Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
File:                     d7yR94ozULrLv743b4gTIS0UmTE.mft (raw, json)
Hash identifier:          ef6lf+Uyt0ElOJTQa1v42Ia2elfbEecRFucg2lhLU7M=
Subject key identifier:   51:56:82:1D:66:19:13:94:9F:39:0D:13:73:98:02:24:42:C9:6E:74
Authority key identifier: 77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31
Certificate issuer:       /CN=77bc91f78a3350bacbbfbe376f8813212d149931
Certificate serial:       019D9A7527748187FD728628A3E11D17B159
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 08:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 08:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 08:01:01 +0000
Files and hashes:         1: KH6ejIMdhy_mMZU1YZa7EnoxyY8.roa (hash: Ow6WQnn0i2VGlKGMfx6ZfMd3IxlNgwXn7QWPpo0rp20=)
                          2: d7yR94ozULrLv743b4gTIS0UmTE.crl (hash: lSYoJ6aMBWs2oSE7w5AYzCstbl9I6ILSTWersZpkllQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:75:27:74:81:87:fd:72:86:28:a3:e1:1d:17:b1:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bc91f78a3350bacbbfbe376f8813212d149931
        Validity
            Not Before: Apr 17 08:01:01 2026 GMT
            Not After : Apr 18 08:01:01 2026 GMT
        Subject: CN=5156821d661913949f390d137398022442c96e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8e:02:fd:65:1a:8b:e8:b8:28:78:56:30:6e:
                    08:73:74:eb:dd:26:ed:af:92:bf:c9:a8:1b:5e:3b:
                    c0:ed:f5:e4:87:25:6f:c7:39:1d:e7:45:9f:27:c8:
                    a7:f3:bc:cb:87:28:62:44:21:6f:96:fc:f7:26:e6:
                    33:05:93:93:33:a4:4a:a8:50:86:dd:45:0f:24:69:
                    10:5f:19:b3:92:60:6a:9e:24:8b:36:bf:b0:c1:52:
                    42:e3:12:c1:f8:2f:e4:0b:ef:8b:1b:bb:a2:05:ee:
                    52:7f:7e:24:fa:4e:89:eb:6f:5d:b5:e8:38:39:1c:
                    f6:e4:10:44:5a:ff:5c:a2:d1:96:9a:02:db:51:e4:
                    e8:a8:bb:12:9e:0f:fe:84:78:af:95:2c:a4:1b:fd:
                    32:a8:59:c2:6d:84:72:d4:e3:f2:2b:7e:f6:ec:06:
                    d4:01:a4:d6:70:2a:8e:a3:94:91:f0:d4:1f:5c:01:
                    5e:51:ca:be:f4:0e:4e:4f:d5:27:ca:b8:53:69:e4:
                    30:72:10:83:3c:06:8e:fd:02:85:e1:14:18:25:2b:
                    5d:9a:d7:2a:58:69:be:0e:ea:d4:42:da:b5:af:f1:
                    c7:3b:33:94:57:48:64:f3:65:35:aa:37:f7:7d:ab:
                    ea:96:9a:01:39:c1:45:53:e0:67:29:bf:9e:d5:70:
                    6e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:56:82:1D:66:19:13:94:9F:39:0D:13:73:98:02:24:42:C9:6E:74
            X509v3 Authority Key Identifier:
                keyid:77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b8:a7:1c:7b:a6:ec:22:63:81:9f:b6:6f:66:55:85:f5:35:
         ef:89:78:da:c7:23:16:c8:a6:7a:cb:98:c9:4d:ab:56:98:06:
         eb:84:bf:c3:a3:09:3d:41:f6:95:76:6f:61:8b:90:94:8e:7a:
         90:be:d2:27:00:f3:a4:41:e7:bc:ca:93:dc:25:14:75:5b:a0:
         1b:b4:c1:98:3b:3a:a6:eb:31:54:cf:dd:5c:9b:02:0a:0d:8b:
         ef:1b:3a:95:10:ff:92:a7:24:c1:d2:13:43:74:bc:02:37:d9:
         c9:b8:ac:02:5d:dd:08:21:c2:28:34:41:10:ce:0b:6f:3c:dc:
         48:e8:d2:ab:71:e8:9d:e5:9c:7e:88:7e:88:35:d7:c1:03:c2:
         64:70:cf:89:c7:8a:e4:76:0a:c8:2d:de:72:45:f9:49:f2:93:
         9c:7e:a2:1c:19:d3:88:41:2d:61:8c:b7:6e:3e:5c:e7:65:cb:
         da:67:82:4f:dd:f9:6b:1c:24:4b:58:e6:ec:89:66:70:c1:ef:
         0f:19:8c:2b:c8:cc:b6:a1:c8:b4:b3:0e:2c:52:44:36:93:09:
         ae:13:2d:a6:30:6f:f2:f7:02:9a:96:c4:3a:ad:67:ea:6f:01:
         af:95:e6:fc:8a:a4:73:b6:c5:d9:c2:2d:8a:04:18:cf:fd:33:
         cf:f8:dc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:52 2026 by rpki-client