Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
File:                     SU14c0FlEKL7I0bvNCKAFVUicTs.mft (raw, json)
Hash identifier:          cBSY9hwi5K1CwM7hlz1Ga1qCWQbG10F67+75N+kUdXQ=
Subject key identifier:   77:37:E7:7D:4A:EB:F7:89:CD:A0:B0:22:EE:01:AA:8B:C1:AE:28:01
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Certificate issuer:       /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial:       019DA4F853E45CD951953494F3765F529A44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
Manifest number:          15E0
Signing time:             Sun 19 Apr 2026 09:00:30 +0000
Manifest this update:     Sun 19 Apr 2026 09:00:30 +0000
Manifest next update:     Mon 20 Apr 2026 09:00:30 +0000
Files and hashes:         1: 32Nopwa7iDrMzQvWR2AiGUXyxqI.roa (hash: UhsqgA9BDo8hjf2FELCXlR0HFZ2+BdgenG+by3xwFz8=)
                          2: LjPmzvpwanEzWC7YwFcmuEsNkws.roa (hash: MIJ/J6I5pbMxfY/A5H3VycZbhKC12p0Tut4YaO1yZlQ=)
                          3: SU14c0FlEKL7I0bvNCKAFVUicTs.crl (hash: oAIf+1tkISz4PHw4jk7DjqWxfrkytZvj2YOA2vEsvOI=)
                          4: U032uAEUZ0b4mkUs5GY7tAVTTzU.roa (hash: DED8ognEIVQikRQX7YkZQcK+eDMVkhFnX19M3oaeQrw=)
                          5: UKW6ggBaCeq2EWzJWVDTUUG5C5M.roa (hash: RrnGAk5DcSVwnr4K/OnsZ4KSQkqSg7XT17ThtWs4Qzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:f8:53:e4:5c:d9:51:95:34:94:f3:76:5f:52:9a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=494d7873416510a2fb2346ef342280155522713b
        Validity
            Not Before: Apr 19 09:00:30 2026 GMT
            Not After : Apr 20 09:00:30 2026 GMT
        Subject: CN=7737e77d4aebf789cda0b022ee01aa8bc1ae2801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:77:bf:23:3c:a4:b4:d5:5f:aa:19:67:6b:28:
                    da:1e:b5:3a:e6:59:13:e2:76:ac:de:17:37:0b:a7:
                    1b:40:b9:98:02:fe:1c:87:34:b6:7a:4a:90:24:5b:
                    61:b3:37:18:3a:dc:2a:68:a1:6b:d9:6a:af:a1:fe:
                    59:69:e1:05:0f:da:69:9f:41:d7:dc:97:66:cb:00:
                    2d:94:b9:87:57:97:a5:da:6d:4f:8a:59:03:3e:f5:
                    4c:db:a4:df:ee:af:60:f5:83:d9:7b:f0:25:1c:ca:
                    84:af:8b:78:e8:8c:8c:8b:26:43:7e:dc:b0:31:a1:
                    eb:17:e9:14:bc:53:ab:3a:30:4c:6c:37:d5:fa:0c:
                    ec:a7:ea:50:66:ad:c0:14:f6:8c:b0:17:7e:bd:1d:
                    80:e8:77:ac:09:e9:16:b2:17:68:9f:99:b6:ce:4d:
                    73:b3:d0:df:6f:0f:ed:31:74:c9:d9:02:6b:39:ac:
                    27:87:31:b1:11:29:2d:15:1e:39:35:79:84:bf:4f:
                    43:d9:47:da:3f:0d:a0:7f:e0:57:6a:43:23:ee:29:
                    99:4d:5c:6a:4e:98:97:f6:a2:7f:3f:2b:b0:89:20:
                    e3:26:3f:9c:53:28:ca:1c:38:d5:22:ff:3f:f1:29:
                    46:a5:a3:fa:49:ee:10:a3:07:95:79:65:e2:c8:f8:
                    0f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:37:E7:7D:4A:EB:F7:89:CD:A0:B0:22:EE:01:AA:8B:C1:AE:28:01
            X509v3 Authority Key Identifier:
                keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:09:2e:7e:b9:69:b3:d8:79:4a:71:69:5a:a5:8f:47:96:1f:
         7c:c1:b4:e4:f7:28:5a:8e:aa:fb:d3:87:9b:d4:a5:23:99:d1:
         5a:27:a6:6b:ea:b6:60:0f:75:22:a6:de:c2:db:97:59:c8:a3:
         7a:84:2f:d6:3c:46:9a:bf:0f:35:24:b8:44:9a:c4:b5:44:e1:
         b9:7b:01:6d:37:aa:3f:9b:b1:4e:f9:37:3e:27:26:90:7d:d4:
         c8:45:0f:2e:40:1b:60:fc:ee:91:94:8a:41:be:3f:25:82:de:
         fc:c2:fc:80:9f:96:72:72:8f:73:f3:c7:4e:f3:b5:a7:5e:66:
         2f:88:a3:8b:c9:a8:56:cc:f0:03:14:47:30:c9:72:ec:72:66:
         30:5e:0b:af:cc:92:94:f1:15:c0:25:91:28:3c:e2:89:9c:1e:
         eb:d8:3d:8a:57:3a:f5:ca:24:b3:d6:6c:a4:46:8d:84:67:ba:
         8c:31:c7:99:b9:dc:41:89:c8:7f:66:0c:60:a7:b2:4f:b5:c7:
         01:98:1e:9a:bc:36:f0:9a:b0:15:6a:af:df:29:51:2e:d9:4c:
         60:f4:05:45:93:ea:ac:58:1f:c9:d6:ce:70:f5:92:da:53:cd:
         c8:7a:7f:89:18:f3:6c:a8:7b:8d:97:89:03:f0:64:8e:3d:1b:
         e5:f3:68:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:18:10 2026 by rpki-client