Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
File:                     dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft (raw, json)
Hash identifier:          HZpJUiA4I75hkqKcyVJ58H7SUs1HhZs8bDmdwdGwlJ0=
Subject key identifier:   7A:A3:E7:1A:2A:B6:59:FE:62:8D:EB:12:6A:29:3A:42:6C:AF:C5:6E
Authority key identifier: 75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC
Certificate issuer:       /CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
Certificate serial:       019D9962AE10F9111A7D17FEE773AAAF5552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
Manifest number:          0556
Signing time:             Fri 17 Apr 2026 03:01:14 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:14 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:14 +0000
Files and hashes:         1: U_ZTyzand_WYQHwaGLdDZJKVTxU.roa (hash: pVHYAJp1u51cRGJyOQT+SjKcxp5OZfdjLVWKDZ8gDhk=)
                          2: dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl (hash: UvhO/yxZaH7kSWQ7Vbf2coLHWT6h1dR9HuSoq6Mtuxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:ae:10:f9:11:1a:7d:17:fe:e7:73:aa:af:55:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
        Validity
            Not Before: Apr 17 03:01:14 2026 GMT
            Not After : Apr 18 03:01:14 2026 GMT
        Subject: CN=7aa3e71a2ab659fe628deb126a293a426cafc56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:04:08:b7:6c:fa:21:66:45:fd:7e:51:3d:cd:
                    07:9c:24:7b:63:a5:72:ca:20:ba:24:25:e6:6f:33:
                    31:02:a2:b8:e5:84:34:ba:c6:6c:08:80:b9:e6:a6:
                    e5:d4:10:00:87:f9:4e:50:5b:9e:21:67:3a:81:62:
                    cf:df:c8:4b:14:d9:86:29:07:f6:02:33:ce:cf:3a:
                    ed:48:d8:c6:a0:23:28:d4:bb:5f:aa:6d:7c:6b:c5:
                    e5:2c:2d:ab:16:d1:9c:88:f2:55:21:c7:b5:d2:f3:
                    88:09:04:ec:0a:2d:1e:fd:cd:f8:3a:fd:21:ff:f4:
                    48:7c:53:ee:36:7f:7c:11:5b:0d:80:33:54:73:36:
                    72:0d:cf:ce:d4:41:4c:0c:cc:25:65:ee:ec:19:97:
                    f9:6f:78:6d:9f:7d:73:5c:e6:07:cb:0b:ec:a0:14:
                    a0:bc:cf:8e:1d:99:a3:ac:3e:03:09:df:fb:17:f5:
                    9b:52:f6:93:cc:12:f9:06:fb:20:96:0f:5a:be:4d:
                    d9:d6:4b:82:66:c9:05:d6:ee:cc:71:3e:6a:bf:df:
                    79:bb:4c:a4:e7:ba:81:bd:d9:b3:7e:34:3a:c0:9a:
                    c2:ed:45:cc:b8:3b:0c:9a:a7:cb:d0:72:a5:f0:d3:
                    09:87:b1:75:36:c5:c7:20:7d:24:f8:24:30:d8:1e:
                    3f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A3:E7:1A:2A:B6:59:FE:62:8D:EB:12:6A:29:3A:42:6C:AF:C5:6E
            X509v3 Authority Key Identifier:
                keyid:75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:37:73:8a:aa:f4:f3:e1:42:34:a8:66:f4:38:05:93:61:7e:
         ca:e6:a6:52:5e:a6:09:d0:1c:70:41:19:95:c0:23:d1:b8:f4:
         21:de:32:e9:34:77:85:7e:44:65:73:dd:f2:26:3d:7b:b8:89:
         60:05:8b:bb:2f:0c:36:10:83:1b:cf:70:d6:d0:73:4c:e4:42:
         ee:8d:ce:a1:7d:6f:81:c8:45:83:dc:f3:4d:4a:be:9d:39:8f:
         19:a8:3c:af:ba:c8:b5:59:d0:a4:44:67:ed:b3:3b:6e:32:92:
         59:52:bc:79:89:39:77:da:a6:c7:76:3f:ec:30:89:2e:53:5d:
         de:22:f4:6c:e1:4c:6d:98:24:50:7a:f4:11:70:62:ca:85:e7:
         a0:ad:1a:ea:8d:7d:67:fd:74:91:21:e8:33:51:23:2c:31:c4:
         c5:b2:71:a9:98:74:d0:36:71:77:b0:4a:88:12:f5:42:55:ab:
         67:ff:18:c5:85:6c:b3:99:31:32:6d:73:16:1f:a7:b1:45:2f:
         69:90:3d:e9:cb:0c:fa:2f:15:f5:b7:ba:12:4e:12:43:0a:74:
         ba:aa:b1:57:1c:33:4e:51:09:fa:69:1d:e1:36:4e:03:a2:f4:
         4f:fc:99:d9:2f:aa:07:09:98:65:62:da:00:71:4f:44:33:9c:
         73:1e:cc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:01:21 2026 by rpki-client