Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
File:                     pJR6ZT3sU9F51XJPJRTHJW22nfg.mft (raw, json)
Hash identifier:          nNU1WLT1z6LA5sKO0BZNe7NjCtK5kbcDLjLNg/W6Pnw=
Subject key identifier:   50:A4:E0:6C:68:19:F9:EB:FE:CC:B7:65:AD:43:3D:49:B5:BF:08:8C
Authority key identifier: A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8
Certificate issuer:       /CN=a4947a653dec53d179d5724f2514c7256db69df8
Certificate serial:       019D9818E486012CE86156BFF0AD3E733808
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
Manifest number:          11EF
Signing time:             Thu 16 Apr 2026 21:01:01 +0000
Manifest this update:     Thu 16 Apr 2026 21:01:01 +0000
Manifest next update:     Fri 17 Apr 2026 21:01:01 +0000
Files and hashes:         1: RMWRbbD_BdAd9CzTxDVfQGAvCWk.roa (hash: pFbz45/dgrlTncXp4cZG//XsRZw9h90zOSy0E/AZEIY=)
                          2: pJR6ZT3sU9F51XJPJRTHJW22nfg.crl (hash: L7Cig/nOBK5fIi0l/VAbJNhUH4wRPeHnPvBNmhjXJPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:e4:86:01:2c:e8:61:56:bf:f0:ad:3e:73:38:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4947a653dec53d179d5724f2514c7256db69df8
        Validity
            Not Before: Apr 16 21:01:01 2026 GMT
            Not After : Apr 17 21:01:01 2026 GMT
        Subject: CN=50a4e06c6819f9ebfeccb765ad433d49b5bf088c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:c1:45:37:79:e6:15:94:11:ee:dd:4a:6f:
                    b0:7d:e6:3c:0d:46:eb:b6:aa:92:4f:43:84:60:f3:
                    a7:3d:6b:18:7e:4d:79:76:32:a5:99:52:7d:62:f6:
                    e3:8b:23:75:53:a8:db:00:53:dc:d1:e5:72:84:4a:
                    dd:2e:27:cc:c6:76:8e:32:c0:16:8e:0c:f1:dc:30:
                    8a:53:a0:14:1e:05:1e:6a:e2:2c:57:e9:f7:de:46:
                    b5:8f:10:f8:12:eb:ab:2f:c4:42:66:43:70:4b:be:
                    6e:fb:df:03:78:29:73:d3:dc:c1:08:d9:52:f4:0f:
                    2b:26:f2:c6:9d:05:04:71:f4:47:4b:a3:d6:d7:b2:
                    54:ce:af:f1:b2:71:8f:e1:d6:66:cd:04:1d:20:c6:
                    1c:50:15:a3:37:08:93:cb:52:8d:04:60:48:a8:a4:
                    6c:42:79:45:26:8b:24:5e:d9:65:c1:6a:67:5a:97:
                    81:3c:4c:5b:65:16:3a:70:12:cc:65:67:f2:b6:d7:
                    6a:01:5a:fc:be:4f:36:38:f8:ab:6e:dd:60:8a:f3:
                    d7:47:5a:54:98:de:5e:18:2b:0f:21:28:43:20:75:
                    17:5b:1d:98:0b:5f:7c:1b:7d:8b:1d:99:82:1e:ca:
                    84:01:4a:8c:43:d2:57:1b:db:c8:31:9f:d7:60:6f:
                    de:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A4:E0:6C:68:19:F9:EB:FE:CC:B7:65:AD:43:3D:49:B5:BF:08:8C
            X509v3 Authority Key Identifier:
                keyid:A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:1d:38:f3:01:e3:7b:73:c0:2c:b3:be:d8:f1:d8:cd:9d:24:
         aa:e4:b7:87:38:49:e5:26:5e:65:0d:bc:cc:6e:c0:0e:38:95:
         54:ea:d5:50:a1:d6:b8:48:6c:e1:1b:d4:c2:bc:f1:a0:1f:91:
         98:ff:37:e9:3d:5b:88:ea:97:e3:2d:87:b2:46:08:1d:2a:73:
         7b:f6:43:bb:03:8d:02:7f:e0:bf:03:4c:0e:2e:d9:a0:ec:ae:
         02:f4:7e:61:a9:c2:db:f0:a1:49:8b:20:18:0c:6c:c3:40:cf:
         f7:17:5a:f5:20:fb:18:37:f8:a5:a6:46:db:80:de:93:10:d1:
         d4:a6:75:a1:fc:b2:c4:ef:84:72:22:8a:1c:0e:ee:08:6a:79:
         41:05:68:25:f2:7e:be:07:40:65:3d:6f:8b:ee:a5:03:3a:4c:
         f9:ab:ac:aa:f4:87:1a:05:a2:42:a3:79:7b:fb:39:fb:5c:67:
         86:43:9d:63:f2:06:1b:61:cd:72:a7:84:11:ac:84:1c:de:94:
         7e:37:0a:2e:27:ee:09:3f:50:1f:70:f7:d4:17:2f:16:95:80:
         d1:8a:72:0d:86:34:76:08:3e:6f:11:26:63:bc:d2:37:88:75:
         33:eb:7c:5d:ee:4a:92:90:39:3c:d5:46:21:78:32:33:fe:ef:
         ab:ec:8b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:01 2026 by rpki-client