Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
File:                     pg0SlAGyaTo41bQ3Pcdge_hbim4.mft (raw, json)
Hash identifier:          sRzXSsdjzQALG4RsPKlwjH+lqjHa/j0rJ3Fx5FsIF04=
Subject key identifier:   F7:FB:26:03:B0:60:BA:49:6B:76:60:A1:B1:72:58:10:EC:DA:14:9A
Authority key identifier: A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
Certificate issuer:       /CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Certificate serial:       019D981886CADBAA1624AA734C7DFB7F2B9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
Manifest number:          1779
Signing time:             Thu 16 Apr 2026 21:00:37 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:37 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:37 +0000
Files and hashes:         1: Il9HTm1cbmAODNYnWgviSsE98jM.roa (hash: 1b1CWbUFPO+dEyWsVHF8SzkLadyx+wcJAfCiROD6bO0=)
                          2: pg0SlAGyaTo41bQ3Pcdge_hbim4.crl (hash: rWjtvFN3myd+EejpfmAbuZwNnZ9VpnIQ6ppCkVy5RiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:86:ca:db:aa:16:24:aa:73:4c:7d:fb:7f:2b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
        Validity
            Not Before: Apr 16 21:00:37 2026 GMT
            Not After : Apr 17 21:00:37 2026 GMT
        Subject: CN=f7fb2603b060ba496b7660a1b1725810ecda149a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e8:ef:9f:00:02:c7:53:cb:22:d3:1d:35:71:
                    a4:ff:11:c2:4b:eb:f7:d2:d4:b3:7c:dd:3e:53:7e:
                    89:cb:13:fc:ce:ac:63:60:b4:e6:5c:4b:15:b5:7a:
                    e4:62:4e:01:77:aa:91:8a:13:59:97:59:d3:ed:74:
                    70:a5:59:15:e5:36:be:ae:c1:78:5b:7f:90:e5:74:
                    c1:47:9a:7b:c9:88:82:0d:ad:d0:b1:87:43:38:69:
                    4b:00:3f:15:87:17:65:45:47:67:0f:c4:d4:04:9b:
                    08:2c:5f:a3:94:37:34:e5:bf:97:5f:f8:a3:41:5f:
                    fa:59:07:58:af:0d:1d:92:ad:3a:79:69:ad:32:5a:
                    ac:fe:e0:88:4f:2c:0d:e7:8e:e3:99:5a:e6:e7:3b:
                    1c:92:71:ee:46:f2:95:d0:41:6e:d1:58:a1:da:02:
                    a6:f3:44:82:b2:61:1c:19:16:73:6b:13:6c:d0:48:
                    97:f7:bc:1f:ee:cc:2f:2c:4c:ab:76:ae:3c:05:f7:
                    7e:ae:51:77:1f:d3:63:01:d8:b3:cd:b3:b0:08:a1:
                    7a:71:9f:b6:f5:cd:02:15:56:10:ae:38:c9:60:1a:
                    d7:2f:58:fe:a9:8f:cc:c7:72:db:3e:97:5d:6d:d0:
                    14:a8:a4:35:f0:fd:56:77:7d:41:4a:09:80:d9:ca:
                    1c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FB:26:03:B0:60:BA:49:6B:76:60:A1:B1:72:58:10:EC:DA:14:9A
            X509v3 Authority Key Identifier:
                keyid:A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:1a:c7:72:1c:e0:b2:2a:7e:1b:9c:df:04:21:3e:90:e4:31:
         bc:0b:d5:dd:63:4b:52:a5:09:47:cf:83:c5:12:d8:f9:fb:f0:
         ed:ed:29:42:be:4b:89:5b:83:4a:30:ea:94:1f:c6:84:2d:27:
         74:6d:5d:a7:dc:51:5b:d3:39:79:bf:fa:9d:d9:71:40:ad:66:
         fb:c0:cf:03:39:c6:7c:bd:db:90:f9:0a:8e:ca:1c:d4:c7:52:
         20:67:c4:cb:8c:ae:ae:1e:56:0f:80:82:c7:70:da:cd:85:df:
         49:4d:70:b1:bc:7f:cf:37:b2:d8:34:2a:1c:0e:1e:0f:ad:20:
         46:37:5c:b4:85:aa:ce:1b:c0:d6:7b:a3:d1:07:6e:d9:4a:17:
         cb:5f:d5:11:d4:de:0d:ef:d8:91:84:ca:39:f6:6b:e3:a5:89:
         a2:ae:11:e4:56:df:da:42:40:8d:34:0c:5d:aa:76:01:0f:57:
         a1:fb:d8:47:95:7d:fb:09:74:ce:34:1b:9a:c7:35:21:ac:2d:
         57:c6:77:4d:e4:a4:a3:44:d6:1f:bf:64:60:a3:2f:ef:8c:7e:
         9c:a6:87:ab:7d:c2:e9:61:6a:de:5b:1c:53:ac:74:6a:09:01:
         d0:d4:d1:dc:f6:2c:4e:31:a1:f0:ac:6e:e8:d0:17:3c:22:43:
         cc:ba:27:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:43:21 2026 by rpki-client