Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
File:                     E3g31dF5adK8DUTlY0qUv3006Qs.mft (raw, json)
Hash identifier:          jumtLu5wLVIhYf9M+p9icCvnLm+ERJSCCShUbyk/Q+4=
Subject key identifier:   A0:3D:66:B4:08:E1:F3:3F:08:16:3B:E6:B1:A4:BF:26:6C:2C:7C:EF
Authority key identifier: 13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
Certificate issuer:       /CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Certificate serial:       019D9AABEB9AC074A2E9D860A44319C4096C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
Manifest number:          122B
Signing time:             Fri 17 Apr 2026 09:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:51 +0000
Files and hashes:         1: E3g31dF5adK8DUTlY0qUv3006Qs.crl (hash: oue+3LhAuJPIesRO63/v7VHc3z4yWMOWdETZJjEFMhM=)
                          2: da3VworWvFmFbR1FufRr5CMYvkc.roa (hash: hwa/D4Vf8y1DVcvliVC0sWu2QdlvVDaI6hD4bxSYxVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:eb:9a:c0:74:a2:e9:d8:60:a4:43:19:c4:09:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
        Validity
            Not Before: Apr 17 09:00:51 2026 GMT
            Not After : Apr 18 09:00:51 2026 GMT
        Subject: CN=a03d66b408e1f33f08163be6b1a4bf266c2c7cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bb:31:28:10:9d:37:7b:99:da:59:8c:3f:f0:
                    4b:e7:01:71:8e:bf:71:8d:ba:bb:52:7e:63:29:47:
                    09:5c:29:70:53:51:61:b9:85:51:27:6c:cf:ec:04:
                    fe:4d:c0:8e:05:f5:ef:3d:88:c1:05:b2:51:2f:71:
                    55:95:d6:c2:23:e2:61:2e:f8:81:62:1a:78:9d:e4:
                    ac:be:c8:4f:da:c9:00:dd:1c:cf:f7:70:27:93:af:
                    54:0d:9e:f7:e7:8e:cc:03:a9:23:3e:89:4d:c6:0b:
                    b8:26:b4:67:26:c6:a4:9e:b7:a4:d5:10:f3:c8:9c:
                    b1:3a:f4:86:63:4d:90:b8:7d:47:e4:1c:4a:20:8d:
                    7a:e2:98:15:7d:53:d2:da:c5:0b:50:ed:34:79:c1:
                    08:f4:23:d6:d6:1b:38:63:57:3c:41:65:40:8c:9c:
                    e2:7b:1d:de:a4:2c:44:60:f6:43:4e:8f:70:cb:8f:
                    a4:c2:c0:7a:5a:5f:c4:2b:ac:fe:9c:aa:f6:f1:4a:
                    c7:46:56:6f:74:a6:21:31:9b:fd:c2:3c:b7:64:31:
                    f6:66:ed:38:09:ec:3e:49:6b:16:bf:7c:a5:d6:8b:
                    9b:9d:8c:07:44:c9:32:36:0b:9f:36:c3:89:ac:e9:
                    3d:80:6f:98:45:61:54:ad:80:55:84:22:54:a6:29:
                    69:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3D:66:B4:08:E1:F3:3F:08:16:3B:E6:B1:A4:BF:26:6C:2C:7C:EF
            X509v3 Authority Key Identifier:
                keyid:13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:29:03:c7:c2:ea:f5:52:f2:3f:d2:95:21:ea:0b:ef:0c:c4:
         50:32:a9:1c:33:2e:a7:6b:f5:83:06:d7:cf:5b:c1:94:4f:c4:
         c2:e4:3f:97:b6:71:13:ea:ec:7a:db:9b:f3:bd:3c:df:92:00:
         c8:47:75:9d:b7:1d:65:7d:2a:aa:4b:ed:4d:8a:a2:4a:a1:3d:
         1f:f7:b6:a6:f7:f3:10:1a:57:fe:13:b7:6b:71:7d:60:41:2e:
         c0:23:20:e4:02:bf:8b:85:6d:10:2d:79:18:1f:a5:a9:59:48:
         d2:8b:08:c3:5a:13:ac:1a:60:27:8e:61:69:c7:da:10:ba:6f:
         de:96:94:b1:0b:62:58:70:d3:09:bf:77:14:29:8a:0b:9c:3e:
         60:03:0d:c8:b6:23:74:e9:62:c0:3f:2f:68:e4:9e:0c:b7:93:
         70:f7:ef:ee:f6:b6:3a:89:e2:d8:79:72:f5:ea:67:f7:67:29:
         f9:87:e2:19:0a:d4:ff:2b:22:3a:3f:59:b9:17:80:88:a9:dd:
         d7:c2:31:55:75:dd:67:1f:04:bf:48:3b:99:e8:5f:60:9a:70:
         ea:61:09:87:41:b5:dd:04:8f:4f:d3:d1:e2:86:07:94:25:37:
         e4:5b:dd:a5:4b:ca:30:77:22:8f:2f:4c:40:16:b8:bc:39:d5:
         18:1d:11:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:01:23 2026 by rpki-client