Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
File:                     ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json)
Hash identifier:          7AfOluVM8VcNCIkLaDYu3aHSZagqP5uUAvraKKAJ9JI=
Subject key identifier:   4F:67:0C:2E:CE:FE:14:CF:EE:63:D4:46:61:F6:71:AB:60:3C:F3:65
Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
Certificate issuer:       /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Certificate serial:       019D98BDA9FB6D706C624A056354339E7D0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
Manifest number:          0799
Signing time:             Fri 17 Apr 2026 00:00:59 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:59 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:59 +0000
Files and hashes:         1: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: m6rnn8ZAuVjxMd48EgPV3+0Cl8Zw59lYNzm7DCNuh7E=)
                          2: stYBdowOVPO4I6l2lk6N70Rzn-E.roa (hash: YY8VJy7fjrv/nyUerV6XVPDCUnj9z+ve+4ysfFvneOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:a9:fb:6d:70:6c:62:4a:05:63:54:33:9e:7d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
        Validity
            Not Before: Apr 17 00:00:59 2026 GMT
            Not After : Apr 18 00:00:59 2026 GMT
        Subject: CN=4f670c2ecefe14cfee63d44661f671ab603cf365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:26:1b:42:c2:a0:94:98:68:68:42:e5:79:18:
                    3f:ad:b7:12:ba:72:04:e4:74:90:d2:09:10:e0:cd:
                    cf:3d:4d:94:df:2f:82:0b:17:8f:dc:46:cf:83:e5:
                    b6:49:3d:41:8d:37:5d:92:2c:f6:4d:c1:ff:6a:e3:
                    ea:3e:22:98:74:1e:3f:8a:a6:e0:fd:b3:e8:59:5d:
                    15:e8:20:88:d6:10:9d:1d:83:69:32:e2:3e:ae:a1:
                    53:cd:2f:c5:a2:12:e6:8b:f7:1b:83:65:21:75:02:
                    f7:65:11:62:dd:31:78:bf:03:76:cd:ac:75:f6:67:
                    07:a6:de:f0:25:fa:01:36:9c:1b:5e:f6:db:2c:72:
                    06:25:88:c2:67:3d:9b:d3:66:43:8d:61:fd:53:46:
                    05:5c:99:41:71:ba:e8:51:d5:ee:e9:2b:a2:2e:6a:
                    ea:07:3a:18:fd:40:4e:34:5d:93:f2:5c:12:58:03:
                    e7:b4:e6:11:9c:4e:20:26:f4:06:92:55:0f:23:58:
                    e9:4d:63:9c:63:59:86:1d:1e:81:26:f5:fb:74:b2:
                    a7:b7:dd:10:6c:bd:75:91:10:eb:66:21:9a:10:cf:
                    0e:8b:aa:b4:b2:56:4c:24:44:d2:2a:a3:7b:2a:fa:
                    41:c7:fd:b2:d1:12:cc:9c:fd:e1:2d:30:01:74:98:
                    62:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:67:0C:2E:CE:FE:14:CF:EE:63:D4:46:61:F6:71:AB:60:3C:F3:65
            X509v3 Authority Key Identifier:
                keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:15:5d:5c:c2:76:87:e6:b6:6b:0d:5b:aa:04:4a:b0:8d:2f:
         30:70:32:19:4b:ae:14:f2:9e:5a:46:c0:03:d6:f3:83:37:cf:
         aa:e4:00:b9:dd:88:2a:ac:33:99:92:e0:8d:55:88:28:46:ca:
         58:8b:e1:11:31:83:c1:5c:27:cd:82:91:fc:38:df:6e:49:a6:
         4d:bd:88:a8:e4:63:3c:bc:4a:98:b4:7b:74:e8:20:e3:8d:fa:
         86:76:4f:da:3f:85:85:53:90:8d:36:ef:08:2d:37:be:2f:fc:
         dd:e8:8d:4b:0e:05:7e:9c:5a:f7:d0:66:9a:0c:d2:8a:57:19:
         a7:2a:de:b4:88:5a:96:35:d4:05:2d:ec:fe:d4:15:9b:69:da:
         c2:4b:11:f0:52:60:b2:b9:02:ea:42:ea:71:38:55:d9:f9:b6:
         f7:d5:d5:af:04:a6:a3:fc:43:58:94:50:c8:3b:09:d6:3e:f4:
         b1:26:67:55:7e:d9:81:90:96:15:5f:72:b2:13:be:69:b4:34:
         32:68:f8:90:e4:0d:36:4c:26:bc:32:83:b5:82:fc:bb:8a:40:
         d5:56:9d:9c:50:dd:f3:55:a6:18:7d:fb:d9:d5:6e:ef:ce:e6:
         63:34:0f:b2:da:4b:c7:94:94:ea:74:28:f5:a9:8c:ee:08:d1:
         ea:f0:0b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:04:32 2026 by rpki-client