Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
File:                     eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft (raw, json)
Hash identifier:          19L7AqTVcbBJ/Uf5+945JJw7DG0QYAaPK49+oH3jc6I=
Subject key identifier:   BE:92:DA:35:96:88:B7:58:E8:1C:7A:18:30:C8:0C:02:B0:99:55:D1
Authority key identifier: 78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
Certificate issuer:       /CN=78024d480b37705fa0091b5774174e80fdd8add8
Certificate serial:       019DA454226F5356F2DFE3E8C2A121F924CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
Manifest number:          11B4
Signing time:             Sun 19 Apr 2026 06:01:10 +0000
Manifest this update:     Sun 19 Apr 2026 06:01:10 +0000
Manifest next update:     Mon 20 Apr 2026 06:01:10 +0000
Files and hashes:         1: LT7GFR0jf0xcBNNPyycF_GViPzE.roa (hash: oFSEPnzKQMXkquMCR19L9olzLlP6zAcGwbhD6Y2o3Lc=)
                          2: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl (hash: TtryGt8cOT738B4IjCp0bhv1Vcm++pV+Zf18PWLMWyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:54:22:6f:53:56:f2:df:e3:e8:c2:a1:21:f9:24:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78024d480b37705fa0091b5774174e80fdd8add8
        Validity
            Not Before: Apr 19 06:01:10 2026 GMT
            Not After : Apr 20 06:01:10 2026 GMT
        Subject: CN=be92da359688b758e81c7a1830c80c02b09955d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d5:be:de:a2:84:25:67:fb:a9:65:e3:0c:3e:
                    ee:1a:74:98:51:6c:1f:23:84:83:b0:5d:e0:66:fc:
                    bb:36:f8:76:1e:6f:13:b6:17:07:12:bb:4a:a2:39:
                    d7:e6:18:19:db:90:18:7e:ef:40:5a:64:06:aa:33:
                    d3:18:cb:74:24:a5:47:15:3a:ec:bc:25:8f:9a:36:
                    b7:0c:31:0f:da:a9:26:9e:0f:7e:80:b3:06:97:5a:
                    0e:d6:84:07:10:20:ce:45:9e:bc:e5:48:af:6c:41:
                    0f:54:cf:41:e0:02:b6:a4:27:57:6d:7b:7f:5c:59:
                    d7:ee:04:9e:a9:c2:f8:c0:2b:8a:a6:6f:a1:c0:cc:
                    8f:3b:07:35:07:81:4b:43:65:6e:9f:e3:0d:22:24:
                    7f:7b:2f:fd:05:14:da:de:5f:af:5d:1c:86:c9:86:
                    a9:7c:2d:ad:6c:f0:b9:9b:6d:d7:06:f0:69:78:08:
                    19:f1:24:33:ab:c4:e4:3b:18:19:f2:35:d2:13:ba:
                    ef:6e:9b:21:a3:7d:c8:aa:32:c7:21:fe:ec:72:ca:
                    a8:a9:55:9a:4c:92:f0:8c:34:59:ce:76:5c:75:e1:
                    65:39:65:26:88:d4:b0:f5:88:0c:1f:6b:31:70:c6:
                    ae:25:92:ca:3b:80:23:ec:79:1a:8f:c4:2c:59:b5:
                    e0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:92:DA:35:96:88:B7:58:E8:1C:7A:18:30:C8:0C:02:B0:99:55:D1
            X509v3 Authority Key Identifier:
                keyid:78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:73:58:8a:e1:0c:fa:a9:21:45:a0:59:3f:d7:fd:33:26:4f:
         d8:6c:00:1d:d4:56:38:a9:aa:be:74:0d:29:3e:b4:83:1f:c0:
         88:4f:6b:d1:0a:1a:09:d7:e7:8f:22:da:ca:6b:22:2e:38:c3:
         88:14:85:aa:88:9d:10:5c:5f:c5:89:b4:64:7a:29:19:9e:5a:
         f8:30:7a:18:65:c6:7b:d5:fb:bf:73:13:5a:4f:e8:9e:2a:26:
         06:8a:9d:1f:34:5b:55:91:d0:0f:a9:d7:60:98:17:d7:82:f6:
         c7:ce:5a:74:89:d3:c6:b5:2c:a0:89:f8:94:1d:53:6e:10:91:
         6a:26:d3:ab:f5:f9:b7:54:5a:c2:e7:7e:95:92:6b:18:d4:68:
         a6:17:f0:81:85:3e:03:b9:fe:49:95:fd:f9:53:57:ca:68:58:
         be:f8:f3:5a:ad:6d:6e:62:76:0d:6c:07:30:81:92:18:6e:21:
         85:d4:30:09:6c:bf:e2:d5:f5:e8:60:cd:38:ea:11:a6:01:7e:
         77:cd:4d:6f:76:c0:b9:3c:bf:f1:62:cb:d0:68:c1:d5:bf:58:
         84:b3:f1:6c:0d:b1:85:d5:40:a9:67:74:36:69:d5:cb:03:e1:
         b6:a1:59:d5:21:ce:27:3b:fe:ab:6a:6a:4b:0c:c1:a8:ce:33:
         1f:f4:c8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:25 2026 by rpki-client