Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
File:                     7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft (raw, json)
Hash identifier:          108Sd08UPqKrl7JBDNE+vPnOeTMLm4ZEWq/shUKi28k=
Subject key identifier:   7F:5E:91:DF:0B:1B:4A:D8:37:A4:41:A9:26:11:4F:35:70:92:B9:2A
Authority key identifier: ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
Certificate issuer:       /CN=ed32ef0caf0a057529fb928f76962a7425390dba
Certificate serial:       019D9DACB2D2657A29E9405C32EB9BE8F9C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
Manifest number:          0379
Signing time:             Fri 17 Apr 2026 23:00:34 +0000
Manifest this update:     Fri 17 Apr 2026 23:00:34 +0000
Manifest next update:     Sat 18 Apr 2026 23:00:34 +0000
Files and hashes:         1: 4ck5stj-Nruh5mOMgR2qNBplGK4.roa (hash: pnWvPZcJH3rubSBQDARfPzyblV+Aac+zG4Cuud9DAE8=)
                          2: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl (hash: i+uF8dL4dRVshc4P7PgMUjV0j0/QOKI79Vh0r5/ZWP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:ac:b2:d2:65:7a:29:e9:40:5c:32:eb:9b:e8:f9:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed32ef0caf0a057529fb928f76962a7425390dba
        Validity
            Not Before: Apr 17 23:00:34 2026 GMT
            Not After : Apr 18 23:00:34 2026 GMT
        Subject: CN=7f5e91df0b1b4ad837a441a926114f357092b92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8d:b9:b9:b7:05:71:69:19:41:04:ed:1c:4c:
                    ac:10:60:b0:44:9c:00:23:ab:6c:49:b6:ae:82:6c:
                    23:fa:03:05:78:31:35:dc:ea:fa:1b:d8:f4:bb:99:
                    f4:76:0b:c7:5d:5b:98:7c:25:c4:b9:d8:bb:07:31:
                    c5:aa:bb:bd:f3:a2:2e:0d:81:5f:34:1e:ca:91:e8:
                    ce:72:55:d5:16:8b:fd:dc:53:eb:86:fc:50:f5:cc:
                    5b:39:fd:ec:56:32:af:8e:63:b4:b3:12:9d:52:6c:
                    36:04:5a:2e:d1:17:7f:28:fe:ff:d6:68:5c:a7:86:
                    f6:99:57:76:43:cf:32:d0:b3:e5:38:fe:50:0b:f9:
                    f1:e7:19:f1:2b:12:ba:ec:5d:4b:64:50:75:f1:bb:
                    2e:9f:4b:49:f1:de:7f:cf:54:bc:c8:9f:67:b3:ca:
                    46:7e:67:cd:5f:23:93:20:4f:37:37:c5:85:e6:a1:
                    73:a0:a3:3a:c5:e8:13:b6:4f:ae:dd:2d:30:4e:9b:
                    72:a5:77:8e:7d:ee:0c:72:e2:33:6e:fd:b8:61:80:
                    34:e5:01:90:41:42:b1:39:4b:2e:d6:99:6b:90:15:
                    3a:b2:a6:69:47:1b:cc:38:96:e5:8f:f1:ca:a7:29:
                    f0:c6:ff:2a:cf:e2:f0:31:6a:cb:c7:8c:ca:40:c7:
                    82:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5E:91:DF:0B:1B:4A:D8:37:A4:41:A9:26:11:4F:35:70:92:B9:2A
            X509v3 Authority Key Identifier:
                keyid:ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:40:60:69:af:c7:47:8b:f7:62:5f:e9:71:8b:f9:c3:5a:d1:
         fb:5b:c7:29:bc:f7:eb:2b:ae:76:1e:9f:6b:97:02:01:a0:bf:
         df:96:e5:37:54:f8:68:48:cd:63:4a:0d:e3:49:d5:14:63:70:
         4c:67:bc:7c:20:0a:d8:7a:77:63:9b:c5:a2:aa:e9:0b:0c:28:
         4f:ed:73:4d:cd:3e:30:a4:2d:5f:63:21:15:d5:f2:18:9d:91:
         f2:55:f8:26:f3:c8:3e:cb:0a:d8:b1:95:28:cd:3b:93:ca:29:
         f4:c1:8d:92:94:14:04:48:32:ab:6d:7f:39:2c:4e:37:fe:a5:
         6e:74:b2:31:82:df:98:82:87:21:ec:39:f9:c3:67:80:c8:99:
         38:f4:52:a7:2c:fb:d3:28:12:1a:ff:c2:e8:63:41:b0:1a:3b:
         d3:60:be:c1:d5:61:ea:c2:d4:61:62:ca:ad:3d:84:7b:5f:54:
         de:88:ee:7b:e8:ae:1f:1b:2f:08:00:66:74:9b:97:9b:03:76:
         ce:5e:dd:d9:e2:f8:24:11:eb:fe:75:55:68:fb:ac:f1:4a:55:
         85:54:3b:30:c8:8b:ae:7a:8b:1f:9b:80:5c:0a:9d:ec:4e:2c:
         23:6a:a8:df:b0:a4:a3:88:61:70:0f:ae:8e:a9:6c:7a:33:0d:
         e2:e0:55:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:00:51 2026 by rpki-client