Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
File:                     59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft (raw, json)
Hash identifier:          VaPmOEQBuDruc8HhsvPSbR6EBWoyFEfMPYVtiTCMgD0=
Subject key identifier:   E3:6F:92:2F:1F:B3:7B:88:42:F5:04:80:A8:E9:22:5F:5D:5B:C8:93
Authority key identifier: E7:D1:9A:8F:D9:85:41:ED:89:17:0A:90:40:19:77:A4:BE:0B:EC:37
Certificate issuer:       /CN=e7d19a8fd98541ed89170a90401977a4be0bec37
Certificate serial:       019D9B87BCE331AD249D14FA7D83843CB3D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
Manifest number:          67
Signing time:             Fri 17 Apr 2026 13:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:57 +0000
Files and hashes:         1: 59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl (hash: gt/oGmSa8LsZNKuxmX2LWssx9osqfDPwrCoyUv53hX4=)
                          2: Pzk4TDA-h9RVuxch0U3icXkl6Rw.roa (hash: oUr86fQqVuN8AdhLCsQUi45dZ5KEwK640rHZ20VyoXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:bc:e3:31:ad:24:9d:14:fa:7d:83:84:3c:b3:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d19a8fd98541ed89170a90401977a4be0bec37
        Validity
            Not Before: Apr 17 13:00:57 2026 GMT
            Not After : Apr 18 13:00:57 2026 GMT
        Subject: CN=e36f922f1fb37b8842f50480a8e9225f5d5bc893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2b:4f:e3:cb:f1:26:ec:07:3c:41:7a:5b:b8:
                    b1:9c:7b:f0:b3:fc:81:a1:48:45:c1:cb:24:b9:d5:
                    82:74:73:39:7f:5f:d4:67:4b:c1:6e:08:b1:6d:81:
                    34:fc:e8:c6:e4:e8:43:fd:9d:7d:89:4e:ec:c3:da:
                    92:8a:06:d0:a3:af:12:95:f3:3c:b6:a5:88:e8:d6:
                    dc:36:73:4f:b2:f9:54:a6:2c:8d:fa:5e:26:52:ce:
                    4b:b2:ff:9f:74:22:0c:f3:2e:20:bb:d2:59:4d:8b:
                    45:e5:97:11:63:f9:a1:75:af:e8:b7:15:5f:4b:a5:
                    ec:0b:58:78:32:1f:85:e8:0a:a6:30:82:da:b4:44:
                    fb:57:2a:b5:62:8b:2a:20:44:63:a0:81:d3:2c:36:
                    c7:38:58:cd:94:4b:c8:e2:30:25:1f:cb:12:6d:0b:
                    9e:b3:e2:f1:5a:45:94:c3:1e:e9:0f:cb:49:58:cc:
                    ed:81:5e:b0:f4:27:13:5d:e7:90:02:67:eb:d1:a0:
                    a5:57:6c:7e:c3:1d:9c:70:98:ff:5e:13:ee:40:7a:
                    94:3b:bc:54:5c:ca:2b:33:e7:b6:5e:91:21:9f:bd:
                    e6:f6:ab:4b:aa:91:b5:b3:2f:74:2e:3d:cf:10:1f:
                    10:20:8d:f8:f2:d8:e5:f1:ae:a5:d6:50:17:93:f3:
                    f8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6F:92:2F:1F:B3:7B:88:42:F5:04:80:A8:E9:22:5F:5D:5B:C8:93
            X509v3 Authority Key Identifier:
                keyid:E7:D1:9A:8F:D9:85:41:ED:89:17:0A:90:40:19:77:A4:BE:0B:EC:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:3e:16:93:f0:d4:24:cf:64:b4:3e:75:5b:08:02:9b:c2:ce:
         2c:41:a8:f5:97:bc:ea:d6:3e:d4:36:67:13:4f:06:80:ac:c5:
         54:25:1e:9d:17:6e:bf:69:44:f1:75:d4:84:c6:29:02:b1:70:
         0c:1d:97:f4:af:2c:80:26:27:f1:a3:a4:d0:8e:3a:04:26:ed:
         07:7d:71:56:b8:32:a2:de:82:ef:c2:1f:b6:d8:59:ac:7e:64:
         52:46:63:d3:7d:6d:72:8a:e9:6a:2b:03:71:84:74:05:7d:a0:
         b7:85:2b:cc:7f:bf:c4:f7:7a:ba:29:ec:e7:76:33:b6:04:6e:
         41:a3:35:bf:42:29:41:70:ad:33:c3:6b:0b:68:4b:99:e6:c0:
         d6:7a:26:60:dd:6d:35:16:20:be:b0:d3:97:7b:9d:33:12:66:
         f5:a7:44:83:1a:bb:2e:db:f1:10:26:3e:90:12:ca:91:b2:ea:
         6e:37:48:21:c9:34:6b:e3:51:56:20:ef:09:25:c7:8a:e5:5f:
         eb:8a:d6:b5:a4:0d:b6:89:a1:63:a4:88:06:a0:b8:85:58:9a:
         65:af:e0:51:c3:3e:f3:c7:c3:14:42:10:34:81:66:2d:7a:00:
         09:b3:14:ab:75:e4:1e:84:c5:a5:0b:10:6d:35:0a:d6:cd:08:
         aa:70:11:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:26:56 2026 by rpki-client