Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft
File:                     rrcMp77FOQL1z1eeuT7bDZKi-0M.mft (raw, json)
Hash identifier:          DN48zJB7O53S7mdRNoMH47Lv2k/jJvxgdgd/Bdk7TRQ=
Subject key identifier:   08:53:A2:52:45:86:78:99:64:AA:38:AE:D4:60:A8:45:35:63:8C:F9
Authority key identifier: AE:B7:0C:A7:BE:C5:39:02:F5:CF:57:9E:B9:3E:DB:0D:92:A2:FB:43
Certificate issuer:       /CN=aeb70ca7bec53902f5cf579eb93edb0d92a2fb43
Certificate serial:       019DA4F8376DEF7ED0918706F36E82435B6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft
Manifest number:          015C
Signing time:             Sun 19 Apr 2026 09:00:23 +0000
Manifest this update:     Sun 19 Apr 2026 09:00:23 +0000
Manifest next update:     Mon 20 Apr 2026 09:00:23 +0000
Files and hashes:         1: qZ7w8eltwpusgDZDYcyCDOLAgd4.roa (hash: tsflvwgXfYhAOmry/PKXKjcvkUzgCka5jl0JMjyOtdE=)
                          2: rrcMp77FOQL1z1eeuT7bDZKi-0M.crl (hash: K8aKd3wsCN9qXuXxpfHqjIGDoStjHxL2kIDAl3AuiuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 09:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:f8:37:6d:ef:7e:d0:91:87:06:f3:6e:82:43:5b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb70ca7bec53902f5cf579eb93edb0d92a2fb43
        Validity
            Not Before: Apr 19 09:00:23 2026 GMT
            Not After : Apr 20 09:00:23 2026 GMT
        Subject: CN=0853a2524586789964aa38aed460a84535638cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:e2:a1:64:ad:db:63:df:0f:48:dc:f6:7e:
                    18:98:17:8f:3b:a8:26:13:8a:fc:9c:e1:f1:9f:25:
                    85:c9:a4:f2:50:1b:43:3f:03:38:1f:f6:6e:14:65:
                    d8:b1:ed:01:c7:41:f1:b0:22:fd:bc:24:6a:e1:bf:
                    5d:58:d3:52:ad:2b:e0:09:c3:42:84:a3:cd:d3:9a:
                    b3:58:b0:cf:d8:38:df:56:44:c5:ee:2d:17:62:38:
                    3a:76:eb:bf:e9:96:b9:fb:f2:7f:96:de:60:ed:fd:
                    8b:96:60:34:94:f4:33:e1:b9:66:a4:cf:72:ed:17:
                    7e:a0:ed:c3:54:20:0b:01:68:52:a2:53:f7:02:d7:
                    a5:ba:c3:ff:48:45:51:b8:a8:24:f7:64:fd:13:34:
                    08:a6:48:e6:f3:da:9e:94:53:67:53:74:fb:4e:5a:
                    20:f0:ef:c5:fb:54:be:92:da:69:1c:d5:0d:30:b0:
                    97:6c:05:38:11:36:ce:05:48:28:03:ee:c7:a1:52:
                    42:f8:d2:b9:db:93:8d:a0:f6:14:3f:1b:41:63:46:
                    0c:75:18:13:40:80:f0:89:b6:06:ba:48:fa:14:dc:
                    7f:48:ba:a7:54:2a:32:8b:53:0f:1a:d8:62:9e:6b:
                    7b:29:18:71:cc:33:15:b8:b5:20:21:9f:f4:05:39:
                    27:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:53:A2:52:45:86:78:99:64:AA:38:AE:D4:60:A8:45:35:63:8C:F9
            X509v3 Authority Key Identifier:
                keyid:AE:B7:0C:A7:BE:C5:39:02:F5:CF:57:9E:B9:3E:DB:0D:92:A2:FB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a4:64:5a:22:41:bc:0b:c0:d1:bf:14:7e:90:70:86:0d:5b:
         4a:e0:cf:49:20:1c:ff:67:f5:7a:62:08:bc:10:01:8b:6c:a8:
         6d:b3:ca:1e:d4:b8:61:2a:3c:05:20:b3:cd:10:23:28:ea:98:
         2d:bd:ad:51:ea:79:9d:03:cd:79:25:24:6f:cf:dd:dd:38:a6:
         f1:75:51:06:24:35:db:e1:2e:fe:70:0d:2a:a6:26:b8:20:6f:
         7b:40:50:0a:9e:ae:b0:2d:97:f4:87:cf:25:b9:e6:78:5e:99:
         e5:a7:55:37:e0:72:15:42:8c:3d:20:5f:b9:e1:bc:ec:3a:80:
         5d:ad:1a:e1:90:af:78:68:76:4c:0b:a8:d5:6a:31:0d:62:93:
         1b:bb:da:33:4b:fd:16:6b:db:ec:7e:e6:b7:45:e1:9d:9f:b2:
         30:e6:f9:4e:ed:27:c5:dc:7f:e2:31:ff:8e:92:33:a1:64:fa:
         e1:6e:e0:3f:cd:bd:74:b4:b0:c8:17:87:9f:19:dc:be:51:da:
         7d:09:17:82:52:2f:b7:fa:ba:79:e7:4a:b8:7c:3d:70:a2:e9:
         9c:14:fe:d3:cb:9a:3d:8d:b0:5d:c8:2e:96:09:30:2e:f7:41:
         d5:9a:fa:3e:6e:63:b1:2f:fd:fb:c7:87:28:15:ae:c1:19:c5:
         84:e7:b0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 19:19:31 2026 by rpki-client