Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
File:                     mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft (raw, json)
Hash identifier:          96O+pE3FyGOXKSeoKCU0TlvItCGygZsGSV3bse8w/WI=
Subject key identifier:   48:59:02:FE:42:D3:A6:73:C0:16:E3:FA:F4:11:85:46:8D:F4:19:DB
Authority key identifier: 9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7
Certificate issuer:       /CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
Certificate serial:       019D9B50AE917B6C9A410618BE8A3D2EA197
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
Manifest number:          07E7
Signing time:             Fri 17 Apr 2026 12:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 12:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 12:00:49 +0000
Files and hashes:         1: hoKwY0QvUnBi-tDDbTH_cLv23NY.roa (hash: fFAQMbRSBb2iS8m9HUDJs1yeCJEv1rp7JgjV+mMT+oE=)
                          2: ihYgr-rjOEu_0aFSN5ArKwebXhw.roa (hash: V6X/NJtxRRU2A4S6y2uawtLDYFOhttTEH+mmWCQD8A4=)
                          3: mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl (hash: rwjZQLy/FfpDzwIvpH410edcDmC9+b0whxT+zsF7B/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:ae:91:7b:6c:9a:41:06:18:be:8a:3d:2e:a1:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
        Validity
            Not Before: Apr 17 12:00:49 2026 GMT
            Not After : Apr 18 12:00:49 2026 GMT
        Subject: CN=485902fe42d3a673c016e3faf41185468df419db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a4:f2:e2:3a:41:83:2c:cb:a8:09:4c:4c:0f:
                    49:86:ad:89:78:8b:89:7e:c3:5b:3c:83:46:45:49:
                    9f:f4:e7:bf:29:e9:df:ed:13:2a:49:93:dc:8f:52:
                    25:f1:7a:07:76:2e:bf:da:44:2b:0e:ff:98:1f:29:
                    26:56:c2:1f:14:6a:28:5d:5d:0a:0b:40:63:f4:12:
                    6d:fa:8a:26:3d:83:3c:9f:53:e8:24:04:73:28:d7:
                    39:da:e7:ad:47:09:98:ba:c5:0f:45:df:60:1b:93:
                    0c:0e:ca:e8:da:c0:2e:d7:76:4d:70:1c:53:db:a7:
                    85:6e:fd:33:69:ce:0a:65:0d:15:72:6b:17:6f:ee:
                    c6:96:33:2c:b9:a4:1f:22:09:c0:61:46:63:ac:50:
                    01:85:0b:ae:84:02:2f:11:b2:3a:7c:82:c6:b5:b7:
                    0a:34:77:35:16:35:ca:40:cd:9e:e1:7b:b2:9e:13:
                    ae:4c:65:b2:c1:c9:8b:96:52:4f:55:15:a8:ce:e9:
                    f5:6e:25:da:01:36:d7:17:6a:62:ed:93:68:26:33:
                    61:f6:9b:d3:1b:d0:7a:cb:0f:09:e6:64:24:06:ad:
                    e3:30:18:75:30:55:13:b3:1b:57:6f:60:e6:37:31:
                    73:e4:5d:64:6d:9f:69:17:70:5a:06:aa:b3:1e:93:
                    dc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:59:02:FE:42:D3:A6:73:C0:16:E3:FA:F4:11:85:46:8D:F4:19:DB
            X509v3 Authority Key Identifier:
                keyid:9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:2f:54:e6:b1:9f:0a:b8:47:7b:ef:c5:a3:62:ec:1b:5b:5a:
         6e:4a:a7:7a:dd:1f:8a:10:ed:49:8b:c3:d9:07:89:81:88:9b:
         a7:90:f5:41:fa:74:ed:df:b6:7f:ee:ba:42:a2:28:93:a9:b8:
         13:ff:21:c3:44:91:c6:f2:9e:e2:8a:12:15:70:3f:55:82:a4:
         34:c9:bd:02:6f:90:30:2b:26:94:bb:5c:2a:5b:87:94:c2:09:
         d0:6b:39:92:38:89:e9:9e:13:9f:0d:0d:5c:84:d2:62:68:35:
         a2:dc:dd:70:80:33:dd:f8:e9:ca:f9:cd:11:df:1d:00:bc:17:
         4f:b7:3a:99:35:35:59:e3:fb:e3:c6:18:60:02:cd:08:14:4f:
         92:62:88:31:a7:e1:fa:5c:c1:51:89:6d:78:05:f6:06:bf:23:
         de:aa:26:e8:b5:e4:9d:b6:7b:19:e0:4b:fa:de:23:0a:78:3e:
         55:0c:b9:8b:35:ff:ac:c6:c7:99:fb:b6:e6:95:45:1e:94:b4:
         b1:96:94:99:f6:b6:c6:76:9d:f2:86:74:03:1e:1a:8b:62:2f:
         de:48:8e:6a:87:84:ea:69:33:a8:79:dc:d1:97:a6:70:09:94:
         96:03:8a:0d:e0:74:3c:3e:1e:a4:9f:66:58:bc:41:f5:09:e9:
         49:06:1f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:58:49 2026 by rpki-client