Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft
File:                     7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft (raw, json)
Hash identifier:          dY7uwYWocJrhXgvxKyncPcMajG6dtdzZXo7nOCT1KS8=
Subject key identifier:   63:9B:C3:E2:F7:5E:65:3D:47:A4:10:5C:27:B1:63:41:A9:49:75:37
Authority key identifier: EE:8C:A3:B0:DC:4F:0D:97:5A:E0:FA:83:27:49:6F:4B:0C:E4:56:DE
Certificate issuer:       /CN=ee8ca3b0dc4f0d975ae0fa8327496f4b0ce456de
Certificate serial:       019D9B1982B05FEC172069A331CC8D387E46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oyjsNxPDZda4PqDJ0lvSwzkVt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft
Manifest number:          33
Signing time:             Fri 17 Apr 2026 11:00:33 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:33 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:33 +0000
Files and hashes:         1: 7oyjsNxPDZda4PqDJ0lvSwzkVt4.crl (hash: A+BMPxuK20pyudZRj9nzDpMLNXHmmaRs/usxmly0RUo=)
                          2: hYcOltYQ3coRzHfHtwK1cUy8X-c.asa (hash: GLuGjxVic7tB9lRTvZboOAKtaGC1m0nPNnwMd0FZxG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oyjsNxPDZda4PqDJ0lvSwzkVt4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:82:b0:5f:ec:17:20:69:a3:31:cc:8d:38:7e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8ca3b0dc4f0d975ae0fa8327496f4b0ce456de
        Validity
            Not Before: Apr 17 11:00:33 2026 GMT
            Not After : Apr 18 11:00:33 2026 GMT
        Subject: CN=639bc3e2f75e653d47a4105c27b16341a9497537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:01:33:5d:b2:39:9a:7d:95:b5:a8:92:35:88:
                    47:12:ae:3b:6c:10:71:00:a6:b0:1a:c5:de:56:06:
                    04:90:e0:02:ee:1f:d2:ff:14:bb:a1:7e:ca:86:ba:
                    2f:3d:74:b2:8a:aa:2d:44:29:88:74:c6:04:ca:1f:
                    9e:51:0e:fd:52:a3:0f:e8:bb:52:07:43:c1:e9:81:
                    4c:e1:e7:b4:25:6f:79:29:f0:df:c8:61:8a:f3:b1:
                    66:34:9c:da:48:ee:af:0b:f6:ed:84:9a:b9:d4:4e:
                    30:e0:2b:1a:fe:59:48:fd:5f:d4:92:d9:78:54:3c:
                    be:18:9b:a6:80:5e:ce:cb:43:5c:4e:93:c9:50:e2:
                    f0:87:a1:4f:34:74:16:80:f4:04:df:23:e6:01:22:
                    9c:23:54:9b:17:3d:c7:dd:a1:d7:2e:13:36:3d:de:
                    2e:f3:51:28:2b:aa:6b:1f:1c:56:e4:9c:66:fa:f8:
                    91:d4:6c:0b:e8:55:c0:3a:6a:eb:a9:bb:0e:9f:f4:
                    a5:68:fc:fc:76:06:81:ba:56:89:38:18:01:f0:cf:
                    e2:a7:68:c9:7d:88:b7:50:d7:d4:ac:01:20:a4:f8:
                    13:19:63:99:8c:14:ff:98:43:39:63:e3:cd:1d:da:
                    e2:cc:8b:79:10:7c:98:4a:20:1c:80:cd:6f:3b:b4:
                    21:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9B:C3:E2:F7:5E:65:3D:47:A4:10:5C:27:B1:63:41:A9:49:75:37
            X509v3 Authority Key Identifier:
                keyid:EE:8C:A3:B0:DC:4F:0D:97:5A:E0:FA:83:27:49:6F:4B:0C:E4:56:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oyjsNxPDZda4PqDJ0lvSwzkVt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:83:56:f1:a2:eb:f2:07:ea:0f:87:51:8c:0f:e5:7c:74:14:
         82:e9:3a:52:d8:22:8e:58:98:7e:33:ea:f9:1c:0c:d6:c6:0b:
         d5:b2:b7:cf:61:43:32:00:2c:bb:9f:fb:9c:8f:85:09:9c:dc:
         56:6f:c3:6c:0b:d2:3c:2b:01:0e:a7:d1:d1:12:ef:02:25:7e:
         0c:2c:01:57:09:85:24:af:a7:46:13:a7:70:fe:c8:7f:33:2a:
         53:21:07:b9:a7:e3:b2:55:46:f1:7c:87:73:51:ef:cb:e0:dc:
         46:cd:c5:f8:39:e0:6e:50:c2:a9:94:74:a0:f3:bf:65:e7:13:
         f8:51:58:48:d5:4c:f2:6d:25:0c:e0:81:8d:19:3c:3f:ff:63:
         c2:33:f1:d4:24:aa:c9:1f:f6:2e:a4:6f:07:64:9f:2c:c0:3c:
         73:b6:b5:9a:18:04:89:27:65:5d:b0:4c:90:a4:2e:b9:38:2a:
         f5:dc:e5:e2:21:32:d1:90:6e:d5:27:5d:32:ce:fe:1e:ef:8f:
         1d:fa:8c:f5:a3:e7:3f:dd:f3:18:1f:2d:76:da:d9:c9:3f:18:
         ff:e3:52:87:79:03:28:5f:59:84:ff:d3:72:34:9e:d9:5e:66:
         bd:83:be:64:78:76:51:76:8f:3f:a6:ad:c2:12:0d:9e:ed:a9:
         8e:43:ea:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:33 2026 by rpki-client