Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
File:                     d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json)
Hash identifier:          lAp4ramTh29FYBYtZnjUlp6yqlZcEoB9pqyfKotOY1Y=
Subject key identifier:   94:37:AB:E4:B3:43:29:E0:87:43:F9:30:F7:9D:BB:F8:E3:80:F9:26
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Certificate issuer:       /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial:       019D992B5972AF15DA197759DE5371862586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
Manifest number:          0774
Signing time:             Fri 17 Apr 2026 02:00:47 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:47 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:47 +0000
Files and hashes:         1: 1ULsjrhU_Mgs_8Mvd-oE1b7ANaE.roa (hash: BPqaZcuEdD+lQrMI+iPU/GW6APEbwg38yW1mZjGwXr8=)
                          2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: ShxM4fwnsbr1E80mEvYmz3Two8c2zFKf5qtIqm04L/c=)
                          3: pXo0ZUaV-y6EDCcUoSCUhqpPURU.roa (hash: EuVKLvC6yGpoLeqj+M0pu9788Rfc943eOWrQgVLBCHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:59:72:af:15:da:19:77:59:de:53:71:86:25:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
        Validity
            Not Before: Apr 17 02:00:47 2026 GMT
            Not After : Apr 18 02:00:47 2026 GMT
        Subject: CN=9437abe4b34329e08743f930f79dbbf8e380f926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:eb:1a:1e:bf:44:f5:15:1f:66:dd:78:10:04:
                    b4:7e:51:5e:cb:31:b9:0f:7d:b9:69:8d:bc:95:b8:
                    4c:1a:25:c2:fc:47:fa:73:3d:3c:20:39:a9:c9:2c:
                    e3:6c:89:df:02:cc:d8:2b:0c:34:62:0f:a2:ff:81:
                    8a:c7:ce:79:cb:20:19:c5:06:31:85:51:3e:bd:43:
                    53:ff:3f:87:f9:b0:63:b5:ad:1a:d9:ed:bc:47:46:
                    c5:80:8e:3a:21:c8:e7:7d:91:a1:83:89:83:06:03:
                    ce:61:76:4c:31:4f:d1:e6:7a:df:41:1c:12:ce:c1:
                    0d:2d:95:90:fb:63:7a:67:34:1c:e8:87:07:89:e2:
                    6a:2b:14:9f:48:14:25:e7:a3:46:63:19:5f:6e:3e:
                    5c:23:32:f1:28:e4:df:62:2a:d6:81:8c:af:4c:e1:
                    7a:3d:96:4a:db:da:ce:c9:99:2b:c7:24:d0:cc:12:
                    bf:3e:71:8d:ed:cc:1a:82:66:ad:28:99:91:db:f3:
                    1a:02:71:b2:53:26:2d:3c:58:56:ef:5a:0d:d3:2b:
                    d3:28:78:fa:58:03:78:c5:c9:b7:ef:5b:c8:09:4f:
                    9f:c8:93:1e:1b:20:2e:f4:cf:74:e5:8f:f4:fc:23:
                    19:2d:7c:72:b2:d2:96:5a:52:86:0c:12:d7:52:b1:
                    65:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:37:AB:E4:B3:43:29:E0:87:43:F9:30:F7:9D:BB:F8:E3:80:F9:26
            X509v3 Authority Key Identifier:
                keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:55:b9:32:a9:15:a7:5d:01:cc:00:42:08:b7:d6:56:a0:d6:
         44:5a:5b:8a:67:ac:d9:be:51:19:83:49:8b:3f:95:b7:95:1b:
         34:29:23:05:48:33:64:1b:3d:6f:e0:36:30:af:e9:b8:01:e3:
         7e:6a:51:15:1a:f0:41:88:bf:f3:52:51:4b:24:31:31:95:29:
         cb:19:15:bb:de:2d:27:3a:85:5a:30:a6:6d:ce:55:7c:6d:8c:
         f6:1e:94:7e:42:6e:14:8d:72:d1:c8:b1:48:b1:07:90:ec:a8:
         f2:b6:c3:3e:71:47:cd:4a:9d:d8:58:22:25:f5:a5:8d:38:33:
         ef:8c:91:61:9c:23:7d:ef:1b:3c:71:51:74:c3:70:e8:ed:d0:
         7d:fe:a8:04:3e:0e:19:5b:7a:e2:c4:48:eb:06:af:92:c7:d6:
         46:57:ba:f4:bd:4d:79:1a:a0:21:a7:0e:b1:5d:49:0a:07:8c:
         ca:f0:3a:71:f2:62:35:4f:d0:c2:73:50:4a:f4:16:ef:a5:e4:
         91:8e:ad:eb:d9:5f:88:f9:73:96:bc:b9:c1:3f:6c:a2:a3:7c:
         5f:96:aa:dd:92:18:de:49:94:99:96:ae:8a:9b:d0:21:dd:4d:
         ea:45:a3:5c:f4:52:49:27:98:3b:61:8c:32:a3:63:0b:99:67:
         b1:c6:77:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:12 2026 by rpki-client