Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
File:                     d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft (raw, json)
Hash identifier:          6B+c/6qALMSOrqkyqcmUdNxdMTz5Fmn1OF89nfTT3fY=
Subject key identifier:   89:0D:13:79:09:D3:EB:8E:4D:67:97:09:96:9A:9C:60:EA:13:DE:D5
Authority key identifier: 77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
Certificate issuer:       /CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Certificate serial:       019DA4539FCAD437945AF662F457ADFCD023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
Manifest number:          1231
Signing time:             Sun 19 Apr 2026 06:00:36 +0000
Manifest this update:     Sun 19 Apr 2026 06:00:36 +0000
Manifest next update:     Mon 20 Apr 2026 06:00:36 +0000
Files and hashes:         1: 5ApIj12jO_8mOdYxVYiSploUCV8.roa (hash: pxYq1FoLIzcTlxwsFR29ohwcYfP/BC5eymca8E/d9AM=)
                          2: VmIcZRCirpwpk3EW3jn_rDgxBbc.roa (hash: GaVqilTYmg+leas5Zf/2DamTASeEyu9nsNNYOHaVeqo=)
                          3: d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl (hash: +FF7xih5OkFAP9SYzQh3MnYEJ9B78MY6PXTTe7XKkMA=)
                          4: gOxCfBe1lb07Dd9lS3azAI_drcM.roa (hash: PjS4rrXO8Wuzfyz+7dGFwXl0RtklTG2PNwxKVtX++as=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:53:9f:ca:d4:37:94:5a:f6:62:f4:57:ad:fc:d0:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
        Validity
            Not Before: Apr 19 06:00:36 2026 GMT
            Not After : Apr 20 06:00:36 2026 GMT
        Subject: CN=890d137909d3eb8e4d679709969a9c60ea13ded5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:43:ba:31:32:59:b2:09:53:30:b0:4c:3a:0d:
                    a2:29:f6:8f:56:25:18:dc:bf:1c:d2:a2:51:c1:01:
                    74:13:b8:2d:97:92:bc:a3:5a:74:7e:44:6b:1b:f0:
                    10:6a:49:7d:4b:a4:3e:61:15:bc:c6:c4:a1:cc:7f:
                    ed:71:27:00:f0:f6:b3:82:54:c6:09:1c:d8:2a:60:
                    4a:22:56:30:d7:ba:f7:c1:5a:26:37:02:d2:ad:a2:
                    c2:4f:b7:0e:74:29:a8:ef:cb:1b:dc:b6:a0:53:27:
                    20:80:58:7b:a3:bf:ec:ed:5a:76:55:1a:4b:55:95:
                    ef:59:17:e0:5b:0c:9e:4e:a8:02:87:f1:f9:94:41:
                    cf:37:4e:e2:04:6c:bb:d4:ab:d9:d9:0e:56:ab:15:
                    c9:33:b2:45:d4:f9:7b:56:00:ac:3d:7f:af:c9:7d:
                    09:f8:df:5b:98:9d:be:6a:d3:85:5c:8f:0e:89:f9:
                    6b:fb:76:4d:65:6f:09:e0:9c:1d:f3:de:71:c1:d5:
                    0b:b9:a8:34:04:08:4d:cf:7d:4e:bb:c4:61:fc:73:
                    de:6c:66:4c:3e:12:65:51:cf:64:c0:01:5c:c9:5f:
                    ab:db:56:1e:ad:eb:24:bd:22:7c:98:e0:00:4c:80:
                    b9:1d:a5:88:3a:46:a4:66:f2:80:e8:7a:2b:98:49:
                    b6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0D:13:79:09:D3:EB:8E:4D:67:97:09:96:9A:9C:60:EA:13:DE:D5
            X509v3 Authority Key Identifier:
                keyid:77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:39:51:cd:4b:95:69:88:da:fb:a0:51:d2:39:fa:af:51:b5:
         48:a5:53:1a:a0:d0:f7:a7:c0:c1:50:f8:2f:e3:0d:8d:c2:c2:
         5e:9d:c7:76:a0:4f:22:54:68:73:1a:0a:ee:6f:10:c9:8d:4a:
         e2:bf:c2:b0:a4:58:f8:a6:43:8b:da:fd:ad:87:fe:b8:2a:b8:
         03:4a:2e:da:a9:6a:cf:28:46:46:4a:db:33:7a:66:53:22:48:
         44:58:6a:05:44:7f:64:0f:08:c3:ec:57:90:6c:22:1e:83:bf:
         02:4d:97:22:12:9d:bd:f2:5a:4e:ae:c4:44:d6:3d:24:10:dc:
         60:5d:e6:08:cb:84:d3:01:7c:22:7f:8c:b1:96:3a:7f:3f:ca:
         e9:8c:b3:6f:99:9e:95:3f:78:00:22:3b:c6:cf:9e:67:7c:ff:
         75:ec:88:16:75:ac:64:d0:23:0b:73:2a:05:56:f1:63:e9:65:
         cc:59:f9:d2:04:32:c1:27:37:27:f5:d1:23:c6:fa:87:db:24:
         16:06:b3:c0:e7:96:00:0c:c4:07:48:f0:6d:a1:82:2f:f3:14:
         74:04:ac:b3:aa:ce:8f:28:96:a4:77:46:ec:fa:47:71:c2:5d:
         b9:5d:ee:35:a4:ef:b4:c5:18:3f:cd:95:fc:17:35:d2:a1:19:
         db:fe:56:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:25:21 2026 by rpki-client