Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
File:                     t7Z7pXn0ikIHrECav08BGUBG6jo.mft (raw, json)
Hash identifier:          yjwBVnLEiIXui4/cSQssbBbYobYlf03ibdHlWpxmN0w=
Subject key identifier:   C5:EE:52:4E:79:DF:CD:16:55:B7:3B:C5:26:8D:3C:5C:0E:75:90:95
Authority key identifier: B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
Certificate issuer:       /CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Certificate serial:       019D98502FD49A8049F08A55629AB72104D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
Manifest number:          18C6
Signing time:             Thu 16 Apr 2026 22:01:25 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:25 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:25 +0000
Files and hashes:         1: l2K815BrxnyKxX1Z80Pet8asKu0.roa (hash: Eu+brIQ4UCkAdjGsx7xGNJPQX039Fdi67RknQ8veG7g=)
                          2: t7Z7pXn0ikIHrECav08BGUBG6jo.crl (hash: cFtMTjCBqleGt7MO1u6Fi11hw6NDPRQmvTqgnmh4PzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:2f:d4:9a:80:49:f0:8a:55:62:9a:b7:21:04:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
        Validity
            Not Before: Apr 16 22:01:25 2026 GMT
            Not After : Apr 17 22:01:25 2026 GMT
        Subject: CN=c5ee524e79dfcd1655b73bc5268d3c5c0e759095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2b:31:80:e6:6f:69:14:f1:ce:6f:38:87:1a:
                    1d:4b:53:a7:da:a5:df:34:5e:fe:3a:55:52:2d:99:
                    2d:a8:b2:6e:9d:df:7b:fe:34:f9:88:74:0d:fd:7f:
                    df:09:02:5b:cb:d1:20:8e:42:13:39:de:63:ec:52:
                    e7:4a:56:46:91:7c:c7:fe:98:95:f0:90:92:7a:06:
                    49:68:dd:dd:ed:88:ae:27:4d:b8:95:a3:b0:4f:32:
                    7f:54:1e:f2:7a:5b:f2:67:98:8c:b2:de:62:57:79:
                    8c:0b:4d:f6:6e:1a:e5:cf:7a:61:9c:20:e2:dc:33:
                    65:d9:1a:b1:8c:27:76:87:a5:04:12:4a:39:8f:98:
                    e6:9f:d7:7d:58:29:63:92:14:ce:72:81:d3:11:36:
                    f8:28:fb:b3:6c:77:b6:39:e8:11:83:f1:13:6a:ca:
                    40:0e:e1:a5:e6:df:7f:ef:de:56:cb:a5:fb:56:26:
                    13:b1:d6:ca:83:0e:da:26:4a:27:1d:26:e4:02:a6:
                    65:6a:f2:c0:6a:b4:dc:11:74:f5:f4:e8:36:14:2d:
                    86:4d:d1:82:33:3c:44:07:c7:12:9f:d0:de:4e:db:
                    d3:d9:00:47:b8:50:04:af:19:0b:e3:ae:03:e5:c5:
                    dc:09:c8:f1:9c:9f:b3:cc:c2:94:31:28:ed:77:2a:
                    68:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EE:52:4E:79:DF:CD:16:55:B7:3B:C5:26:8D:3C:5C:0E:75:90:95
            X509v3 Authority Key Identifier:
                keyid:B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:62:43:fa:af:5c:b9:f6:44:07:de:43:60:7f:c1:c4:05:7d:
         2d:b3:03:54:98:42:fc:ae:3b:0c:9f:1c:06:cb:d1:8d:80:04:
         23:19:5c:40:3e:13:5c:fd:58:7a:46:a7:0c:2b:dd:e4:44:0e:
         b7:ff:79:36:ca:67:ef:6c:f7:87:ef:8a:30:c6:2c:7e:fc:85:
         14:cf:a9:f7:fa:3f:05:7b:3f:ee:e9:97:e1:39:b2:17:5f:b7:
         3b:cd:4a:32:3b:ee:99:4c:1e:54:0b:35:21:25:3e:31:29:de:
         61:db:8e:a0:e6:04:ec:8e:da:6a:34:0f:80:8e:a2:3e:08:63:
         0a:94:01:26:d5:31:e9:29:e8:61:cf:fd:ec:af:2f:34:8c:62:
         99:4b:0b:84:ea:c0:11:ff:a0:64:e2:59:6d:de:43:59:83:81:
         73:36:7b:a2:a3:de:88:88:7b:f9:60:32:22:84:77:c0:45:77:
         7f:75:3b:7b:af:ea:d6:d8:e8:fe:98:b2:d8:82:ab:77:0e:1f:
         b5:f4:0e:0e:61:bb:9c:1e:d9:6e:71:e6:a8:4f:c9:29:35:9f:
         75:03:cd:d5:0e:fb:70:f3:a5:ff:da:7c:d4:f9:7c:99:aa:81:
         46:47:9e:68:a1:6e:d8:0d:3c:2d:85:be:52:b9:0e:7c:e6:18:
         45:0b:8b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:45 2026 by rpki-client