Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
File:                     ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json)
Hash identifier:          dLL5qvxffkSvsGktY0KE1BFVbyWOJofuj4sKvdX2hto=
Subject key identifier:   9C:55:98:D6:85:F3:E9:9A:EB:75:14:1C:8F:11:F5:FC:73:A6:CE:57
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Certificate issuer:       /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial:       019D9962679D2723655E198274159A0CE654
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
Manifest number:          14D1
Signing time:             Fri 17 Apr 2026 03:00:56 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:56 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:56 +0000
Files and hashes:         1: L_eXFdCQUF-9eDxelAnxZKL6wnQ.roa (hash: 7d4nHmuLNm2MvlXBb1jvivzyW1JkmgHoj/AiRQe6d+Q=)
                          2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: adW8Ji7gn8i31jqL6Q5amMJTygpBGcLPlzftw4RQHu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:67:9d:27:23:65:5e:19:82:74:15:9a:0c:e6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
        Validity
            Not Before: Apr 17 03:00:56 2026 GMT
            Not After : Apr 18 03:00:56 2026 GMT
        Subject: CN=9c5598d685f3e99aeb75141c8f11f5fc73a6ce57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1c:69:e3:6e:f5:2e:40:1d:30:6a:e9:eb:20:
                    ba:04:7f:83:6d:3e:3b:09:d8:59:b8:fe:48:c5:fb:
                    55:db:93:83:ac:5d:31:8a:39:55:05:b3:20:56:5a:
                    e8:ef:68:09:fa:3e:8e:3e:ee:39:1e:a5:b0:26:02:
                    11:e5:6a:06:3a:12:14:29:c1:ac:e9:91:18:0b:ba:
                    b9:5d:a6:55:10:21:81:e2:68:26:85:25:9e:81:a5:
                    75:9a:94:c3:3d:8e:87:ba:4d:65:13:e8:39:1f:98:
                    e2:d5:24:95:db:6d:56:ea:77:be:fe:cd:9f:8a:6c:
                    d5:41:ab:a3:df:ba:6e:a3:9f:6c:d3:d0:16:36:ec:
                    06:b3:83:df:9b:a5:09:30:22:39:32:d7:c3:ce:8e:
                    56:d7:b8:6b:90:f4:84:6f:a2:71:64:5a:25:91:2e:
                    a8:f5:f5:93:75:7d:f1:38:47:da:e7:08:7f:1c:a9:
                    e7:dc:7b:e0:a2:22:03:55:ee:35:c5:ca:ec:b7:df:
                    65:11:1e:9a:69:18:29:75:27:4d:bb:19:0e:04:6a:
                    b5:be:85:9a:f8:ea:3e:85:72:fa:5e:ac:7f:4d:6f:
                    8f:47:b4:3d:84:b2:f9:eb:35:6a:17:85:38:3f:fe:
                    65:59:de:70:35:95:e2:a8:7b:28:5d:31:ed:9d:b6:
                    f9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:55:98:D6:85:F3:E9:9A:EB:75:14:1C:8F:11:F5:FC:73:A6:CE:57
            X509v3 Authority Key Identifier:
                keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:3a:cc:0d:be:da:d4:05:f3:ff:c5:cc:ea:f6:65:58:52:18:
         ef:67:87:26:35:57:8b:4d:18:1b:2b:4b:94:ec:bd:d1:b9:9f:
         21:3a:c4:34:80:aa:77:25:b3:4f:cf:b0:91:49:a5:2b:09:a1:
         9a:88:04:de:86:22:7e:46:33:c6:73:33:7f:45:02:d5:f6:65:
         1e:52:14:19:ba:2a:36:89:32:fe:15:f4:6a:e0:eb:b8:33:1e:
         d8:09:33:58:cc:0a:a4:96:0e:38:14:77:3b:70:42:ea:93:06:
         71:e2:a4:70:83:f9:f2:16:d2:82:89:17:a7:56:eb:2e:c4:fb:
         22:2b:aa:5a:d6:ad:30:35:e5:f4:e2:d7:17:04:e0:52:7d:ca:
         3a:bd:4d:8b:92:f5:e2:6e:ae:3d:3e:2c:eb:f4:1c:b9:e5:1c:
         b6:4b:3d:0a:ec:25:42:0d:c5:9a:64:57:e3:67:5f:15:dd:8b:
         30:ce:53:ff:4e:48:8c:fe:92:3b:ad:96:d8:7c:55:19:d4:25:
         6c:36:d5:d8:4c:78:f8:f0:87:01:94:aa:34:1f:a6:02:69:c6:
         6d:c9:4b:bc:5f:4d:54:6d:aa:5a:0b:28:15:83:a8:5c:e7:04:
         43:8f:16:75:5a:c4:be:11:db:e1:b4:88:b8:09:9b:a9:ef:18:
         ba:35:27:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:21 2026 by rpki-client