Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
File:                     eDLQYJMtR4WhDKR96AAvZcHvM64.mft (raw, json)
Hash identifier:          IByyel+y655moeQW+4DIn3KHdrYZ/LrCLCi8WvtHeyI=
Subject key identifier:   19:2B:03:E9:0E:FF:6A:69:1E:1C:D1:2F:0A:82:E3:43:66:42:90:7C
Authority key identifier: 78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE
Certificate issuer:       /CN=7832d060932d4785a10ca47de8002f65c1ef33ae
Certificate serial:       019D99D0055ECFC5E28E3705F6E2C3D16E11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
Manifest number:          13C0
Signing time:             Fri 17 Apr 2026 05:00:40 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:40 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:40 +0000
Files and hashes:         1: UPPv-d05KLxtS4t0vBV_WgGiCRc.roa (hash: gDvcPLVEDvmXuVVyEbVZE7xY3E+m8q0jOR+2dZVBJu0=)
                          2: eDLQYJMtR4WhDKR96AAvZcHvM64.crl (hash: YJ18UQ+gsEfEb9hXH/oa4opbKwxinzb/euBgHCROKJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:05:5e:cf:c5:e2:8e:37:05:f6:e2:c3:d1:6e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7832d060932d4785a10ca47de8002f65c1ef33ae
        Validity
            Not Before: Apr 17 05:00:40 2026 GMT
            Not After : Apr 18 05:00:40 2026 GMT
        Subject: CN=192b03e90eff6a691e1cd12f0a82e3436642907c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b2:91:a8:ea:3c:b6:a7:03:64:3f:cb:35:a1:
                    65:98:7e:25:5e:58:5b:0e:28:0f:4e:46:b8:cc:02:
                    5f:61:f0:93:75:4d:a1:b2:e6:29:f6:f7:58:0f:ee:
                    d4:27:7a:b9:3c:d2:08:3b:5a:99:2d:ae:62:d7:ba:
                    1f:8a:90:f8:07:09:db:37:85:2d:e5:1e:5c:bc:7a:
                    df:b7:32:28:1b:d7:79:69:63:a5:1b:2a:1f:c3:fb:
                    f4:81:6a:dd:3b:90:58:1f:b6:90:8d:e5:1b:d8:d8:
                    b4:3d:49:92:72:74:9e:c5:01:bc:92:19:5b:d1:af:
                    36:12:c9:dc:10:80:7c:54:fd:ce:ce:c5:71:76:cf:
                    6b:57:10:80:19:5a:e6:71:d2:78:3a:08:d5:46:b3:
                    5d:a7:e4:3b:47:72:dc:dc:17:83:82:86:d0:36:bb:
                    9f:f1:ac:0c:80:81:e7:8d:69:80:12:25:96:46:87:
                    9b:94:8d:d5:f1:e4:4a:d0:f9:f4:92:83:33:f6:ee:
                    0a:29:33:4e:2d:79:40:1d:51:e0:c0:19:53:62:b0:
                    17:c6:72:b6:b3:a9:d1:58:11:01:85:d7:15:b9:3d:
                    ee:aa:17:ed:2d:ad:34:f1:b4:38:69:14:49:1e:fb:
                    32:49:79:e0:1b:d0:19:07:d4:9b:05:d3:92:cb:f2:
                    f5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2B:03:E9:0E:FF:6A:69:1E:1C:D1:2F:0A:82:E3:43:66:42:90:7C
            X509v3 Authority Key Identifier:
                keyid:78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:1f:33:ad:bd:1e:a0:81:f7:54:59:18:2a:d5:a2:aa:8e:1d:
         fb:41:7c:fa:cd:7a:42:4e:9d:f5:40:67:94:59:20:c4:8d:7a:
         9a:e5:74:7d:16:74:e3:24:a1:5e:a1:57:17:e0:f5:d9:0e:c5:
         90:b6:e7:21:77:61:9c:03:6b:8f:eb:96:a6:3a:be:52:3f:41:
         1b:b2:8a:fb:11:6e:fd:67:0c:c4:29:d8:91:4a:ac:bb:9e:06:
         eb:4a:25:b2:e0:bf:4c:0d:98:fd:ca:48:f1:fd:62:88:7a:9d:
         17:96:45:16:e0:c7:d8:27:61:5b:06:4e:e1:db:07:6a:87:51:
         af:14:eb:59:43:ff:a3:f3:90:fc:99:d6:5f:86:ec:ed:53:f9:
         08:5b:43:53:b1:63:71:fd:3a:c2:94:44:b0:8e:71:c5:4f:e4:
         b6:73:07:7c:dd:f1:fd:a9:22:6b:94:df:7a:2a:7f:61:c2:80:
         17:ef:37:dc:a8:c1:df:03:d8:75:be:9d:92:f9:6d:4c:5c:76:
         a4:b3:1e:7f:c8:0e:2d:18:37:ee:63:a3:90:f4:8b:73:09:f0:
         eb:9b:df:4d:c0:d8:ca:d2:7b:5e:ff:ae:4e:6a:41:4e:7b:cc:
         be:c4:86:d6:76:47:21:fb:69:28:59:03:b2:86:2f:08:40:12:
         35:17:b9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:03 2026 by rpki-client