Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
File:                     _g_UdpyC_7SSkwQelUnZS9EsGhc.mft (raw, json)
Hash identifier:          sDbi/K3W9bzmwTPNSlVVPFNu1RQFkYglGKQplfQvhRs=
Subject key identifier:   06:0E:24:5D:E9:A7:DB:CB:24:17:84:80:F8:12:17:73:0C:13:83:5C
Authority key identifier: FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17
Certificate issuer:       /CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17
Certificate serial:       019D9C9A49D95A7C17FBE4878DDFEB3BF344
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
Manifest number:          01EA
Signing time:             Fri 17 Apr 2026 18:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 18:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 18:00:50 +0000
Files and hashes:         1: B4JyBpzXmFAaGecPS8XtNq-LmT0.roa (hash: uSeF+NNIJh3wPrQ9CVuNaeVXKGRJIAAu+5sEtiYdjfg=)
                          2: _g_UdpyC_7SSkwQelUnZS9EsGhc.crl (hash: iyzYpnquEoiyFrFHTIuiPF1SBuV2KR15aC3oiBd4TCM=)
                          3: jXkcT7aCGBM17fxGDpk5QqnkTzs.roa (hash: E6cBqX6Avm9snkxbKS/ker/kTWCnrXD0E3VIe/Tuprc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:9a:49:d9:5a:7c:17:fb:e4:87:8d:df:eb:3b:f3:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17
        Validity
            Not Before: Apr 17 18:00:50 2026 GMT
            Not After : Apr 18 18:00:50 2026 GMT
        Subject: CN=060e245de9a7dbcb24178480f81217730c13835c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1d:a1:7e:d0:05:9a:56:ad:3f:83:4a:85:5b:
                    d1:eb:e0:61:05:e8:a4:5f:a2:d7:75:7d:49:32:c7:
                    69:73:e8:5b:d1:73:77:0f:eb:c1:1c:f2:da:99:f8:
                    68:1f:a1:f6:35:24:ff:8b:6d:a5:cc:8b:70:bf:b5:
                    a0:c8:49:a9:5c:00:c4:0c:b8:6f:ed:b0:3a:29:79:
                    41:ef:6c:49:37:1a:24:29:34:c8:e2:32:57:1c:52:
                    7b:49:ea:48:6a:47:1b:4a:1e:9d:7f:d2:7f:3e:5d:
                    6e:15:ff:c9:70:8c:a2:87:34:9f:32:b6:dc:39:02:
                    6e:74:ad:e7:35:4f:27:0a:2f:7a:85:00:c1:a5:97:
                    9b:03:e6:ab:80:0f:04:8b:93:91:8a:84:40:1c:c3:
                    05:12:e8:8f:d3:f6:e2:d2:56:28:8e:fa:ba:e7:29:
                    8f:2b:8e:56:73:3a:8c:3f:cc:d5:9e:77:37:61:95:
                    e3:04:6b:50:e6:67:5e:9d:b4:3d:c9:4e:fd:b4:17:
                    12:c5:ba:d8:ef:07:db:e2:a9:8e:21:ea:4b:78:2d:
                    42:2c:38:8a:41:24:4e:53:41:0d:4a:7b:4b:ee:44:
                    fa:49:88:62:36:ca:1b:43:fc:a2:ff:30:20:b2:5f:
                    f1:e0:6e:0b:3e:9c:49:10:1c:c3:a0:c4:d1:3e:ce:
                    a2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0E:24:5D:E9:A7:DB:CB:24:17:84:80:F8:12:17:73:0C:13:83:5C
            X509v3 Authority Key Identifier:
                keyid:FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:7f:03:8f:2f:fa:41:8c:ee:b1:7f:71:0c:c8:fe:1c:87:b4:
         14:9b:99:d5:3c:fe:b1:e7:9a:da:c3:5b:9c:a6:ff:53:c9:12:
         b4:b6:a0:f3:49:83:67:56:1d:1a:1d:55:ad:8b:fe:8f:de:55:
         09:d7:9a:45:1c:9e:31:e6:8d:69:8a:6f:2b:3b:07:7c:3a:16:
         4f:38:43:30:0a:e5:aa:2b:df:32:fe:b5:a6:40:9d:dc:96:6a:
         f1:69:0b:e2:a4:1e:56:a0:47:a5:44:fc:07:59:7b:7d:b9:82:
         c6:9b:bf:88:6c:26:41:e5:ee:01:c1:cb:bd:11:fb:fd:7d:22:
         ca:07:60:d9:eb:70:ad:8b:33:4a:ac:4a:f1:b0:ad:00:73:a6:
         24:45:c5:36:60:bb:77:91:43:4c:44:d1:e5:71:90:61:cf:40:
         20:4d:58:43:2c:b2:9b:87:56:5a:e9:fa:4f:1a:63:4a:8e:e1:
         15:bb:bb:90:c8:6c:7c:15:f7:de:8d:b4:5a:82:bc:55:cc:ae:
         f8:87:48:e2:39:2b:6a:53:3d:65:7f:9c:5a:40:1b:11:7f:ae:
         8d:c0:d3:61:24:eb:57:e6:8b:95:79:29:88:1a:ec:2a:6c:16:
         df:eb:f7:88:34:6c:90:f1:76:dc:02:15:d3:67:17:70:61:74:
         b7:b8:16:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:17:22 2026 by rpki-client