Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft
File:                     tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft (raw, json)
Hash identifier:          /orDfv+wmbwU0IWcl8bZqwUneR9+EhLqxn9lhrCiy58=
Subject key identifier:   C0:29:3C:5A:08:37:4C:1B:71:7A:58:95:B3:7E:D0:BE:BC:B3:FF:BB
Authority key identifier: B4:85:84:EF:FA:05:1F:0C:BC:39:C3:19:16:3E:4F:23:38:60:49:82
Certificate issuer:       /CN=b48584effa051f0cbc39c319163e4f2338604982
Certificate serial:       019DA453C8DFC3A7DAEAF853D368500195B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft
Manifest number:          015F
Signing time:             Sun 19 Apr 2026 06:00:47 +0000
Manifest this update:     Sun 19 Apr 2026 06:00:47 +0000
Manifest next update:     Mon 20 Apr 2026 06:00:47 +0000
Files and hashes:         1: mTKfXNqZr-ethdBjOn6lFjS-PNs.roa (hash: HOGNlGeAoZ/b5RPWvVv+b+yxDspoiWHKwc8eGW2VV4w=)
                          2: tIWE7_oFHwy8OcMZFj5PIzhgSYI.crl (hash: mtlCbVt8X9af68LdCg7eUNnkgY4/o+0GGanRO6uXLT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 06:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:53:c8:df:c3:a7:da:ea:f8:53:d3:68:50:01:95:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b48584effa051f0cbc39c319163e4f2338604982
        Validity
            Not Before: Apr 19 06:00:47 2026 GMT
            Not After : Apr 20 06:00:47 2026 GMT
        Subject: CN=c0293c5a08374c1b717a5895b37ed0bebcb3ffbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:83:00:a7:77:9f:97:ff:9e:37:b0:47:5d:
                    b7:61:23:98:f3:d4:66:71:45:15:59:7a:2e:37:27:
                    90:59:a9:04:be:e8:65:9c:c6:c7:5c:aa:f9:62:72:
                    2c:fe:4e:da:13:fe:f9:a9:67:73:2a:a3:3b:e6:b5:
                    90:c5:57:ef:28:84:ae:e6:4d:25:de:e4:f9:06:d1:
                    6e:2a:33:99:2c:dc:29:f0:f9:cf:f6:a3:03:23:28:
                    06:ec:a7:d1:b1:4d:14:25:fd:c6:4c:69:88:f1:25:
                    16:0e:91:a3:7a:6b:ee:78:9e:4f:05:67:15:d2:d1:
                    d6:a2:16:f2:73:91:97:dc:25:b7:70:38:d8:ea:3a:
                    05:04:2e:02:8e:2c:0b:f9:79:02:20:f1:5f:b6:dd:
                    d6:67:e9:39:38:e4:9e:c7:02:63:dd:4a:d9:ed:bc:
                    03:61:5f:ee:67:b9:6c:f9:66:50:ce:12:8a:f0:8d:
                    bd:75:57:98:a9:e7:f6:69:e0:f8:08:e7:63:9d:6c:
                    c6:78:e0:4e:db:79:6d:37:a1:9f:1a:e2:21:2a:fa:
                    9d:58:cd:33:4c:87:6c:0d:c1:d6:7a:03:93:37:18:
                    49:e4:a2:57:e8:a0:09:bf:83:95:9e:d8:c1:46:f1:
                    37:d0:47:00:99:10:55:3f:5d:a8:4d:53:a9:10:2c:
                    ec:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:29:3C:5A:08:37:4C:1B:71:7A:58:95:B3:7E:D0:BE:BC:B3:FF:BB
            X509v3 Authority Key Identifier:
                keyid:B4:85:84:EF:FA:05:1F:0C:BC:39:C3:19:16:3E:4F:23:38:60:49:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:83:2b:48:3b:d4:cb:51:3e:f3:52:e2:c8:37:a7:4b:f2:cb:
         2f:76:a9:6a:14:ba:44:70:4b:eb:09:a0:73:b5:62:3b:5d:29:
         0f:e6:e7:43:14:5e:71:00:c4:04:2e:1b:a3:ee:00:14:b3:22:
         87:e5:76:ea:28:6e:f0:e9:99:f0:b9:d1:39:a5:91:58:dd:93:
         40:fd:4b:d1:92:34:7b:d1:09:b0:df:22:90:af:ff:fe:1a:35:
         da:27:6e:de:bc:b2:03:95:36:e2:4a:0a:f4:9c:19:87:a5:1c:
         bf:80:45:9e:44:1c:be:e0:99:a4:3f:34:61:97:a1:ca:7d:84:
         15:46:9a:8e:b2:f7:5d:fa:43:60:fe:b9:70:e5:1c:bf:03:4c:
         b9:79:55:91:68:31:57:a5:8f:fa:ce:ba:b2:66:dd:b2:6f:d2:
         8e:c4:06:56:de:10:34:3c:3f:0b:6e:e5:7c:1e:19:27:6c:2b:
         64:db:18:0c:ea:63:de:48:aa:c5:02:cd:1e:ac:76:39:40:56:
         9f:0f:d0:67:9b:f8:54:ad:93:4e:01:e8:24:b3:b5:cb:41:5f:
         ad:db:83:00:0e:3f:8f:82:ad:73:03:50:98:9f:92:26:d1:c9:
         9f:10:51:86:63:79:09:ca:ee:5a:49:e9:ad:7e:73:71:5f:bb:
         61:26:f0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:30:30 2026 by rpki-client