Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
File:                     lJgy8CXL76HqG8oMOQtjwXaUjNI.mft (raw, json)
Hash identifier:          UrDEydg8yzLrbf7gHstQgdA78VJqDie/uphWUQsBVzg=
Subject key identifier:   94:78:DA:89:F6:39:7A:49:AE:1C:E6:12:F5:9C:A7:6F:79:C7:48:BB
Authority key identifier: 94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
Certificate issuer:       /CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Certificate serial:       019D9DE3B18023D120685271ECC642504192
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
Manifest number:          073E
Signing time:             Sat 18 Apr 2026 00:00:38 +0000
Manifest this update:     Sat 18 Apr 2026 00:00:38 +0000
Manifest next update:     Sun 19 Apr 2026 00:00:38 +0000
Files and hashes:         1: cb-mqGrD9TdvPSnuiFKPTNSp4k0.roa (hash: 3D9GKzTfBklRbCdmXiO06QWtVtwBT318N1GZYxQn0ZA=)
                          2: lJgy8CXL76HqG8oMOQtjwXaUjNI.crl (hash: plbyAgVXIX1OfjTj4WGgLEAb9/9PXNOR7KWbhdzoXjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:e3:b1:80:23:d1:20:68:52:71:ec:c6:42:50:41:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949832f025cbefa1ea1bca0c390b63c176948cd2
        Validity
            Not Before: Apr 18 00:00:38 2026 GMT
            Not After : Apr 19 00:00:38 2026 GMT
        Subject: CN=9478da89f6397a49ae1ce612f59ca76f79c748bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:cd:00:dd:e7:3b:1c:6c:76:bf:2d:b7:e1:
                    5e:8b:f9:95:67:ce:59:56:67:c2:87:f6:e3:69:10:
                    ac:91:0a:78:6b:02:5e:77:64:ec:02:e7:2c:2d:1c:
                    31:08:17:e5:cd:45:3c:b6:06:22:bd:dc:71:a2:c7:
                    49:a0:79:b5:f9:eb:9d:4c:32:4a:5a:09:07:92:3f:
                    34:81:ed:71:0f:7b:6a:a8:89:2f:85:6f:90:03:78:
                    b1:49:b7:3e:a5:14:a4:1e:7e:89:c9:cf:f9:7b:c7:
                    c8:04:2a:4c:17:f1:8c:13:28:e9:d1:da:87:02:50:
                    92:d3:14:06:88:f1:da:5f:97:b1:45:27:d7:51:57:
                    0e:56:5b:bd:53:fc:bd:75:24:ba:c1:11:91:71:c3:
                    08:13:20:fd:3e:dd:a2:8b:40:1f:14:f3:29:94:80:
                    65:c2:2b:f9:97:df:ff:b3:b5:23:f1:23:e3:fe:07:
                    f9:e2:1f:19:63:cf:10:96:a2:60:08:4b:61:19:e1:
                    9d:a6:8c:0a:97:8d:03:f0:6f:30:b9:04:ab:bd:bf:
                    7a:1c:e5:7e:c4:5e:df:ed:4d:de:f2:86:19:eb:c0:
                    88:67:bd:a2:f1:8e:98:38:fd:ed:bb:bd:3a:b7:9e:
                    59:96:36:af:5b:b7:02:38:75:39:f9:9b:50:08:5a:
                    a9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:78:DA:89:F6:39:7A:49:AE:1C:E6:12:F5:9C:A7:6F:79:C7:48:BB
            X509v3 Authority Key Identifier:
                keyid:94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:7f:19:18:a0:a6:1c:d1:62:fa:52:af:32:bf:3d:71:19:cb:
         4b:29:10:b2:d0:57:23:ff:d4:25:13:fc:de:42:f7:a9:4c:b9:
         d4:3f:7c:ce:77:c5:e3:90:21:84:57:3e:0f:db:1c:54:d3:cb:
         c6:1b:b1:e7:a5:dc:cc:24:7e:23:ff:1e:c3:39:7a:12:c2:0f:
         31:20:b0:df:ee:e0:f9:67:59:e3:4f:8a:f8:1d:69:a3:77:e5:
         fd:6c:78:04:90:02:5f:2a:a3:3a:e6:50:24:98:d9:d1:ac:45:
         db:ee:5b:3d:8e:73:8c:61:e6:6f:f3:48:f0:a4:b5:02:41:79:
         b5:21:0e:b4:52:e1:86:75:95:85:19:4f:1f:41:3c:17:d8:24:
         89:ca:26:e3:66:e6:a7:87:91:0a:f6:34:a1:1a:10:5c:58:e5:
         32:6f:a5:6a:0b:da:88:19:38:db:da:42:9d:4e:fe:26:3f:36:
         25:2e:a8:fe:2c:ef:91:97:ec:eb:0c:57:21:f0:85:8b:73:2a:
         fc:20:6d:e3:59:cf:d2:b9:74:6d:3a:af:3a:57:fc:b8:6e:29:
         b9:49:b6:8b:5f:5e:71:ca:c1:91:d6:ed:80:8c:dd:e0:9c:f5:
         35:3a:bd:6d:d7:65:c7:37:be:05:b2:60:0d:23:4f:59:b4:ac:
         f2:ca:c6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:53:15 2026 by rpki-client