Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
File:                     7etEJKvYbW70jbnnZG9TnG0QyIY.mft (raw, json)
Hash identifier:          g4m5Xe2Dk4vTDoZ63uXa31lqVKoRcAZqTD5lVil8K1s=
Subject key identifier:   DE:8C:7D:2F:77:D2:B0:BD:CD:8B:0D:4B:C3:12:D1:23:8E:7E:BB:CA
Authority key identifier: ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86
Certificate issuer:       /CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
Certificate serial:       019DA4F919EFACAD935EFAEE248804E32D03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
Manifest number:          0A0D
Signing time:             Sun 19 Apr 2026 09:01:21 +0000
Manifest this update:     Sun 19 Apr 2026 09:01:21 +0000
Manifest next update:     Mon 20 Apr 2026 09:01:21 +0000
Files and hashes:         1: 7etEJKvYbW70jbnnZG9TnG0QyIY.crl (hash: 2I0K+k5wxZ+4p6rCVtDkJSop/5enAOEMOzr1oQCx8Ps=)
                          2: C77YJP8fJa8-Zz4rlDlE0c9emSo.roa (hash: DN6PsoZ+s4zlPu3wgZ94PNHVaR06pVMEb9575uK0WK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:f9:19:ef:ac:ad:93:5e:fa:ee:24:88:04:e3:2d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
        Validity
            Not Before: Apr 19 09:01:21 2026 GMT
            Not After : Apr 20 09:01:21 2026 GMT
        Subject: CN=de8c7d2f77d2b0bdcd8b0d4bc312d1238e7ebbca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a4:8a:a5:2f:04:c9:bb:18:f1:ac:3b:c3:9a:
                    21:c5:25:70:ba:51:31:ca:41:be:6d:a7:05:34:a7:
                    fb:d2:7b:69:f6:0a:29:ec:ab:4e:5c:9f:ae:49:90:
                    4c:53:84:12:7b:cd:f5:ac:c9:2e:e3:9d:e4:67:13:
                    55:96:8c:c8:52:63:8f:db:e2:9c:62:d2:33:8c:64:
                    a4:9b:c8:9b:7b:91:83:d6:06:60:90:bd:8f:32:94:
                    7a:dc:c9:89:fc:da:d1:e2:92:68:47:e7:d0:af:44:
                    19:ad:78:3d:a5:c0:c4:02:c2:72:9e:d5:2b:6f:7e:
                    1f:3c:8a:0e:c2:bd:07:da:b6:fd:fa:b4:19:57:e7:
                    0e:02:36:fa:36:94:18:0c:a9:6f:ec:31:de:32:9e:
                    35:aa:8a:77:2d:9c:dd:9f:44:ab:a0:11:cb:96:7f:
                    d1:13:82:3a:b9:07:5b:14:5d:d3:01:5b:af:af:97:
                    a6:6e:6d:0c:70:48:9b:c1:e4:77:78:f9:fa:04:58:
                    5a:19:44:2a:99:b9:1c:11:89:03:ef:b4:5c:ca:37:
                    1c:58:81:26:8a:12:22:bf:c3:13:5f:ca:08:8c:97:
                    14:bb:38:fa:43:65:27:be:04:62:db:c8:31:b3:74:
                    d6:f5:4b:2a:0e:97:1d:0a:a2:ee:01:ba:d2:d6:a3:
                    56:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8C:7D:2F:77:D2:B0:BD:CD:8B:0D:4B:C3:12:D1:23:8E:7E:BB:CA
            X509v3 Authority Key Identifier:
                keyid:ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:11:6e:ae:bb:a4:84:f3:e4:55:b4:22:db:3c:d0:8e:be:1c:
         32:39:93:e6:af:4d:52:b3:31:49:14:ff:ff:90:c7:8f:0c:49:
         55:c6:8c:a7:cf:41:44:95:91:e1:70:74:42:98:90:54:6e:06:
         5e:e1:b3:8a:ae:d2:b5:66:f0:13:73:29:af:26:4e:e8:31:48:
         1f:89:4e:60:54:01:46:8f:06:6e:bb:40:5c:51:dc:91:3a:bb:
         e1:8d:7c:00:56:cc:45:3f:b6:0f:f9:44:ae:42:70:fe:2c:6c:
         6f:54:14:37:d6:b8:37:6d:9c:cb:60:fe:f2:a9:52:5e:c8:5d:
         98:3f:05:7a:6c:2f:25:9c:6c:79:a6:c1:de:ae:36:e0:b5:47:
         70:d4:d6:ce:7b:3f:67:d4:ee:96:47:fb:dc:b3:07:21:d7:1d:
         a3:c4:45:95:60:bf:86:f4:87:b1:f9:2f:a8:5b:77:0b:b6:49:
         50:d2:74:a1:1c:c1:e4:da:8b:3b:39:13:3e:bb:1c:19:99:c1:
         1b:85:47:7d:70:c1:5c:4b:f7:d1:88:68:6f:d1:c3:8c:e2:2f:
         e8:20:86:44:4f:7d:ab:e0:c7:a3:78:14:56:d8:8a:96:bc:00:
         19:95:1d:34:47:b3:ed:0a:4c:a0:ef:40:1a:a8:57:6c:a8:37:
         92:48:86:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:12 2026 by rpki-client