Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft
File:                     EDQGi16fcxQnfivpcmxzITGxdWw.mft (raw, json)
Hash identifier:          ueBxaDh/yhWZiXIChCxkHMtl52jHiuFrThqVvt9RlNY=
Subject key identifier:   B7:39:2E:FE:F3:6E:4B:00:46:CF:23:57:40:B5:B9:E9:6C:36:B8:2C
Authority key identifier: 10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C
Certificate issuer:       /CN=1034068b5e9f7314277e2be9726c732131b1756c
Certificate serial:       019D9A74BA408B5CBA5EAA079FBA8ADD403E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft
Manifest number:          1337
Signing time:             Fri 17 Apr 2026 08:00:34 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:34 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:34 +0000
Files and hashes:         1: EDQGi16fcxQnfivpcmxzITGxdWw.crl (hash: 3rOid8qZERPfEaizNNajsT4S0EsyzBz+QMXygvfKSBQ=)
                          2: cXWQ-OpF5MSEV9XXbIDzHhHfbiM.roa (hash: Zd/md0ukR3Ww6duMAFycBCzHzVmUmkCQrekRunAgt5g=)
                          3: jC1UMhzd3h1Q3atKjtTnlNFdpsA.roa (hash: NFrj/OLNRqiAhcTOxCMOPhXsniRxRJ7HRzSqYahvwnI=)
                          4: rsawLrO96jwzQrzzu3CfFkKtYnw.roa (hash: HQ1fM2wpncL4ax6ClPUzOmxESKKTwCgtFlm5YWlXFgU=)
                          5: vHD86KYB1N29A0e-cvqB8rPM3F8.roa (hash: DwKiTQxab+kFzesYYY7Xei5mhs2C32CiRtfMcTYT+ys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:ba:40:8b:5c:ba:5e:aa:07:9f:ba:8a:dd:40:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1034068b5e9f7314277e2be9726c732131b1756c
        Validity
            Not Before: Apr 17 08:00:34 2026 GMT
            Not After : Apr 18 08:00:34 2026 GMT
        Subject: CN=b7392efef36e4b0046cf235740b5b9e96c36b82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5b:dc:fe:56:ee:74:a5:81:56:81:51:d7:b3:
                    db:6a:14:51:4a:73:fe:e8:b1:1e:77:09:27:c0:b8:
                    e3:69:40:97:ff:96:a8:3f:ce:04:53:47:b1:d1:10:
                    3c:db:61:95:79:99:40:ef:e2:2f:54:96:43:e5:52:
                    66:0a:7e:60:33:d6:38:c8:ae:a9:04:06:fb:09:93:
                    0f:c1:77:1d:3b:92:ba:02:1c:fb:eb:d8:77:51:40:
                    c5:29:76:1e:09:34:4a:65:f1:a4:3a:cf:8a:20:59:
                    5f:3e:c2:fc:cd:a1:74:98:d9:0a:a5:0f:4c:a2:90:
                    7b:08:ab:6b:5d:57:6b:46:86:fc:d3:ca:25:7c:65:
                    c4:c4:8b:3b:02:5d:32:31:9e:90:cc:e4:73:9d:09:
                    56:3e:80:0e:e7:df:49:1c:25:65:7f:59:b1:e2:22:
                    9e:a7:db:86:70:6d:ff:df:7f:34:30:b2:f8:30:9f:
                    69:71:09:3b:40:a9:31:42:2a:d7:a6:67:1a:ee:de:
                    29:2a:cb:6d:6e:18:a3:9c:23:ce:60:b8:b2:71:7c:
                    1a:cb:fb:54:0a:3b:97:ac:59:98:9b:c6:91:16:19:
                    e0:81:74:a5:24:f9:e2:fd:2b:83:0d:14:ef:42:b1:
                    dd:b2:dc:7b:2f:7e:53:de:27:43:e3:90:57:1d:ee:
                    07:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:39:2E:FE:F3:6E:4B:00:46:CF:23:57:40:B5:B9:E9:6C:36:B8:2C
            X509v3 Authority Key Identifier:
                keyid:10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:18:48:d1:4b:61:26:5e:a8:ab:82:b2:99:b5:df:24:03:dd:
         e3:16:dc:6b:91:d0:a9:1d:1c:60:bf:6b:15:98:87:47:83:e9:
         c2:98:c1:47:47:c1:c8:d0:c0:b1:3f:5e:e0:7c:ad:46:88:46:
         5e:ad:cd:06:d0:92:36:44:40:78:5a:e4:e4:46:25:c6:a8:b1:
         2a:29:fc:43:cd:7e:12:38:da:f0:bb:46:ac:28:69:b6:f8:64:
         b9:80:e6:79:7a:00:20:e7:b8:cf:90:cd:48:3d:a0:8f:ea:52:
         2e:29:98:e8:6d:69:9d:41:9c:82:55:e8:b9:c2:f7:35:07:e7:
         44:86:33:05:6c:f3:81:37:a5:53:44:10:de:11:a4:b8:88:19:
         2f:05:1e:dc:1a:3d:41:fd:21:16:42:68:1f:b5:45:54:14:da:
         0a:f0:73:58:a6:41:be:9f:fc:b9:27:f5:dd:af:82:b0:d8:61:
         31:3c:4b:44:36:02:d3:da:57:46:fd:42:a4:94:4c:ba:8f:ac:
         79:e7:cc:c2:b9:bd:c6:01:59:2b:89:3e:2b:b3:d3:52:8c:d6:
         b7:f8:8b:04:37:32:3a:3b:59:63:80:e8:99:67:a1:50:9f:15:
         f7:ca:2c:6c:0f:86:f9:b7:df:30:fb:c9:d3:0e:6c:22:5b:7c:
         44:b8:71:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:26 2026 by rpki-client