Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
File:                     g7826xjvmlfF-2A62kAP5rZojm4.mft (raw, json)
Hash identifier:          AIsFioOf5JiJxpFp0RS/Ft5HfKO4ocrhrUI9CkQFZjM=
Subject key identifier:   3D:BC:30:BC:15:95:53:B0:5F:C1:BF:A0:6E:10:7F:D1:CD:FA:4D:88
Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
Certificate issuer:       /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Certificate serial:       019D996216D057394CB71B4D5EDD8AE8C41D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
Manifest number:          13F5
Signing time:             Fri 17 Apr 2026 03:00:35 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:35 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:35 +0000
Files and hashes:         1: g7826xjvmlfF-2A62kAP5rZojm4.crl (hash: VLQ8k/A9L7yh+wXv70W460MKwSjeGNOxsQFU7/1nBJA=)
                          2: ja3xbYHhCypT2kKyeAbUDM6JjaI.roa (hash: 97d7xvyjN2GHwh42t3hRtYWBfO2mX62sHwBd8SOvXh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:16:d0:57:39:4c:b7:1b:4d:5e:dd:8a:e8:c4:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
        Validity
            Not Before: Apr 17 03:00:35 2026 GMT
            Not After : Apr 18 03:00:35 2026 GMT
        Subject: CN=3dbc30bc159553b05fc1bfa06e107fd1cdfa4d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9d:8b:f7:17:7f:84:b2:3d:59:b0:fc:31:10:
                    32:ee:b4:4f:b2:aa:6c:9e:3e:9b:40:a6:19:53:23:
                    7c:6a:84:d3:df:16:79:61:9c:f5:b7:ea:d2:94:25:
                    00:73:f0:fb:d1:2e:52:24:fc:21:99:c1:7c:74:a6:
                    94:de:ff:58:0b:6d:7d:12:f1:d5:63:e2:e2:e0:ec:
                    39:ac:25:bb:66:e0:8e:c1:8b:4d:79:6d:14:7e:72:
                    e6:1e:82:eb:53:15:41:33:df:50:63:82:44:41:b4:
                    28:04:6c:87:8e:8a:e3:68:39:ea:71:26:47:0d:3e:
                    32:23:86:85:b1:7f:ad:7c:d9:ce:15:76:82:96:a8:
                    7c:d1:12:ee:c7:57:21:7e:00:38:16:c9:18:55:2e:
                    9b:9b:de:52:91:66:5f:16:8a:b2:d9:d9:7b:f4:c0:
                    ba:e0:b3:25:bd:f2:7b:6c:38:1e:aa:ae:d5:86:26:
                    1b:a8:a7:b5:76:d9:40:dd:14:22:69:3e:47:69:19:
                    59:95:e4:f7:cb:ef:63:9c:d7:97:0a:7b:4a:11:bb:
                    4c:8c:cd:f2:a2:5b:d0:ae:99:60:68:fc:8e:5c:47:
                    3f:c0:12:19:1e:db:c2:9d:09:34:d4:68:ad:ca:99:
                    af:2f:06:de:b7:ac:5c:5b:5c:e9:f2:35:97:94:1a:
                    e8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BC:30:BC:15:95:53:B0:5F:C1:BF:A0:6E:10:7F:D1:CD:FA:4D:88
            X509v3 Authority Key Identifier:
                keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:24:ef:73:c9:15:74:40:2e:41:dd:0f:0a:4c:56:66:f8:02:
         0e:c4:8e:39:fa:a3:c2:b8:f2:cb:fb:81:12:8a:97:b3:80:37:
         d4:c2:12:7c:5c:44:97:db:23:d2:a4:93:a4:8a:45:28:35:ba:
         23:be:9c:c6:f2:eb:d8:8f:bf:4a:68:07:83:6a:49:aa:05:18:
         39:65:cf:56:56:8e:e0:2c:1f:29:5b:ec:6f:bd:34:98:d0:24:
         df:72:e3:a9:d4:16:3d:cc:76:b3:a6:ed:8b:b4:37:0d:0b:19:
         1e:4f:c6:3e:3a:a5:06:7d:9d:b5:fa:26:17:46:0e:fc:29:af:
         1f:a2:57:09:45:12:2f:eb:3d:b2:8e:ff:fe:94:8d:1f:2a:06:
         72:f7:da:58:bc:e3:85:31:7c:57:0f:4e:9f:40:da:59:aa:83:
         04:f8:d5:62:d0:92:65:ac:94:88:62:b5:ce:a4:5e:7b:4f:28:
         df:2f:ff:b3:b2:0d:4e:ab:50:8a:1f:50:cd:21:25:81:80:af:
         80:d1:89:29:0c:b1:0e:86:03:02:86:1f:4e:2e:03:3e:77:47:
         98:44:fc:95:89:d0:06:ba:d8:63:5d:a8:9f:ac:15:80:80:a1:
         4f:e6:f7:ef:8b:c5:be:ab:3e:c2:d4:ff:d5:6a:e5:6c:0a:71:
         b4:bb:d0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:43 2026 by rpki-client