Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
File:                     1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft (raw, json)
Hash identifier:          zhUltwDGEIMWpH54Q3Vjwcw8dIa5/Vwh4NvXh25hfao=
Subject key identifier:   91:0F:0A:1D:E7:91:54:81:18:03:23:96:75:B9:38:9E:6F:29:CA:6B
Authority key identifier: D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
Certificate issuer:       /CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Certificate serial:       019D9886345DFD2BFDE33ACB3EA8158F0785
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
Manifest number:          11F8
Signing time:             Thu 16 Apr 2026 23:00:24 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:24 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:24 +0000
Files and hashes:         1: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl (hash: d1G0Fb2nxVgJatIyp/pAdzCwAMk9Is/LLjvymI22lzA=)
                          2: nVcrQjhWQvZv3MpiEu7OA3dqEsU.roa (hash: q6SGNZPGxWCvS2kjA8Hhq7jz4Krm0km/a67HNcgbwrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:34:5d:fd:2b:fd:e3:3a:cb:3e:a8:15:8f:07:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
        Validity
            Not Before: Apr 16 23:00:24 2026 GMT
            Not After : Apr 17 23:00:24 2026 GMT
        Subject: CN=910f0a1de79154811803239675b9389e6f29ca6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:1f:06:fc:26:09:65:6a:5b:3a:c3:81:75:
                    e4:d2:2b:a0:1d:41:d5:f5:bc:67:a2:d9:81:99:93:
                    eb:c7:60:ca:34:77:a7:ad:5d:f5:52:79:1d:2a:84:
                    ad:3a:b7:ea:d3:61:fc:28:b7:6b:dd:2c:87:fd:3d:
                    9d:b8:6c:db:39:7a:04:f1:d5:49:b5:5f:07:78:9e:
                    2c:6a:30:c4:11:6e:d7:3b:4f:69:4a:75:85:2f:91:
                    25:b5:b4:4c:6f:55:97:2d:9d:ea:c4:90:55:1d:ad:
                    64:68:7b:c9:08:48:e3:14:f8:a5:c2:8f:6b:3b:37:
                    38:5f:d8:8a:42:29:48:44:36:4b:6b:ba:f1:77:9d:
                    2e:53:7f:ea:67:61:4a:57:da:ae:0e:56:10:e4:a6:
                    3a:dc:07:54:5b:8f:1f:f4:61:42:ea:d9:11:ab:d6:
                    ac:68:7a:db:0a:52:f9:dc:3d:4a:bf:00:05:65:b0:
                    4d:5f:16:28:5c:26:5c:c9:4d:cc:bf:52:7b:6c:47:
                    14:1c:e3:2a:47:73:2d:b6:6b:55:c0:cb:c7:be:ca:
                    1e:7e:bb:bb:1e:67:af:04:12:af:04:d2:3f:66:fd:
                    8c:1c:09:71:e4:e1:04:89:29:e7:5c:f0:fd:c2:08:
                    72:3b:92:dc:92:b1:ec:85:c2:a9:89:6c:19:ea:9c:
                    bf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0F:0A:1D:E7:91:54:81:18:03:23:96:75:B9:38:9E:6F:29:CA:6B
            X509v3 Authority Key Identifier:
                keyid:D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:1e:62:62:f6:ad:bb:49:4b:56:84:c5:30:c8:a8:b1:66:84:
         40:7b:29:a7:de:7f:55:6b:4c:95:9a:99:45:76:7d:1b:07:73:
         d2:c6:d1:b7:e5:c4:21:bc:df:49:60:36:dc:9d:64:f9:ce:b3:
         c9:e6:69:f1:d4:af:d9:3f:34:08:d1:f7:84:82:22:8f:5e:f9:
         b6:bd:82:3d:11:5d:b8:6c:71:6b:89:d4:57:e1:23:4c:53:5c:
         47:84:0e:0b:37:3e:9c:90:0d:58:91:5c:fe:8c:c4:73:c8:3f:
         a5:56:95:05:1e:e6:4f:30:d4:78:42:db:98:e8:19:1d:dc:b6:
         51:27:96:38:37:15:60:df:3c:5e:1b:4b:c0:e0:44:3b:60:dc:
         64:2d:19:9a:b3:49:92:99:95:6b:cf:2f:c2:f2:0f:5e:3e:2f:
         e9:fb:e9:41:5a:cb:77:0a:cc:09:fd:f3:4b:33:dc:1b:11:ae:
         56:f5:04:0a:29:1a:91:75:cd:12:e5:8c:d7:76:b6:0d:de:eb:
         d7:a6:79:91:7b:95:66:06:3b:94:c0:ce:96:11:56:c9:b4:7b:
         c0:5a:ac:d0:1d:da:20:23:93:cb:dd:26:be:a9:e6:98:07:5c:
         52:4d:4b:fe:33:08:da:ef:5c:7d:8a:51:bc:43:0c:a2:38:03:
         29:58:bc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:28 2026 by rpki-client