Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
File:                     7JxoXPZnHMZW-S52RVejg3jygnw.mft (raw, json)
Hash identifier:          joZoWrpwXviOoYgEKL5DDO++f99fztBPl4E38XVKFSg=
Subject key identifier:   6B:F0:E7:E3:29:EF:C3:4B:3C:F0:84:CC:31:00:67:2C:05:54:C5:3F
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Certificate issuer:       /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial:       019D98190821B17B4BCF2186AF1067FA1024
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
Manifest number:          09F5
Signing time:             Thu 16 Apr 2026 21:01:10 +0000
Manifest this update:     Thu 16 Apr 2026 21:01:10 +0000
Manifest next update:     Fri 17 Apr 2026 21:01:10 +0000
Files and hashes:         1: 1-OYnNzXr6Vo5v0tdTY5uXPebeXE.roa (hash: HvTSCO8dnKWpIGNv0ZhtPHvjO7rUBO8uy6VJMUgGVj0=)
                          2: 5DTG2pQHtM0QiGmSH96_4M3Hn5k.roa (hash: ITY7NiqI6LopyqA5OlrdJTOTC/MthEeeabjTB3wyEhU=)
                          3: 7JxoXPZnHMZW-S52RVejg3jygnw.crl (hash: R2ulemtrB+TClN7lUo7t7KgKB97D+0LEzwcw1MVZqbI=)
                          4: Rb9KBoBLJn6K8gQhZg2wL_hnX2Q.roa (hash: Pnn1XhHhvI1FVLr7IXQzdyTXVT364mukcsmYH/cxMhg=)
                          5: djl4yLaR492a1MyY0DtkNwyzb78.roa (hash: ej60VYUqOdqHjFm3piE4ykWKGCUfy0gAqtpywAR05qI=)
                          6: n6Q7Dz0YljZRgjb4Ej38nYOG1kE.roa (hash: A8op5Re6jPP6C2oorXQWf6MTZbk9dP/pw1d5qjwWEks=)
                          7: qaTz9Gcvv3rYivfDPN_oMa7zdMg.roa (hash: wLlpBBMoxpNd4ichZWbUSTgH+M9/gymFfeCx9hn+ga4=)
                          8: x77ckgBnyFjNyEr_z-PzyG8KyRo.roa (hash: tyi/lTtGkxn6eIin2giJPjtV2rcAYKNSiCivHdTdGL0=)
                          9: x8PuWJNPJBC35K_SG-mLe9gxJtA.roa (hash: i+jPp0P0KxStb0wvP/NjPbGbfQidMuZ2R8mV3ecH7IA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:19:08:21:b1:7b:4b:cf:21:86:af:10:67:fa:10:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
        Validity
            Not Before: Apr 16 21:01:10 2026 GMT
            Not After : Apr 17 21:01:10 2026 GMT
        Subject: CN=6bf0e7e329efc34b3cf084cc3100672c0554c53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:41:ba:91:f9:0d:50:54:2b:e9:26:0f:44:ae:
                    0e:d3:6b:4c:dd:6d:ee:db:fd:ae:56:98:43:a1:32:
                    79:01:9c:70:c7:49:a1:79:d3:3f:91:a5:df:39:7e:
                    20:b5:3a:49:be:38:bb:e4:19:10:38:9b:91:1d:bc:
                    2b:47:c1:13:3b:2a:dd:50:c7:73:53:63:e3:27:a8:
                    fa:e6:27:dc:0c:77:94:d3:5a:15:65:ca:00:f6:2d:
                    43:4a:77:88:fa:22:d8:21:78:29:e7:a5:5e:7c:0e:
                    34:86:f7:e4:7c:81:ec:d9:70:07:53:f3:84:23:76:
                    ad:f8:a9:2b:45:a5:ea:0a:52:29:6d:24:95:1f:ba:
                    55:f5:03:a8:10:6f:0f:07:4b:6e:d8:d6:5f:f4:ac:
                    7d:52:5a:e7:cf:cb:8c:88:43:a5:13:4e:c4:54:8f:
                    99:90:6c:a9:fa:fa:eb:4e:c6:d6:a1:18:b1:5a:4d:
                    3f:7e:2d:b3:f9:36:56:53:e9:5b:e6:d4:8c:d7:6f:
                    7b:da:76:ba:f8:c2:2b:01:04:e0:f4:e6:fb:57:8c:
                    b0:90:66:8a:f2:49:b3:ca:89:69:43:c4:c1:7e:a3:
                    77:05:18:f7:2e:e3:8b:3a:88:f2:b1:18:4f:22:a8:
                    e3:73:73:cd:ef:62:48:ad:15:da:0e:06:2e:bb:b2:
                    5f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F0:E7:E3:29:EF:C3:4B:3C:F0:84:CC:31:00:67:2C:05:54:C5:3F
            X509v3 Authority Key Identifier:
                keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0d:b4:ed:e7:11:17:0f:bf:39:22:21:36:c1:6b:33:5a:ee:
         af:fe:b0:46:ee:c5:f3:8c:ac:99:9d:1a:55:27:be:0a:f9:d3:
         dc:9b:13:16:15:85:58:77:ee:c1:64:1f:cb:bb:42:ba:a2:d4:
         cb:20:02:0b:d6:11:68:f4:ef:59:0a:a7:e3:eb:d0:9f:24:d0:
         d8:8d:8e:64:70:5a:e1:30:39:57:aa:99:09:9c:8d:c1:29:cf:
         05:b9:41:d6:63:33:e5:45:14:d2:f6:00:56:6c:1c:06:a5:7c:
         12:4d:db:16:e9:dc:58:3e:0e:94:dc:75:51:78:7a:89:0f:05:
         c1:ad:ae:a1:bf:f3:e8:0a:f1:01:b2:7c:c2:c3:d8:ad:fa:1b:
         b9:0b:60:e5:5b:ee:51:57:11:79:8a:b7:cc:01:60:e6:65:e0:
         2a:a4:15:f8:47:a4:bf:82:4d:fa:7d:55:06:36:21:c0:1e:97:
         80:1f:d7:e4:ac:0e:c2:62:41:31:a7:0c:8c:2b:b1:75:07:4a:
         80:a7:f2:2a:06:a2:a2:ec:ac:69:b7:05:3a:2a:5d:bb:04:57:
         44:00:3f:b5:e6:50:08:2d:81:98:e8:ea:a5:6e:7e:ca:ba:2e:
         d9:09:be:64:dc:aa:ef:25:74:2a:c3:5f:4d:4c:e9:b1:5c:ea:
         8f:cc:73:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:21:17 2026 by rpki-client