Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
File:                     miM7vd_kOGRvWG8IXl3w15vfufw.mft (raw, json)
Hash identifier:          WoFGdLWvnbLRUQITkN60SQYMPWcfLOLKsbKc6thsgsc=
Subject key identifier:   28:01:5B:B2:5B:FC:2D:35:F2:5E:01:A2:83:9D:14:D1:31:70:54:33
Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
Certificate issuer:       /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Certificate serial:       019D99CFFBC739B7AB3E359D0376E9884403
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
Manifest number:          07B8
Signing time:             Fri 17 Apr 2026 05:00:37 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:37 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:37 +0000
Files and hashes:         1: M1ruMNKluNAuiHKd8f6PvAhDGEs.roa (hash: FWsTJhEBrkq8kPBWZ62T1F7ClTwy4cYS4tWh5TLbeTA=)
                          2: XNKWPCMOPLauToaa-Vtz2zcauoc.roa (hash: luJuVPoWx92bH75pBWbCMtwrgqr+Km6/eamqOW1HDZc=)
                          3: dyhz1TfOcl672ykR-umzk8d_7AQ.roa (hash: i2scR6hBPf9EaO7J0DMnFp1+UeNi6vv8mMyfEjaxgaY=)
                          4: miM7vd_kOGRvWG8IXl3w15vfufw.crl (hash: t+y8MVr48g1PhR2cHry1RkIBFSKnArOopW/XNtMBW2k=)
                          5: nl8rJp2Gx045j4pPDWegyHxSDoU.roa (hash: 2GNCXLXhx5YXmc3JB/+CLbWieU0ZOSqkjHUYlGnPA30=)
                          6: vhhE0LlaMoAC65mEN3TyEobLF50.roa (hash: Us5rGsyQlFj4bRY6YlCqwzJno3k3/qLxqTpPkFS4SJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:fb:c7:39:b7:ab:3e:35:9d:03:76:e9:88:44:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
        Validity
            Not Before: Apr 17 05:00:37 2026 GMT
            Not After : Apr 18 05:00:37 2026 GMT
        Subject: CN=28015bb25bfc2d35f25e01a2839d14d131705433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:10:77:3f:08:c1:be:ee:e1:b4:81:d4:26:
                    fe:74:2f:35:5c:ff:ec:eb:3e:45:c4:6d:70:ba:a2:
                    e7:2f:9f:40:16:04:18:82:18:33:88:8c:04:37:05:
                    bd:64:73:98:58:8e:a6:1c:90:e8:e6:66:15:d2:bb:
                    02:ff:73:3c:17:f4:7e:93:ac:13:30:70:8f:d7:e9:
                    ae:08:42:f1:52:2c:6f:dd:1d:d8:a4:db:95:14:6d:
                    62:58:95:25:7f:44:c6:a1:df:c6:e1:63:0a:a6:91:
                    4b:8e:b7:4c:d3:34:d4:94:f8:bf:10:dc:f8:e2:8b:
                    94:be:43:b9:7b:20:4c:62:59:e3:88:31:e3:9a:ec:
                    ce:28:d5:f0:96:20:8c:b4:cc:23:4b:da:43:de:f2:
                    e3:19:da:86:94:66:98:3b:bd:10:9f:32:19:eb:2f:
                    f0:40:ff:07:21:3f:65:dd:b3:66:6f:31:d3:26:4f:
                    ca:db:c0:69:8b:ea:72:9b:be:c1:99:a2:a6:0e:dd:
                    d6:a1:6f:21:21:7e:d9:a4:ff:6c:dc:0a:63:63:b9:
                    9b:19:0c:48:1e:4a:ab:e5:c1:f8:7a:59:41:33:99:
                    42:a4:70:18:80:8a:b7:b8:eb:f5:f3:2c:69:cc:74:
                    4f:cc:db:52:c2:c8:51:58:2d:22:39:4e:5d:7a:9e:
                    d8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:01:5B:B2:5B:FC:2D:35:F2:5E:01:A2:83:9D:14:D1:31:70:54:33
            X509v3 Authority Key Identifier:
                keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:6d:2d:7f:a5:45:2a:52:09:ed:90:1e:c9:2e:a5:bd:6d:50:
         8f:5d:8b:3b:03:94:e1:82:94:ed:b9:20:56:07:ed:48:f6:f6:
         59:d8:c2:bd:da:00:91:66:67:e5:d8:5d:d4:fc:b2:19:d2:47:
         dc:6f:c7:7d:12:75:49:b0:1d:55:b9:3d:57:d8:23:59:31:d6:
         1a:e8:3c:62:0c:31:40:b7:41:31:d2:37:cf:6b:9c:86:3e:9c:
         dd:76:95:23:c9:8c:ba:2d:53:aa:8f:62:cf:16:bb:d9:b9:46:
         9d:00:c7:35:88:4f:73:a5:3a:3a:20:b2:b2:14:47:04:58:fe:
         9f:07:01:39:91:1f:9a:19:3a:3a:03:78:ba:d5:19:3d:6f:55:
         15:9c:1e:1f:26:dd:ec:36:51:34:bf:da:e9:af:c3:33:c5:29:
         24:79:6c:3b:8c:63:80:ad:01:58:e2:ed:87:eb:7c:9f:66:42:
         3e:39:51:ab:8f:88:8e:85:f1:b9:7c:19:7c:a9:1b:e6:c1:94:
         3e:c7:6f:34:a8:3b:83:3f:6c:41:bf:fd:8a:d8:fe:00:0a:4d:
         a5:f5:4c:a2:6b:33:25:a1:44:7b:55:4d:e5:cc:52:0b:56:fc:
         b4:af:06:5f:b1:b5:fd:db:05:6d:03:2c:41:5f:28:0b:23:b7:
         e8:1d:25:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:52:38 2026 by rpki-client