Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
File:                     t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft (raw, json)
Hash identifier:          ZnyzIa9gRRNfjAfXhzmLDfUX3H66n6LGXLTOoK9S0KU=
Subject key identifier:   62:7D:73:CA:25:DA:ED:5D:DF:0F:59:F4:90:6F:34:F9:2B:AE:9E:AD
Authority key identifier: B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47
Certificate issuer:       /CN=b77627cafe755785750bde5ba49e6c1091bf4247
Certificate serial:       019D9AABE9AA98237611C1258CC098BB661D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
Manifest number:          10B8
Signing time:             Fri 17 Apr 2026 09:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:50 +0000
Files and hashes:         1: ZwPne8zOsgkMT0U51cJiftdsvfk.roa (hash: BIxOUNugWCSEebM0j8omjX/fG0IbzdxHMnELYPl8RdM=)
                          2: t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl (hash: D4LyK0DwX7W/vi+xJstmC7Zc+W7jLriZokhoyVhWSyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:e9:aa:98:23:76:11:c1:25:8c:c0:98:bb:66:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b77627cafe755785750bde5ba49e6c1091bf4247
        Validity
            Not Before: Apr 17 09:00:50 2026 GMT
            Not After : Apr 18 09:00:50 2026 GMT
        Subject: CN=627d73ca25daed5ddf0f59f4906f34f92bae9ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1a:f5:5b:ae:fd:0f:fb:04:d9:90:8e:bc:46:
                    64:c8:dd:3e:d3:73:2f:b2:34:2d:b9:6d:83:87:c2:
                    92:e2:31:79:c7:e8:49:3e:67:0c:18:56:6e:7f:b2:
                    13:79:e5:d0:5a:90:be:15:72:46:ff:c4:41:c8:f5:
                    3e:87:90:2a:30:ce:40:cb:40:58:57:61:54:74:2a:
                    31:9e:5b:8d:bc:0b:32:a8:79:2f:f3:ae:38:b9:af:
                    ee:15:fa:20:96:b1:65:50:7e:85:2b:0c:e7:ea:a8:
                    6d:1d:64:01:7d:38:d7:dd:f3:ee:6f:a3:0a:92:56:
                    18:0b:73:b8:dd:67:45:6a:ee:b9:b2:6c:1a:ee:c6:
                    30:87:4a:77:9f:15:c5:dd:fb:ae:fa:4d:6b:02:87:
                    e6:57:86:de:21:91:da:58:34:e5:c6:31:48:f2:59:
                    c6:13:d0:b9:f4:54:b5:4e:dc:36:91:99:c3:7f:19:
                    a5:ba:53:c0:5a:d0:ee:06:b2:cd:67:9e:6d:47:b4:
                    69:17:71:46:2a:15:33:ea:ec:91:0f:0a:5e:d5:9e:
                    7a:b0:d6:53:40:56:b3:0d:ef:c4:10:89:ee:bd:28:
                    24:f9:63:71:c4:0a:9f:f7:f7:bb:85:44:4e:8c:1d:
                    30:3c:30:01:ff:5a:91:f0:f5:87:b7:2e:39:76:1d:
                    ac:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7D:73:CA:25:DA:ED:5D:DF:0F:59:F4:90:6F:34:F9:2B:AE:9E:AD
            X509v3 Authority Key Identifier:
                keyid:B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:74:da:31:14:c2:42:73:d7:36:bc:80:9e:3c:03:f1:f3:77:
         65:b0:79:46:e7:ee:84:91:51:52:66:22:04:62:55:c1:fc:c2:
         57:c8:53:3b:f1:71:0c:fb:b6:b4:cf:db:7d:00:31:1a:b1:00:
         55:dc:6b:9e:6c:2c:ad:55:09:96:a9:fb:41:88:57:d1:a2:42:
         71:1e:5c:c6:c8:97:c0:1d:bb:aa:7c:d1:db:d8:64:ee:9b:c7:
         34:3e:8e:e9:5e:58:d2:ee:b9:10:b8:34:d6:19:a7:a9:6f:98:
         12:26:27:43:14:ab:d5:92:af:4a:55:1d:b0:60:68:6b:1b:64:
         a4:8a:13:d1:27:53:f9:ce:c7:fd:09:64:27:de:bd:b1:27:76:
         78:20:34:47:ca:2e:57:b0:6c:59:45:b0:db:59:82:00:66:2a:
         5c:7a:46:45:92:78:05:62:d8:39:6f:31:7e:37:74:0e:cf:bc:
         87:ee:ce:28:20:a8:a9:25:d9:31:52:73:2b:74:fe:ae:8a:00:
         c4:7f:0c:90:cb:0f:46:b7:bd:f1:ec:f0:c2:85:2a:fd:15:eb:
         fd:f6:ff:54:c7:7d:26:d6:dc:8a:01:96:38:dc:00:96:78:2d:
         83:47:7e:ef:43:e5:ac:c2:e4:8c:4b:d3:b7:b9:e3:43:a0:d4:
         50:77:7c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:07:24 2026 by rpki-client