Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
File:                     7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft (raw, json)
Hash identifier:          8wXVGuziHFk9u7rqD25GIvUqfFZtlPdqiB3ZzD1G1Uw=
Subject key identifier:   D2:6C:5B:FE:CC:AB:26:E7:C3:13:79:FC:43:EF:D1:4B:EC:FA:22:46
Authority key identifier: ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
Certificate issuer:       /CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Certificate serial:       019D9A0731DB6464235E12EEA33B24D6D6A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 06:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:55 +0000
Files and hashes:         1: 1zEvIox69c2lph8To4y01za8sxk.roa (hash: NK/LeMgA4R1YoY3PIzw3AAc8sU/wtNG17ZKOs8j1HAs=)
                          2: 7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl (hash: 06u0UOPw2CIxjEhZVpO1aVtmHZQQbbM3vx7Fjr+XJlQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:31:db:64:64:23:5e:12:ee:a3:3b:24:d6:d6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
        Validity
            Not Before: Apr 17 06:00:55 2026 GMT
            Not After : Apr 18 06:00:55 2026 GMT
        Subject: CN=d26c5bfeccab26e7c31379fc43efd14becfa2246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:75:02:cb:6f:10:a7:8f:58:ec:9d:8b:f4:c0:
                    c0:48:5b:8c:9e:33:cb:2e:59:e6:d5:61:5d:fd:d1:
                    a3:7d:69:0d:9c:e5:00:15:be:a6:2f:74:c8:33:f8:
                    ab:57:00:7c:ff:ab:0a:0b:71:41:b0:ee:fe:e4:03:
                    27:cb:9f:71:d9:d8:ee:20:10:50:57:cd:f6:72:0a:
                    57:a1:86:19:88:08:d6:13:ac:2b:19:3b:a4:37:ae:
                    6e:90:84:09:3c:ce:ff:69:e9:38:1a:aa:b2:6d:b7:
                    a0:b1:bd:f9:74:98:ec:48:d6:b9:32:3b:ac:6a:9b:
                    29:4d:11:07:3b:0c:c4:72:ba:56:17:71:c0:74:25:
                    91:d0:66:de:28:bf:4b:78:62:a3:f8:c4:5a:d4:67:
                    15:49:f9:9f:3b:63:2b:80:bd:c6:ec:61:d1:6d:a5:
                    0b:5b:a7:ea:f2:37:16:9d:e2:24:69:c9:7a:9a:66:
                    39:bc:10:39:c2:4b:74:8d:6c:f1:d3:b8:07:4e:46:
                    53:b5:1e:b4:a8:2c:6c:cb:d4:f9:64:81:fb:fc:51:
                    a7:1f:0f:51:8b:03:6e:4c:e1:66:b7:7c:df:ae:d5:
                    0d:0f:bd:96:c0:9d:d9:38:57:27:7f:f5:56:ae:2c:
                    31:34:46:50:26:a1:94:59:33:83:d6:c8:02:92:e9:
                    c8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6C:5B:FE:CC:AB:26:E7:C3:13:79:FC:43:EF:D1:4B:EC:FA:22:46
            X509v3 Authority Key Identifier:
                keyid:ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d9:8d:20:a0:7b:d1:8d:b4:99:b8:bd:c2:98:6b:8a:61:51:
         ed:2e:5d:c8:5a:35:c3:cf:80:90:56:0c:5e:34:d8:cc:e2:02:
         84:27:e1:fc:d1:96:37:be:4a:6a:33:df:34:c7:42:0b:a9:81:
         0f:5d:45:8c:1f:37:bc:ad:95:84:44:de:3e:30:41:66:ca:2b:
         e6:94:7d:50:b3:4b:7d:6a:f6:ac:9e:c6:ca:2a:a2:a6:42:f3:
         fc:cf:89:a3:65:79:2e:7b:9c:f2:c2:83:26:99:8a:3c:5e:c7:
         22:f1:4f:f9:15:d4:f1:25:e6:7e:71:11:88:88:92:38:37:45:
         3f:08:eb:ad:32:7e:36:4b:aa:d1:1a:b5:e1:8e:7b:72:e7:53:
         da:87:8f:71:da:dc:fc:54:15:63:a7:20:6a:78:d2:9b:51:77:
         77:d1:91:6c:65:8b:fa:fb:4f:13:33:55:96:26:2e:a8:e6:af:
         64:05:9e:83:26:79:e3:d2:1b:1a:ff:37:f1:e0:f0:36:ac:20:
         ad:c4:6c:4a:0d:97:87:d6:60:62:24:e5:e2:5e:d4:63:ef:fd:
         3f:f0:e1:3b:62:a5:e7:b7:e1:ae:a8:49:6f:bc:bc:1e:17:4e:
         b3:23:e8:64:ab:4b:c6:31:71:ac:6c:f2:38:61:6a:fc:bd:e2:
         2f:f4:58:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:51:41 2026 by rpki-client