Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
File:                     E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft (raw, json)
Hash identifier:          QW37e0h7zydOUyy0dBvyNo6GB/ndewUhsHjfCP645dw=
Subject key identifier:   7A:1D:3A:5B:A2:D1:81:B8:6D:94:3C:7D:8F:D4:DB:D7:A1:B0:66:F9
Authority key identifier: 13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B
Certificate issuer:       /CN=13b89b80186332d441bb0515c47261c5ffa0616b
Certificate serial:       019D9818F39247EFA7745D2A37DC1830D10D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
Manifest number:          15F4
Signing time:             Thu 16 Apr 2026 21:01:05 +0000
Manifest this update:     Thu 16 Apr 2026 21:01:05 +0000
Manifest next update:     Fri 17 Apr 2026 21:01:05 +0000
Files and hashes:         1: E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl (hash: ck2letZLSB98wMUeKiAlTFSu858smHt79rOXll7wqM8=)
                          2: ng9Xwpw4kTndq_afGB7nkkVST_Q.roa (hash: EnVisylVrMLRpq23iMqP/krYezkyFTHOer8sFdAaBdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:f3:92:47:ef:a7:74:5d:2a:37:dc:18:30:d1:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b89b80186332d441bb0515c47261c5ffa0616b
        Validity
            Not Before: Apr 16 21:01:05 2026 GMT
            Not After : Apr 17 21:01:05 2026 GMT
        Subject: CN=7a1d3a5ba2d181b86d943c7d8fd4dbd7a1b066f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:af:bb:0a:79:e4:01:9e:73:f5:5e:d9:9a:35:
                    de:38:84:d3:cf:48:ad:cb:e6:61:54:ac:c4:cb:e4:
                    c4:b4:2d:7d:d0:d0:a5:16:67:17:b8:7a:8a:02:50:
                    3f:64:57:a9:ba:d3:19:5e:72:2c:bf:d5:f6:2d:f7:
                    a2:d0:15:17:cd:33:ac:ab:37:42:dd:27:31:81:01:
                    27:a8:c6:9f:88:d9:3e:40:40:95:4f:b5:cb:15:95:
                    ad:eb:36:1d:b4:99:f5:2f:f4:ad:05:01:d0:d7:6c:
                    1f:29:6f:2e:9b:df:c7:e2:51:e5:00:25:64:fb:47:
                    9f:1e:74:53:aa:f8:88:2f:3f:11:0e:5c:36:99:9a:
                    f1:b9:ba:35:f0:3b:0b:2d:ce:92:8d:38:eb:27:cb:
                    f2:ef:a9:92:a9:81:da:54:ea:40:2e:b0:f8:b6:57:
                    9e:d9:5f:c4:51:f4:6c:8a:3e:96:6f:6c:ec:b0:7d:
                    89:23:95:a6:fb:45:35:5a:82:43:3f:82:a2:4f:85:
                    6a:f0:6c:58:ad:c3:0d:7d:da:d2:14:04:63:cf:c3:
                    bf:08:ba:ab:aa:08:bf:06:f3:d6:e7:bc:77:05:36:
                    46:1a:79:e9:33:da:1e:3b:00:69:73:d1:7b:5a:b8:
                    12:01:83:a4:e7:ab:95:df:d0:24:46:ab:3d:8d:1e:
                    87:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1D:3A:5B:A2:D1:81:B8:6D:94:3C:7D:8F:D4:DB:D7:A1:B0:66:F9
            X509v3 Authority Key Identifier:
                keyid:13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:72:9c:52:a9:51:0b:2e:63:60:4a:95:25:c6:14:39:81:80:
         8a:d8:66:18:05:90:f7:21:56:4c:d7:38:21:f6:eb:69:19:20:
         73:5d:88:e8:f7:4c:eb:95:37:9b:3b:1d:93:14:94:13:75:87:
         b7:86:0f:1f:89:ec:bd:56:82:01:3c:4a:4f:bb:d5:5a:13:e5:
         fa:d6:b8:77:e1:8b:a9:a8:f1:80:5b:e4:a8:6b:5d:98:b5:5e:
         86:b2:66:6a:ff:c4:65:6b:e7:55:a0:1e:8d:22:54:45:41:3e:
         88:7a:4d:2d:50:6a:ec:47:3f:6d:ae:1d:98:55:c2:65:47:f7:
         bc:76:dd:f4:29:36:b1:d4:83:23:65:94:d2:23:26:61:83:84:
         17:d8:9e:a7:bd:16:b5:b4:1d:ee:bc:00:27:91:84:b8:5e:d9:
         88:ab:41:c7:02:a3:ed:65:60:95:b0:44:c4:14:47:b6:16:b7:
         36:5c:17:01:c0:00:6b:f3:c0:b4:23:ba:2e:f0:30:4e:65:c7:
         52:b7:36:b3:b2:e9:37:0a:04:5a:90:c1:88:70:3e:ad:8b:f2:
         dd:19:26:32:15:69:50:ed:a1:aa:58:e6:d2:72:b3:27:e2:6b:
         ae:e7:bb:6a:64:24:27:49:5e:04:78:1e:de:e6:8e:e2:2d:ea:
         19:89:c8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:22 2026 by rpki-client