Before: Apr 16 20:00:54 2026 GMT
            Not After : Apr 17 20:00:54 2026 GMT
        Subject: CN=6377fa35aa9a8e8a63331ba279ef3f6977459875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:62:21:20:73:2a:8c:4c:d1:b0:ac:a2:cb:2d:
                    a9:74:f6:3b:77:3d:75:09:33:c8:80:2f:64:f3:35:
                    8a:2f:6c:6a:f6:4f:7d:2c:cd:cf:1d:6e:1c:b3:0e:
                    a9:6c:aa:46:29:0a:2b:63:0a:f5:9f:7a:4f:36:ab:
                    3f:bb:0b:70:07:23:0e:d1:c7:08:b8:fa:d1:9e:95:
                    0c:55:32:d6:80:a7:43:60:db:b1:e9:51:46:10:51:
                    27:26:17:ea:03:ab:64:46:d9:f3:03:d3:83:01:44:
                    04:20:43:b6:b1:c5:f2:36:8a:f8:fa:ff:af:cf:34:
                    fa:b6:f5:f1:70:ff:bf:ab:c6:6e:b9:0c:31:77:23:
                    f7:b1:fe:ad:24:e0:2e:ea:09:0c:41:06:b7:0e:20:
                    93:35:df:ed:9b:16:67:05:5a:b5:5b:e8:2b:ec:fa:
                    83:a2:0d:66:f8:d3:cf:8f:f9:7b:36:16:bf:b5:0f:
                    8b:db:dd:ff:1d:8d:ec:19:61:96:7b:70:3a:2b:c6:
                    01:a2:cf:8f:23:e4:95:aa:cc:b1:bf:24:a8:59:40:
                    8c:ea:d4:35:d6:4f:fb:80:35:9f:f9:c8:00:04:8e:
                    05:fe:a0:80:6d:33:be:22:26:2e:e5:63:29:e0:3f:
                    5b:54:ff:ea:c7:1f:46:8b:4b:4d:74:e1:eb:e2:92:
                    ec:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:77:FA:35:AA:9A:8E:8A:63:33:1B:A2:79:EF:3F:69:77:45:98:75
            X509v3 Authority Key Identifier:
                keyid:13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d5:d4:bf:99:96:34:da:00:b3:75:a2:7b:cb:72:a7:61:a8:
         12:ac:c1:e5:72:82:a5:fb:ac:ac:d8:c4:ec:a8:f8:01:d7:f7:
         96:14:c8:1b:a3:86:69:29:0f:d2:ce:ba:40:a1:74:89:c6:50:
         1a:4d:17:36:dc:29:c1:81:5b:69:1f:f6:f8:e3:67:01:0c:c6:
         da:fb:c2:81:9a:fd:14:f9:b3:c2:c3:c2:cd:62:76:5e:2e:9d:
         f3:57:1f:a4:7c:ac:2f:44:0d:73:61:b8:4e:d5:63:3e:3f:38:
         96:50:af:a8:6d:a1:20:3c:5e:81:2e:89:07:9c:07:35:f2:76:
         91:14:ed:9d:30:5f:f6:66:bf:10:26:19:68:29:ea:e7:03:53:
         65:92:e1:6b:2c:bc:ca:14:7d:6e:68:0f:1d:2d:e6:97:a7:bc:
         a7:6d:19:3c:39:eb:56:e9:a6:24:86:4f:cb:b2:94:a8:b0:36:
         c3:9b:04:ae:9f:48:6b:7f:69:7b:04:10:ab:52:7c:4b:c6:48:
         29:8a:97:5e:fe:4d:5a:e5:a9:58:08:88:9d:4c:57:42:f9:c0:
         88:e3:b9:b2:8e:ef:6f:f2:63:41:46:b9:9b:fd:c2:c7:32:31:
         bd:dd:4a:58:0b:d3:6a:d6:8d:96:c6:e0:fc:04:7b:2e:01:cb:
         8c:b6:a5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:40:40 2026 by rpki-client