Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File:                     I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier:          17u3Yh8NEp+U1T9E4qub5zyfUmGUFB2OHdzy+q2qLkI=
Subject key identifier:   13:C9:8B:7F:70:02:D8:61:EB:F8:73:DD:22:F5:9C:BF:D0:DD:3E:6B
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer:       /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial:       019D9886B7F77C1E726CC0E972F399719D6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number:          18C7
Signing time:             Thu 16 Apr 2026 23:00:58 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:58 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:58 +0000
Files and hashes:         1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: tp7GdTYaNWgD9NJ/lMAoZoXLH2/NMpLyZMnAxlgRzio=)
                          2: YV5YbyzQ4v-R-M9sTv2X0MLou60.roa (hash: Wnl73KWmj3QlZUmHv6GR1P0QHj68SNwwAwR9VDBTafI=)
                          3: _IN-lUbsVoIujOIBhlqniYDIAj4.roa (hash: OVNWFTAvftStnpg3u2YMXcX4JyBnzVvFH9bIqxUH8FU=)
                          4: b0HKN9ab1P1Sr3YvvuEwkf7syng.roa (hash: 9hsVaqxhAVdgsjntPxtz6LrMJOjEjADE4hMXgvvmdoo=)
                          5: t_VAikl6AuDV7KY1lJg71qWe6PI.roa (hash: 5EWDR0oT5pCzdNuqq4gxPs1dK+scKpifLsg8E3R3q10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:b7:f7:7c:1e:72:6c:c0:e9:72:f3:99:71:9d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
        Validity
            Not Before: Apr 16 23:00:58 2026 GMT
            Not After : Apr 17 23:00:58 2026 GMT
        Subject: CN=13c98b7f7002d861ebf873dd22f59cbfd0dd3e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a2:85:8a:a6:4a:11:05:1c:8d:d2:48:35:ce:
                    b1:26:87:27:72:61:69:3c:85:e7:75:c3:82:3d:3d:
                    19:f2:37:fa:a1:8d:6e:18:ec:35:d6:4f:65:6b:b9:
                    62:98:48:24:cd:dd:01:4a:c7:65:b5:e2:ef:39:90:
                    bf:35:57:4d:46:1d:f5:ea:30:45:8f:0a:10:13:9d:
                    be:3b:49:dd:e5:fd:c0:1c:b7:c0:0c:57:a8:26:1a:
                    4d:f6:b7:d6:61:a8:b6:39:e3:68:56:ff:dc:9e:6d:
                    79:e6:c9:bd:ea:44:b3:54:27:b4:71:95:eb:85:00:
                    2f:c5:64:63:e0:b1:09:f7:44:cb:d6:13:d9:a6:b3:
                    9a:98:e8:81:36:4b:5c:e2:6f:d8:90:59:e6:82:57:
                    7b:61:68:06:d7:de:0f:fc:4c:1d:34:e5:7d:00:f7:
                    f9:25:65:38:16:f3:ba:35:16:68:1f:4a:e1:b4:d4:
                    eb:3e:ba:cc:9e:4c:de:41:3f:db:6e:ed:aa:0e:fd:
                    3a:7e:30:4d:95:61:02:ba:bb:02:ca:82:96:f6:91:
                    78:e5:c6:aa:3f:3a:83:b2:6f:53:14:13:5a:64:3f:
                    2f:bd:d9:ce:20:b1:f0:24:2a:3a:21:f3:24:e5:3d:
                    d9:48:78:a7:3b:e7:24:1b:34:08:68:6e:80:a3:23:
                    b3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C9:8B:7F:70:02:D8:61:EB:F8:73:DD:22:F5:9C:BF:D0:DD:3E:6B
            X509v3 Authority Key Identifier:
                keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f5:95:94:d3:bf:79:73:20:bb:d0:26:9b:f3:af:d1:b5:74:
         47:37:68:83:5b:60:5a:f8:1f:c0:48:2f:9d:70:33:a3:2f:ab:
         dc:dc:98:3c:70:77:d5:36:1d:f3:16:da:cc:4c:4e:83:ac:c4:
         94:ae:98:e4:b0:8e:34:67:af:d2:95:1e:4d:41:79:b6:96:6b:
         3e:20:a6:21:a5:fd:6f:58:3a:32:0d:d9:21:95:1c:1f:16:b2:
         b8:a7:4a:5c:80:6c:bc:15:a6:eb:1b:2f:2e:b5:a9:a6:24:07:
         0b:a2:35:c0:58:cb:09:98:e0:34:92:40:7c:8a:6a:5a:9c:7b:
         3c:81:63:95:a7:a9:cb:1a:1f:84:15:82:af:e5:f1:8b:19:0f:
         cb:80:79:31:48:0b:38:fb:26:ec:c4:63:02:2f:dc:f0:8f:e4:
         b3:8e:51:c1:34:91:79:1a:98:35:1f:9a:2e:8e:9f:6b:ee:17:
         dd:dc:0a:ba:d7:a0:e1:18:dd:61:7f:9a:d2:de:1a:a4:5d:9c:
         77:79:cc:a2:f6:6e:fd:17:c1:6d:99:15:e6:c8:51:80:50:a2:
         6d:ee:85:fa:fe:11:c8:d3:6d:8f:a3:ac:62:a6:85:60:e7:7f:
         05:fa:3b:29:b1:bf:ef:58:82:a4:de:d1:78:f2:20:86:43:ed:
         4b:b7:26:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:34:37 2026 by rpki-client