Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
File:                     E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft (raw, json)
Hash identifier:          /oTf0F7AmfvYiWvEhjc+PG/jYY7SivoHHJ+eZbvG2Tw=
Subject key identifier:   03:1D:3C:EA:62:4C:23:E9:E6:B5:15:AA:29:7F:7D:74:A1:08:30:D6
Authority key identifier: 13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
Certificate issuer:       /CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Certificate serial:       019D9AE3C8B79FF41157AAAE034194E4D8F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
Manifest number:          15F2
Signing time:             Fri 17 Apr 2026 10:01:52 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:52 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:52 +0000
Files and hashes:         1: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl (hash: jVEZC8KSwPe+96PDGVT4ogvthKuF+xgJ1jzlkqcuuxI=)
                          2: Ne750FFHPw3HUe14fcJ5eyrMXJg.roa (hash: A3tH6f49GeoqhrZ6OnjGyDwtlkYlyzOGtjZ26OJKqAo=)
                          3: OKZ4RBLd9A-erw36PbwJ3C3LJo0.roa (hash: 7yPskL1QQ8Sx8qqCwYj9KNvr1Nkq7IbAM3Yyme3KyJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:c8:b7:9f:f4:11:57:aa:ae:03:41:94:e4:d8:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b43dace8663447ee4725520d78c54ab7b99ad4
        Validity
            Not Before: Apr 17 10:01:52 2026 GMT
            Not After : Apr 18 10:01:52 2026 GMT
        Subject: CN=031d3cea624c23e9e6b515aa297f7d74a10830d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6a:93:b9:f5:bc:d2:b5:ef:6b:1b:d1:be:07:
                    1b:ad:f5:83:81:b2:73:4a:ab:c8:fd:63:75:26:4f:
                    05:40:db:b8:ae:5f:14:8a:98:b3:34:06:c0:67:3a:
                    df:18:e5:29:10:bd:c5:32:05:59:84:7f:f4:4a:10:
                    81:dc:61:8b:1f:36:ff:47:67:81:3f:05:c2:1f:10:
                    17:fd:fa:b2:f1:6b:c9:3a:7d:05:d1:36:6c:dc:33:
                    53:fb:51:1f:66:f7:c5:13:e4:6f:a7:2e:bf:c4:18:
                    ac:ad:9d:82:21:ad:1c:1f:ac:cc:87:4c:46:31:35:
                    38:51:b7:e8:43:ab:2b:cd:ee:95:ad:5b:a1:f8:ca:
                    92:59:72:3c:b8:a0:66:d4:99:bc:a1:ab:1e:6c:e2:
                    c2:eb:06:e6:df:c0:dd:a0:2f:8c:fa:d8:1c:f3:79:
                    f6:44:d6:b5:78:c9:1a:42:b5:6c:a4:b6:17:31:63:
                    ab:12:bd:99:3b:c7:55:f8:4f:85:57:0d:b4:93:da:
                    d7:a5:9d:f0:84:0c:55:64:8d:77:d9:3d:bd:ea:86:
                    70:80:f4:a9:f3:1a:d7:ef:a7:3d:78:0e:eb:7d:29:
                    6f:28:68:54:e1:46:e4:09:a6:79:03:92:d6:c9:3d:
                    ba:dc:9c:e4:51:17:e3:39:17:28:8e:44:d9:fe:2c:
                    98:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1D:3C:EA:62:4C:23:E9:E6:B5:15:AA:29:7F:7D:74:A1:08:30:D6
            X509v3 Authority Key Identifier:
                keyid:13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:6c:35:42:f9:30:40:ba:fb:38:8c:2a:6e:26:56:46:ed:07:
         58:77:57:a9:b3:49:fd:62:26:32:38:45:14:59:b2:69:05:71:
         ea:bb:4b:2e:bb:64:98:85:bd:15:d6:7e:69:5d:e0:2b:35:e1:
         08:ee:eb:8c:6f:67:0f:43:84:22:76:e4:2b:e0:66:1f:5d:1c:
         dc:18:87:de:52:0f:02:81:1f:4c:9b:ce:6a:2e:16:dd:e6:31:
         f0:9b:40:47:30:7f:6a:82:37:1a:85:81:40:25:17:2c:9c:32:
         ec:50:2e:cb:a1:6e:d9:84:17:a1:d9:a2:7f:9e:03:9e:89:4a:
         59:d4:2e:6b:7e:d1:d9:7f:fd:cd:de:27:5a:6a:66:49:e2:61:
         a2:af:5f:f5:28:d9:98:00:53:32:43:52:4d:99:8f:91:85:af:
         3e:ae:bd:44:1f:ca:4d:e3:fd:86:75:33:73:35:96:0e:e1:cc:
         e1:4d:e7:3a:72:fc:fc:4e:18:be:73:09:a9:d3:ab:2d:25:52:
         c3:09:96:ba:43:23:7c:a7:2e:95:16:1e:50:34:81:52:75:38:
         4c:fd:65:92:ef:dc:ce:1b:a6:58:52:c6:ac:b8:19:8d:b5:38:
         93:43:26:83:c5:24:a0:8d:3b:f0:89:e9:9d:64:f1:f0:0b:bf:
         bc:13:8c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:34 2026 by rpki-client