Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
File:                     F7i-tVXa-oLD1qozaQmuWt41qD0.mft (raw, json)
Hash identifier:          GiE2ukEx5eZodnHb1XEVDorZ4Fy5yJ1deX5ZxRNTJOs=
Subject key identifier:   AC:F3:5F:7C:15:7A:EC:60:29:4B:1E:E0:6A:65:60:45:33:9D:B3:7F
Authority key identifier: 17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
Certificate issuer:       /CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Certificate serial:       019D9D3F59B5FDB1F9F11FCDDADDA0678DF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
Manifest number:          18C7
Signing time:             Fri 17 Apr 2026 21:01:07 +0000
Manifest this update:     Fri 17 Apr 2026 21:01:07 +0000
Manifest next update:     Sat 18 Apr 2026 21:01:07 +0000
Files and hashes:         1: F7i-tVXa-oLD1qozaQmuWt41qD0.crl (hash: rpElinwb6+mXEHR64cN5b+ZYmBRsqiKfNIFKBMmXTt0=)
                          2: SPz2rFTEb-eYf1B5B0X4hMlLB6c.roa (hash: TFR/CByQTCa7JUwD+ZC4TVDsRbIrDuQPNxLGIxqBjU4=)
                          3: UfSYcax7hrnZsapdP8nX8CdA6ac.roa (hash: HfQ6PLxHcu26WVTPLuKbtbJcFW7jFqcjCu8B7qggBio=)
                          4: kNHeejH9UWVsvWWApLpc25wsTxE.roa (hash: fxr+p6jIf+XT5GupHuF/9yqj6BcoS+KmnsW6mYE/AOY=)
                          5: kRf-p4qBBa9Rvu5gFKi-QWl32VU.roa (hash: fVpCGOPHxxPr7Wk2f1pVCS7IR1cjhvdExLaBFxIvrYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:3f:59:b5:fd:b1:f9:f1:1f:cd:da:dd:a0:67:8d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
        Validity
            Not Before: Apr 17 21:01:07 2026 GMT
            Not After : Apr 18 21:01:07 2026 GMT
        Subject: CN=acf35f7c157aec60294b1ee06a656045339db37f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0e:49:83:35:74:c9:2b:c3:71:75:b4:e7:b4:
                    e6:39:28:10:f8:b3:3f:8a:8a:95:74:4e:c0:21:b8:
                    1a:4c:60:35:77:97:80:f7:8b:99:28:87:4e:24:42:
                    ee:17:a8:cb:c9:73:10:2c:6f:f7:28:9a:09:31:d2:
                    68:58:ec:7d:38:78:b6:5d:1d:ce:a8:64:ab:0b:d5:
                    08:a2:77:04:f9:3a:16:08:07:5d:7a:a1:1e:6e:70:
                    d7:66:3e:26:70:9b:d3:16:f8:c2:e7:57:92:11:ab:
                    31:2d:6e:c7:1b:f2:c7:03:c4:7e:5a:17:59:92:45:
                    22:fa:fa:a2:7e:3f:51:27:28:53:c2:ff:fe:3c:0a:
                    19:7d:fb:fe:04:9b:66:5e:26:94:0b:55:83:3a:c5:
                    f8:85:4f:3f:a0:12:d0:77:36:81:85:82:0d:75:ba:
                    9e:aa:a7:9e:93:4d:12:d4:04:fb:4b:60:04:c9:35:
                    b0:6d:63:08:a3:a4:61:db:be:ed:54:1d:91:cb:26:
                    d5:64:38:b2:0c:57:aa:fe:a3:57:71:87:d0:77:e6:
                    7a:48:4b:f4:3d:0b:a8:23:48:47:57:8f:09:b3:e7:
                    98:9a:71:25:19:34:20:13:b4:b6:62:8f:97:44:f5:
                    44:b8:cb:91:d9:0d:03:5d:64:05:a1:37:ee:20:17:
                    9f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F3:5F:7C:15:7A:EC:60:29:4B:1E:E0:6A:65:60:45:33:9D:B3:7F
            X509v3 Authority Key Identifier:
                keyid:17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:00:c5:17:ad:e5:f3:d0:bf:95:f8:0c:38:7f:b6:68:55:20:
         c0:3a:19:62:8f:55:7a:19:34:ac:25:e1:56:e3:09:7f:ab:d8:
         80:29:75:2d:d0:33:69:17:06:e2:49:39:dd:4d:8e:bd:99:49:
         b8:17:37:41:4e:50:f5:52:66:e5:2f:70:44:e3:ad:9d:c6:a5:
         34:3b:73:cf:94:95:78:91:3d:54:fd:bf:b6:a7:8f:b9:2f:73:
         2d:91:69:3e:37:e6:9f:9d:2b:55:bf:81:65:b0:26:f4:e6:73:
         cc:ca:c5:7a:56:a8:0b:8f:4c:23:15:e1:4c:02:3d:78:62:e9:
         e7:51:fb:aa:6a:ab:1d:2b:4d:d2:1a:c0:88:8b:90:3a:1a:86:
         56:ea:31:16:cd:a2:08:a5:1a:a0:12:26:6a:c4:98:c4:1f:ec:
         2c:c8:07:eb:32:7d:c8:e9:c5:09:f2:ce:ac:7e:fa:74:15:c2:
         c0:65:c3:92:62:67:f6:7a:2e:c2:6d:a0:a3:3f:5c:90:ab:5c:
         7e:b0:0d:88:ec:1c:76:0c:65:bb:11:58:67:b3:ff:30:5c:81:
         79:dc:5d:b8:bf:d9:f8:9d:ab:26:a9:34:dc:d8:bb:d5:fa:8c:
         4b:f9:93:40:25:3d:7e:1a:e3:0b:10:a4:0a:b6:b0:7e:62:e5:
         58:46:4b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:51:46 2026 by rpki-client