Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
File:                     e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft (raw, json)
Hash identifier:          /29USmWHJ4UElocw9/505u9EerjHqAC+Qb+t0VCGxOI=
Subject key identifier:   CC:F2:A4:02:CE:82:65:8B:98:25:2B:6C:53:73:3A:CF:6C:91:9C:4E
Authority key identifier: 7B:CA:BE:64:90:FA:8B:D5:72:44:0F:D6:61:6A:84:30:EE:66:D1:54
Certificate issuer:       /CN=7bcabe6490fa8bd572440fd6616a8430ee66d154
Certificate serial:       019D9962211371401EEE59DB00C009D4540D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
Manifest number:          0586
Signing time:             Fri 17 Apr 2026 03:00:38 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:38 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:38 +0000
Files and hashes:         1: Gws5btNNtPdjaSz9VbluBPmvlcM.roa (hash: d+e95WhTHyM+HX2sAVv1c3YdJyjnOdJdLOShrMr5pvY=)
                          2: e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl (hash: jwQUpDZKEFY3L4QplF81M53jaTmj/ggOffFqryOpaB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:21:13:71:40:1e:ee:59:db:00:c0:09:d4:54:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bcabe6490fa8bd572440fd6616a8430ee66d154
        Validity
            Not Before: Apr 17 03:00:38 2026 GMT
            Not After : Apr 18 03:00:38 2026 GMT
        Subject: CN=ccf2a402ce82658b98252b6c53733acf6c919c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:f5:38:9c:e8:5b:a6:27:2c:7a:c3:9e:24:
                    67:eb:da:fd:5a:77:a7:28:1d:ed:c4:49:1b:f8:31:
                    e2:79:38:59:78:ba:3a:60:8e:f7:83:ed:f4:96:b1:
                    78:de:cf:e9:35:90:10:60:27:2e:c9:d1:61:ab:c0:
                    1b:91:f5:50:61:dd:27:ba:71:80:a2:18:d0:9f:7a:
                    7d:9d:c9:6c:27:5c:bc:24:53:5a:82:31:b0:81:b7:
                    49:e9:71:68:48:48:40:33:25:15:4c:d0:04:fc:3b:
                    14:82:a6:04:81:a7:75:09:3e:df:a0:ca:7c:0a:49:
                    06:86:aa:f7:c1:22:1c:dd:b4:17:c7:4a:49:79:30:
                    41:e1:37:69:c9:7d:e5:5f:15:03:4c:68:e8:0f:f8:
                    90:3a:bf:52:27:18:55:f1:31:ad:e7:95:b0:76:a7:
                    f8:fb:6a:49:8f:d4:2c:1d:22:14:82:c2:72:ab:60:
                    31:b5:ef:44:bf:aa:67:d5:80:42:0c:91:f5:42:58:
                    fe:79:b7:3a:1a:ce:22:7f:53:59:d2:e9:e5:8e:32:
                    00:03:ce:ae:b0:dc:23:9b:1c:4f:07:45:50:fa:74:
                    a8:0f:45:0d:c8:50:75:11:32:47:e7:63:a4:29:b5:
                    c0:34:f6:de:e8:a8:01:00:de:d1:7d:48:c6:b7:8c:
                    85:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F2:A4:02:CE:82:65:8B:98:25:2B:6C:53:73:3A:CF:6C:91:9C:4E
            X509v3 Authority Key Identifier:
                keyid:7B:CA:BE:64:90:FA:8B:D5:72:44:0F:D6:61:6A:84:30:EE:66:D1:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b9:df:f9:a1:9a:9d:3e:1d:65:f5:75:a5:8f:b3:03:c4:1a:
         70:14:9a:f1:41:7c:84:d7:fa:30:ba:75:0d:d3:a7:86:3e:2e:
         ca:0c:1e:94:24:7b:eb:b9:a2:66:b1:f7:0c:2f:07:0e:17:bb:
         c0:0f:70:10:b7:c4:6b:e9:95:c5:16:35:a9:10:a4:76:f6:8c:
         5a:30:38:be:d0:fc:8b:0c:6d:ee:26:d5:cd:92:fd:3c:74:10:
         ba:8d:41:14:d0:65:dc:fb:f2:6c:ed:47:c4:ec:0e:ba:4f:fb:
         03:90:d0:79:d5:32:f2:c4:53:37:b3:0a:11:8d:6f:16:3c:98:
         29:2e:d4:42:c4:0e:9b:d1:b9:9d:b9:3e:03:60:60:e1:cb:48:
         d8:9a:1c:1d:c7:dc:a3:10:32:6f:41:fd:fc:08:13:1d:65:f7:
         a0:3f:6a:11:a1:39:34:2c:25:c1:3a:c2:8d:c1:aa:fd:e8:ad:
         34:07:e2:8f:68:74:d8:d2:89:9a:82:a6:43:32:a8:7d:f0:0b:
         44:02:44:a8:f2:e2:a0:87:5c:c1:10:e7:4e:4d:d4:50:2b:02:
         e4:ca:04:da:fb:97:1c:2e:fc:71:2f:cf:83:a5:d9:3e:e9:88:
         d5:b2:27:88:e7:49:0e:a9:d7:2c:9b:54:1c:84:92:e2:55:47:
         56:69:78:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:34 2026 by rpki-client