Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
File:                     nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft (raw, json)
Hash identifier:          O5l8SRlDNOQ0JJZj7puBoVL74DJbgqrAf3CzwYkNzuM=
Subject key identifier:   B9:59:06:BD:82:A0:47:39:E3:E3:D6:D5:98:67:8F:A5:70:17:19:83
Authority key identifier: 9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B
Certificate issuer:       /CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
Certificate serial:       019D9A3EF0A2B2D58264B756AAB97D05EC53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
Manifest number:          1583
Signing time:             Fri 17 Apr 2026 07:01:49 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:49 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:49 +0000
Files and hashes:         1: UYQCKBIJs_jm7bQEQlMrwuHX6Ds.roa (hash: /Rb7W1hiZzDM8zy+jiVsugvOM6pnTRPvaLJxUTo+MJw=)
                          2: nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl (hash: DdCWCKHDeVyufnPBVP9X+VWtGgKZmA1ky27+2828DQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:f0:a2:b2:d5:82:64:b7:56:aa:b9:7d:05:ec:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
        Validity
            Not Before: Apr 17 07:01:49 2026 GMT
            Not After : Apr 18 07:01:49 2026 GMT
        Subject: CN=b95906bd82a04739e3e3d6d598678fa570171983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:59:43:5a:c9:1c:8f:3e:73:4d:05:2f:d5:9a:
                    77:3b:45:29:0e:c3:56:05:fe:f0:14:df:3c:5a:53:
                    54:89:51:eb:2a:f8:f4:62:bf:4e:c8:b4:3f:ea:fe:
                    17:a3:8c:d2:37:73:99:9e:49:5c:2a:03:f1:17:6d:
                    b7:57:1d:3a:b5:83:78:52:4b:1f:4e:51:4f:1c:ac:
                    55:d9:f6:bf:6f:48:e4:40:b4:90:8d:bd:9c:79:c9:
                    e0:40:ad:91:4a:20:60:78:8a:33:a8:f6:d3:b7:72:
                    8d:9a:f1:d8:18:59:80:35:ec:b3:88:6b:a6:f2:7c:
                    08:4d:a4:e8:36:17:86:37:2d:e1:00:c8:41:50:3c:
                    40:9c:e1:82:e2:3a:36:66:bb:48:71:17:f2:e0:d0:
                    46:de:8f:5a:11:f4:2a:29:ab:cc:bb:6f:7e:47:89:
                    dd:ab:44:27:ae:35:cc:c4:83:6c:4c:73:97:f5:6a:
                    49:95:e6:9e:2f:f1:15:36:ed:81:b1:f4:70:d9:8a:
                    99:fc:33:18:db:e0:2a:8b:9d:13:04:d2:20:ff:12:
                    32:7d:a3:c7:e8:cd:6a:de:b9:64:ad:63:af:da:43:
                    1e:cb:f9:2d:90:a6:4a:39:ad:e7:eb:47:fe:b0:8a:
                    53:d4:0b:41:b4:e2:d1:0b:c6:8e:f3:bd:a0:5d:16:
                    b4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:59:06:BD:82:A0:47:39:E3:E3:D6:D5:98:67:8F:A5:70:17:19:83
            X509v3 Authority Key Identifier:
                keyid:9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:3a:f5:67:36:b5:d2:35:20:c7:64:c1:81:bd:d9:8c:9b:68:
         6f:52:73:05:b0:a8:8b:e2:39:65:d3:3c:36:44:9d:02:c3:ca:
         72:03:30:10:1e:8b:c8:18:9a:81:e1:1d:69:15:82:bd:8f:d7:
         38:63:9a:77:91:30:78:bd:e3:b0:dc:fd:b6:8f:24:63:aa:f6:
         7c:0c:c8:72:35:aa:04:e6:e1:33:d2:56:3b:06:ab:2f:b0:68:
         94:17:a1:0d:89:4b:aa:7e:ad:25:0e:18:d8:99:7b:6f:05:31:
         11:d8:ae:e3:d1:f3:64:45:25:a9:23:5a:ba:a1:20:29:25:7c:
         00:1e:13:e3:74:12:7b:c6:92:fa:1b:22:2f:c1:3d:ba:ca:6a:
         ac:a3:8c:fc:aa:39:dd:84:5c:2c:be:33:75:d7:4c:63:4d:20:
         6c:c2:5f:c5:71:fe:ea:ae:47:6b:d1:9e:91:be:22:1b:d0:4a:
         e3:06:69:c5:8f:76:1d:22:37:02:41:4e:a8:2f:a8:23:78:ce:
         6e:38:d9:78:04:be:96:b4:16:e7:c1:10:e7:80:0b:f5:21:c0:
         a7:8a:59:b4:d7:8f:64:3a:78:ec:47:45:8e:ef:a7:b5:0a:29:
         c0:a8:e3:f6:90:0e:76:74:c4:16:40:82:7a:6b:84:ad:d1:da:
         6d:1e:7b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:41:37 2026 by rpki-client