Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
File:                     Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft (raw, json)
Hash identifier:          9EgKtEcANgMGDFdoKJ0yvAlP+dfY4gYC+4hXDOIdqxY=
Subject key identifier:   59:07:7B:88:2E:3A:AD:94:9D:02:0A:6F:8D:A7:E5:6F:A0:1A:4B:ED
Authority key identifier: 3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7
Certificate issuer:       /CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
Certificate serial:       019D9B1976637B28521387E3D6FBC3B9C65B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
Manifest number:          07C1
Signing time:             Fri 17 Apr 2026 11:00:30 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:30 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:30 +0000
Files and hashes:         1: 9MMTJC9bSYJjm0yH2SR40mWxLt4.roa (hash: 911epWb1C+HTij7xHBBtK6BFbTtOQmcCGUfZtk4CgN0=)
                          2: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl (hash: dOaa2VzgQO8zp1RAjmQGHg4KL2NQQfEx4v0WbFrVlZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:76:63:7b:28:52:13:87:e3:d6:fb:c3:b9:c6:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
        Validity
            Not Before: Apr 17 11:00:30 2026 GMT
            Not After : Apr 18 11:00:30 2026 GMT
        Subject: CN=59077b882e3aad949d020a6f8da7e56fa01a4bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:76:e4:b9:06:d3:7d:11:aa:83:17:32:22:46:
                    d5:26:ed:45:53:84:a1:9a:0f:7f:a2:d3:35:2c:68:
                    4f:75:ea:c9:5a:5f:69:a1:d7:82:29:99:04:4e:75:
                    80:88:f8:82:e4:13:2a:1f:81:ff:50:af:70:0f:7a:
                    5e:1b:60:aa:7e:b8:45:a6:0e:a0:10:29:64:8d:75:
                    20:d1:d4:0d:dc:78:6b:54:ad:7f:df:83:c9:fd:11:
                    0d:ee:16:c0:c4:fd:50:99:2c:83:56:c2:b5:a5:52:
                    d7:7e:5e:8f:67:b4:76:20:9f:c6:f2:1b:96:ed:9e:
                    20:40:f9:8e:ff:6d:26:23:f5:c5:4b:22:da:dd:ac:
                    3f:a9:49:26:ec:a1:12:03:dd:74:84:e1:97:2b:26:
                    2e:64:4a:07:b9:8f:24:8f:32:91:97:65:17:d6:c0:
                    2f:16:77:ed:8c:d4:11:4c:39:c7:c5:10:0b:c9:6d:
                    4f:a0:1e:de:f9:51:25:05:6d:1f:9f:c9:ea:4e:b3:
                    66:6d:67:df:11:fb:cb:f6:8c:9d:65:60:34:bb:fd:
                    3f:f5:18:2d:86:fb:3c:7f:7d:01:e0:04:7a:ee:a9:
                    76:d9:da:18:ca:3f:55:6d:3c:db:0d:b2:f8:62:4e:
                    2b:1a:43:0c:00:79:9c:d5:66:e4:be:98:ad:39:ce:
                    ae:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:07:7B:88:2E:3A:AD:94:9D:02:0A:6F:8D:A7:E5:6F:A0:1A:4B:ED
            X509v3 Authority Key Identifier:
                keyid:3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:0a:3e:24:7b:f4:93:b7:19:03:9d:a0:09:6f:79:f1:fb:a8:
         b1:9c:b2:6b:6f:71:60:08:af:97:4b:6f:e4:c2:e9:dd:2d:40:
         f2:71:23:6f:b3:eb:35:0e:37:46:a1:06:9a:db:9e:0c:7e:1d:
         db:43:f1:8b:12:ba:28:9a:65:d2:8a:72:b3:d3:33:d1:fd:0f:
         3e:70:8c:d3:37:31:20:87:5f:9c:04:42:72:6b:3e:0d:c0:05:
         0e:25:c8:b4:d4:0a:36:45:5a:e7:b7:24:fe:3d:cb:b9:eb:86:
         9c:dc:55:92:d5:01:dc:a2:3a:8c:f0:1c:bf:ab:41:de:f9:00:
         30:2e:58:a1:7a:e2:85:d0:d4:49:0d:34:5c:c6:78:96:2a:df:
         f9:2f:36:08:d9:94:1e:aa:5a:51:8b:47:98:f2:21:bb:15:6b:
         c2:36:f4:b4:d1:a5:48:42:24:84:19:49:12:58:38:43:03:e5:
         77:9d:ca:cb:aa:6e:1b:81:22:e9:27:5e:34:ff:9b:07:0b:c1:
         69:d9:76:33:c8:80:47:56:06:e6:1f:aa:9b:87:0c:7a:86:2b:
         0b:31:fe:24:fb:a2:a4:d5:3b:ec:b8:41:ec:49:7c:c5:4c:4f:
         49:f7:dd:ee:aa:62:23:ce:f5:63:56:fc:e4:6f:47:a6:6b:22:
         a9:dd:8a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:31:57 2026 by rpki-client