Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
File:                     ejUIviqGjWzlTbmzqGTUvphcrk0.mft (raw, json)
Hash identifier:          1fT2mEA6p6MQkRumSNbhL9LpzYjmqdzpzQ+Bs7lTxJY=
Subject key identifier:   27:43:C7:8F:8D:DE:D7:FD:18:B0:DA:A8:F0:F6:E9:BD:07:EB:25:03
Authority key identifier: 7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
Certificate issuer:       /CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Certificate serial:       019D9B875B723714B92EA38D56680DD4BB50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
Manifest number:          0929
Signing time:             Fri 17 Apr 2026 13:00:31 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:31 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:31 +0000
Files and hashes:         1: LwoLT1S5IZ3GJENrbIOLiJKkrxM.roa (hash: ANC1phdFKuJYTnQOKa5Ojw1nbMCT2ZAJrnTkKz9AGrk=)
                          2: ejUIviqGjWzlTbmzqGTUvphcrk0.crl (hash: 8wFZIDaaQq/davzI8Nzo2vnrQGY1KP07jlQv+whsGZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 13:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:5b:72:37:14:b9:2e:a3:8d:56:68:0d:d4:bb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
        Validity
            Not Before: Apr 17 13:00:31 2026 GMT
            Not After : Apr 18 13:00:31 2026 GMT
        Subject: CN=2743c78f8dded7fd18b0daa8f0f6e9bd07eb2503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:31:93:b3:5e:df:74:78:f6:af:82:37:1b:f3:
                    41:a7:ab:6e:06:43:6c:a9:89:2f:08:a5:a3:e4:fa:
                    49:87:25:77:e9:8d:cb:06:c9:61:ba:41:f3:0c:ce:
                    d6:ca:e2:aa:81:cd:9b:54:28:9a:c3:ae:3f:0c:2b:
                    c3:c6:3b:f4:18:d2:91:1b:c2:ff:0d:ab:a5:ba:71:
                    4f:f1:8a:40:4a:9f:b5:d7:19:7a:00:e8:92:cd:c6:
                    ff:4a:94:e0:b6:6b:f6:71:d6:a5:61:08:35:92:17:
                    12:10:38:c7:eb:38:f5:be:20:64:a7:5a:88:e2:e7:
                    9a:a9:c3:f2:01:15:3b:2d:19:f1:05:e5:43:5b:78:
                    58:96:6a:ad:cd:80:98:9e:f5:3d:22:a3:23:3d:35:
                    4e:71:8e:e8:72:a2:d6:83:73:43:e1:0c:2d:60:de:
                    01:37:c9:af:6c:b4:ef:c3:58:2a:2f:e3:73:62:00:
                    c3:f8:3b:67:52:50:b9:92:5f:fe:4d:ff:8e:54:08:
                    0d:bc:6a:c6:08:34:e4:97:7f:61:5d:ef:08:30:3f:
                    9a:19:c2:82:fa:be:17:62:5d:18:57:44:40:79:fb:
                    69:7b:33:15:4c:66:76:b1:be:4a:3f:23:da:5c:27:
                    0b:7c:3a:e7:f7:16:9b:cb:be:46:74:45:6a:c0:e1:
                    ed:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:43:C7:8F:8D:DE:D7:FD:18:B0:DA:A8:F0:F6:E9:BD:07:EB:25:03
            X509v3 Authority Key Identifier:
                keyid:7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:4e:0f:9a:f3:6e:21:1c:e3:3e:e5:31:e8:f4:8e:50:6b:af:
         d2:cd:19:29:b1:5b:3a:11:a2:88:f0:66:3d:f7:a7:9e:94:e3:
         d7:42:94:55:3f:93:4f:68:29:7a:86:3e:e7:70:6e:e2:2e:89:
         16:4d:8b:e2:a3:e0:e6:c0:5d:34:71:57:f9:67:28:cd:18:73:
         83:6b:70:cf:5d:15:33:da:62:a0:3d:79:21:91:a2:15:09:69:
         6d:a8:62:f1:b1:c9:e4:3e:9b:2e:a3:fa:9a:53:fa:c3:c3:73:
         df:57:7c:85:74:c4:35:08:03:bd:f8:c4:1f:86:27:12:0d:c0:
         d2:39:ba:5f:bd:81:7f:e2:11:d4:66:6a:a8:38:02:c7:89:cf:
         49:88:ce:0e:96:22:55:bb:67:47:82:f8:11:3b:a1:ef:12:d4:
         3d:c8:c2:11:a2:2a:47:a3:8d:fe:ee:c0:44:6a:4b:95:c7:03:
         bb:80:c1:c1:59:89:7b:06:a4:a7:f8:25:fd:8e:32:28:e7:18:
         ea:42:83:ea:f2:cf:60:2a:b9:06:69:da:3f:bb:09:29:f5:7c:
         0f:c4:39:ca:fd:f6:df:df:bc:1b:1a:f5:50:49:31:62:22:49:
         c9:43:a8:fd:3a:51:ff:9d:39:b2:7f:a4:98:10:f2:df:47:66:
         11:55:11:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:42:10 2026 by rpki-client