Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
File:                     E_OtQPlu1efznY2eGWq_D6I4How.mft (raw, json)
Hash identifier:          fr2kKErIFKEulqgsgurNtZ/XE3MwCKoadep06yCPSw4=
Subject key identifier:   52:19:63:4F:81:95:E2:76:7F:DD:32:27:18:E0:27:1F:F6:07:CC:AA
Authority key identifier: 13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C
Certificate issuer:       /CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
Certificate serial:       019D99997AAD12D04846FD6320FF2666F725
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
Manifest number:          1407
Signing time:             Fri 17 Apr 2026 04:01:05 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:05 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:05 +0000
Files and hashes:         1: E_OtQPlu1efznY2eGWq_D6I4How.crl (hash: draNBtKP30us8KTk/90CdhDiWPvrs8K3/KmkaPjMM8w=)
                          2: _BiThTGjxk4mTLq-x93nIMvlUFM.roa (hash: eb4KvoDqDMfsY+rM/WfNgq/w+lmr8scY27yz0mI6HFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:7a:ad:12:d0:48:46:fd:63:20:ff:26:66:f7:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
        Validity
            Not Before: Apr 17 04:01:05 2026 GMT
            Not After : Apr 18 04:01:05 2026 GMT
        Subject: CN=5219634f8195e2767fdd322718e0271ff607ccaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a7:7e:c9:ed:0c:f4:30:c7:5d:ab:81:e7:c7:
                    ff:f3:e2:a6:5f:15:56:4b:aa:24:ec:40:77:16:96:
                    61:39:93:c8:f4:b5:8d:62:7f:21:0b:7a:b9:4a:c6:
                    64:c3:2e:ee:27:11:f0:21:14:cd:89:15:bb:cf:8f:
                    f2:a7:eb:27:fd:0e:69:35:7c:da:5e:af:48:3e:80:
                    ab:50:c2:5d:70:fa:d2:c0:5a:70:bb:f4:f5:52:f2:
                    e4:7e:8c:e2:d4:57:0e:7c:ba:9a:7b:4e:08:73:24:
                    a3:35:fe:10:29:ce:a6:54:0e:56:81:5b:66:d2:6e:
                    b0:9d:2f:52:7f:7a:3f:61:b1:1d:85:06:11:9e:0c:
                    78:3b:6e:57:e2:42:21:d4:de:68:58:e2:71:38:10:
                    93:d5:0b:f0:a8:3f:45:83:28:b3:58:42:3b:91:2e:
                    fa:48:f1:82:4e:85:64:8e:d4:7c:51:96:99:73:a6:
                    79:69:85:8e:92:ae:79:49:67:ee:49:22:dc:17:0d:
                    9b:7b:cb:48:58:06:b4:ac:77:a4:86:78:b9:85:1e:
                    d0:94:43:d0:46:63:50:80:52:ea:5a:b4:8d:22:a5:
                    fe:85:f4:09:05:58:63:e7:b4:1f:b9:59:53:63:cd:
                    9f:c8:19:df:f9:df:90:33:70:b0:49:0a:2c:b8:12:
                    35:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:19:63:4F:81:95:E2:76:7F:DD:32:27:18:E0:27:1F:F6:07:CC:AA
            X509v3 Authority Key Identifier:
                keyid:13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b7:07:c7:6c:97:e7:10:0f:6f:2c:05:c0:33:4b:48:d0:89:
         44:3f:7c:f9:f0:47:6e:bc:c7:d9:64:c0:eb:74:fa:4e:38:73:
         09:79:c8:c8:fe:d6:bf:58:33:a5:57:9f:1b:7c:26:f3:a3:cd:
         3c:2f:b5:23:bc:23:32:23:7d:f9:fe:33:7b:fe:f0:76:64:5d:
         31:2c:f8:cf:29:b4:0c:f5:66:ef:ec:11:44:8b:3f:4a:78:d2:
         bb:55:60:a4:ea:43:9b:30:bd:d8:27:15:8b:24:5c:79:86:80:
         d4:9d:9c:b6:fa:e8:63:e2:4a:06:03:1e:11:1b:d3:bf:cc:0e:
         bb:cd:da:7b:22:68:46:67:b6:4d:94:46:61:d9:ec:a1:7d:a6:
         bc:cb:40:a6:84:66:1d:04:cc:a9:2e:ce:4f:c5:88:81:43:7f:
         6e:fd:a6:79:16:64:b6:84:76:15:02:fd:83:98:c4:cc:73:1d:
         5f:69:89:44:25:fe:67:d8:eb:9f:c0:54:87:6f:0f:4d:3d:ff:
         ab:b8:8d:ac:a5:d3:aa:d9:20:3c:67:b8:73:08:60:ac:41:4c:
         89:2a:8f:44:39:66:11:be:71:ae:a7:41:53:53:7e:f2:83:4d:
         89:d8:98:80:04:ad:fa:36:e0:08:44:58:f5:26:05:e3:51:f1:
         88:3e:87:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:22:59 2026 by rpki-client