Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
File:                     ewOpsg0q_QHZocYo0wG5nIfMWs0.mft (raw, json)
Hash identifier:          89GUcZqNL966DT/YBIKPYLGVG2lywFnJJzxSOGTMSjc=
Subject key identifier:   0E:A5:7B:33:3C:82:82:D3:BA:35:4E:50:25:B1:92:7A:E2:1B:7C:5C
Authority key identifier: 7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
Certificate issuer:       /CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Certificate serial:       019D9A3DF7657224724CFD74BD98524456E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
Manifest number:          0956
Signing time:             Fri 17 Apr 2026 07:00:45 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:45 +0000
Manifest next update:     Sat 18 Apr 2026 07:00:45 +0000
Files and hashes:         1: 1-CcdGpM9DcuLRpqwbiMu3odID9g.roa (hash: pKdfKPtLXW/w7Hq1cLOFELO9jRtinOQ6Uq5RI4M/bWQ=)
                          2: ewOpsg0q_QHZocYo0wG5nIfMWs0.crl (hash: TQB9ImcFdMREPIWeXQQqAtKhlzblc0D07ypKjF/pCz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3d:f7:65:72:24:72:4c:fd:74:bd:98:52:44:56:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
        Validity
            Not Before: Apr 17 07:00:45 2026 GMT
            Not After : Apr 18 07:00:45 2026 GMT
        Subject: CN=0ea57b333c8282d3ba354e5025b1927ae21b7c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f2:3b:54:cb:df:23:a0:b6:72:9d:67:2b:39:
                    57:71:8e:f3:b4:e6:91:ca:ed:14:1f:16:52:53:49:
                    47:01:4f:39:da:9a:8e:84:b3:96:76:e6:1d:08:7b:
                    1b:9c:8f:a2:46:62:69:55:7c:82:4e:95:c9:66:a9:
                    ed:e5:48:0e:b5:e4:c5:ab:25:db:14:89:8f:e8:32:
                    f8:b3:25:f5:e7:9b:e8:36:66:19:ae:91:48:cf:85:
                    db:4d:ce:4b:4c:b5:c0:b9:9c:93:87:1c:9c:3f:1c:
                    d5:24:c5:b4:e0:fd:1c:49:55:b7:ab:a8:e8:d5:06:
                    d6:d5:5c:9b:91:d9:cb:7e:26:13:b7:d7:8c:9d:67:
                    d6:81:3c:19:75:28:2b:f7:a1:67:54:d2:42:7d:47:
                    85:47:a9:5f:d2:aa:0c:96:60:cd:16:4e:f0:30:81:
                    6f:30:78:8a:33:c2:63:7a:4b:86:dd:05:41:98:7d:
                    4c:57:41:56:d8:bf:b4:cb:06:b4:f8:c2:b4:b8:49:
                    0f:cd:15:a5:6b:a0:9f:b3:3d:3e:78:33:82:32:f6:
                    f6:ae:69:56:06:db:9f:5e:89:39:b2:e9:40:1d:31:
                    de:09:61:56:18:5e:02:73:5a:17:8d:2f:9f:1b:54:
                    68:14:37:7e:10:52:b9:d6:cc:37:18:c3:1e:23:5a:
                    c3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A5:7B:33:3C:82:82:D3:BA:35:4E:50:25:B1:92:7A:E2:1B:7C:5C
            X509v3 Authority Key Identifier:
                keyid:7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:31:f7:83:bf:18:ec:20:f1:ca:3c:20:25:bd:35:46:52:83:
         98:9e:84:0f:97:a1:e0:cd:63:ef:55:9f:7f:80:a2:fb:ec:bc:
         1a:dc:ee:37:d2:de:3b:3a:aa:fb:45:b2:51:cd:54:55:c8:c7:
         6a:0d:f9:7e:1f:64:46:29:b2:ae:19:ed:a7:3d:97:95:5f:6e:
         51:29:c6:d5:19:37:ba:3a:ab:9b:27:a2:0c:12:ad:3e:88:a8:
         98:fb:6d:37:77:12:b2:96:4c:90:db:8c:0e:cb:59:3c:11:b0:
         d2:af:8d:11:23:d1:cf:c3:99:ba:61:16:8c:c1:62:a3:b1:a9:
         99:2e:a3:5b:5c:aa:57:2c:9a:77:14:82:7e:15:c8:a8:b0:ad:
         f8:55:71:72:38:90:58:3f:8c:73:ab:1d:cc:9b:93:d6:fd:65:
         f3:94:e7:54:18:43:86:1c:fa:33:15:e3:76:24:a1:b0:7e:0a:
         f6:ce:f8:fe:6c:03:4e:48:5b:f1:5f:c4:9d:fe:40:32:e8:6e:
         9f:74:57:48:5b:c5:6b:77:14:df:c9:c2:c3:6f:54:f5:af:ab:
         d7:d6:5e:41:3e:ad:55:18:7d:0c:22:92:5d:32:a4:09:af:c6:
         de:6d:77:08:e3:ea:4f:91:61:4f:61:16:47:8c:ce:ef:eb:31:
         05:72:f2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:53 2026 by rpki-client