Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
File:                     mwVP7CVdDNxro6uparJgNmMnLbM.mft (raw, json)
Hash identifier:          rX5Xa/1zeh+oB9nO/crjFR3yZxlL1YsXnw8Ow1Dvjt8=
Subject key identifier:   E7:01:C6:EF:1D:02:0D:7D:A2:1E:5B:B7:94:6A:13:CD:72:B5:43:48
Authority key identifier: 9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3
Certificate issuer:       /CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
Certificate serial:       019D9A076DB11CD92393FB9C906426B3C657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
Manifest number:          0914
Signing time:             Fri 17 Apr 2026 06:01:11 +0000
Manifest this update:     Fri 17 Apr 2026 06:01:11 +0000
Manifest next update:     Sat 18 Apr 2026 06:01:11 +0000
Files and hashes:         1: 6y5j61yQs9ML87yoag96S0_BhkE.roa (hash: YB0eU7XTjea05VRo6u6VvG8EuWCcMo4Xwog45PL4Uec=)
                          2: mwVP7CVdDNxro6uparJgNmMnLbM.crl (hash: a3iJtaQVbwK01nZ7chgYGq7BH8FU3KYW9UgVerSMmeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:6d:b1:1c:d9:23:93:fb:9c:90:64:26:b3:c6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
        Validity
            Not Before: Apr 17 06:01:11 2026 GMT
            Not After : Apr 18 06:01:11 2026 GMT
        Subject: CN=e701c6ef1d020d7da21e5bb7946a13cd72b54348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:68:f5:79:03:4e:90:1c:38:d4:50:6c:6d:eb:
                    27:a6:43:8d:df:42:b6:00:03:bb:d3:82:21:67:be:
                    ad:9c:25:ef:67:6d:71:06:1e:d3:69:18:7c:42:03:
                    4d:d3:a6:a2:9d:8a:e8:c4:b6:04:10:0c:a5:13:32:
                    2c:1b:ac:cf:01:ac:f2:51:c4:34:ff:e3:d5:0e:8b:
                    0f:9f:c5:ec:00:5c:b8:86:10:1b:eb:56:7d:31:02:
                    d8:e1:a5:65:35:26:a8:c8:78:cd:d4:cc:a4:e3:14:
                    f8:43:54:e0:97:e7:42:be:10:29:dc:df:a1:82:62:
                    f0:e7:90:b5:28:d8:bd:fa:0d:7b:cd:6d:96:59:a7:
                    01:e6:c8:ad:3d:af:00:67:c0:df:85:83:8d:e0:0d:
                    e9:e7:62:d5:9e:64:c3:a7:e6:7a:a7:0e:61:77:f0:
                    10:ea:7a:b6:11:60:53:c2:c5:b2:ba:91:0b:be:24:
                    14:5c:f3:53:55:b9:26:67:8b:94:a7:8d:2c:33:d3:
                    82:07:0d:20:dd:c8:e8:c4:c0:9b:63:32:58:f8:df:
                    00:0a:86:c6:f6:39:cc:ca:3e:d6:7f:05:ec:24:6a:
                    8b:84:6a:c1:0f:b8:df:8a:17:33:07:d1:34:95:a7:
                    88:81:18:8b:a8:58:56:17:ac:c5:d0:4c:42:78:f6:
                    cd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:01:C6:EF:1D:02:0D:7D:A2:1E:5B:B7:94:6A:13:CD:72:B5:43:48
            X509v3 Authority Key Identifier:
                keyid:9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:51:83:dc:a8:7b:68:98:f4:45:05:81:6a:65:a6:ac:0b:9e:
         b7:f1:1a:87:53:2f:01:d4:16:d1:c2:2c:aa:82:0d:46:30:41:
         b1:08:8d:1b:89:87:4e:23:79:71:08:f1:07:0e:3e:b7:62:96:
         04:99:8b:db:25:3b:ed:c2:8d:fd:4f:2d:01:eb:81:3e:a0:a7:
         32:96:3b:53:a9:c3:09:53:22:85:2c:47:59:f6:f2:84:a3:63:
         09:9c:0f:1e:f4:2a:a7:02:3c:93:fd:7e:c3:44:60:59:e6:76:
         d0:ff:e3:04:75:63:44:8b:91:7e:4b:1e:47:9f:c3:78:54:c0:
         0f:09:43:0f:0c:16:a1:dc:89:89:f7:9a:c0:6c:77:2f:57:c6:
         fd:f7:94:44:bf:ac:7b:b2:3d:b2:8e:25:53:49:22:38:14:bd:
         07:cc:48:7e:ca:49:ac:52:7a:8a:f6:c6:24:d6:ef:96:b1:4a:
         02:b0:60:6f:c2:fb:4e:75:b5:81:30:77:29:33:bb:8b:3a:f8:
         4a:42:be:0c:92:f0:c8:42:35:8e:f1:e6:e7:ab:2f:d8:d3:86:
         78:6a:13:ca:fb:be:ef:39:96:9f:29:54:f5:42:cd:fb:f8:9e:
         58:11:b6:e2:fe:bb:f1:46:0b:66:b8:48:24:b7:b8:b9:38:c9:
         90:08:a7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:44:23 2026 by rpki-client