Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
File:                     7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json)
Hash identifier:          KO9BUHivg16jAMObuvUihFy/W3nHTX1HfNlu0SQhT7M=
Subject key identifier:   43:C5:F8:67:6D:D7:88:FD:16:D9:4D:38:D8:61:15:7F:FA:38:9C:54
Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
Certificate issuer:       /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Certificate serial:       019D98F48614460963DD3BA1AD3B7583B8E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
Manifest number:          1406
Signing time:             Fri 17 Apr 2026 01:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:55 +0000
Files and hashes:         1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: rIdV3MZ2Og6ECAmney562E7/+LSQw/U6WAFK0SsCul0=)
                          2: 88NWVToLEwKK_Mpgeyzi5wA0xpo.roa (hash: l2cWTge/R/tklyYKEf8+fIr98gBT5pBqi6tErfFhBF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:86:14:46:09:63:dd:3b:a1:ad:3b:75:83:b8:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
        Validity
            Not Before: Apr 17 01:00:55 2026 GMT
            Not After : Apr 18 01:00:55 2026 GMT
        Subject: CN=43c5f8676dd788fd16d94d38d861157ffa389c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3d:d2:2f:e0:4a:ba:d0:78:c2:4d:dc:63:11:
                    d4:1a:5e:35:19:6f:b8:5e:7f:3d:9d:f3:52:26:ca:
                    48:52:50:39:a8:b7:90:1d:60:9a:a5:3e:2c:d4:04:
                    a6:1f:c2:cf:79:5c:99:21:60:6e:d5:ae:bf:90:d1:
                    c5:c0:08:a7:cc:68:2d:c6:f7:1f:eb:90:4c:48:5f:
                    11:0d:cd:22:dd:90:34:96:23:79:95:39:92:53:a6:
                    bd:05:7e:04:0d:04:d5:d6:fa:39:9b:a3:dc:1d:3a:
                    88:73:2f:32:13:54:c0:98:61:7f:68:fb:a9:b5:ec:
                    52:ce:60:e0:48:26:9c:80:e0:68:ec:2f:46:a0:df:
                    dd:4a:3a:31:39:07:9d:7e:b7:a1:1e:2b:ea:95:a4:
                    4c:1a:0b:45:ce:50:f9:4e:f7:28:d9:31:46:25:91:
                    21:63:44:77:31:0e:01:f0:ab:b8:78:20:2b:ca:61:
                    6b:57:70:03:b5:3b:ce:de:c6:2a:8f:02:88:aa:77:
                    67:b3:ab:18:e6:56:45:75:72:b1:41:60:f1:7a:e8:
                    d9:8f:b9:2f:87:f4:6f:74:ce:70:cb:9c:7c:99:80:
                    8c:bb:f2:3e:dc:a9:98:cc:f8:dc:cb:a9:d0:3a:17:
                    27:17:7d:5d:ad:76:02:5f:7a:96:59:6c:c0:29:95:
                    d0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C5:F8:67:6D:D7:88:FD:16:D9:4D:38:D8:61:15:7F:FA:38:9C:54
            X509v3 Authority Key Identifier:
                keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:38:27:7b:8a:25:67:16:ea:e3:17:59:e8:06:d9:81:8f:ba:
         97:51:a2:f1:0f:71:7e:6c:bf:95:86:9f:27:00:6e:a1:29:0b:
         12:3e:95:51:3d:d9:8d:93:bb:6f:de:f2:49:8f:f7:55:e2:a5:
         bd:89:1e:24:46:ff:dc:c7:e7:67:37:76:9d:96:db:6a:85:88:
         23:01:ee:83:ca:1e:69:26:f2:f5:9f:17:10:c2:34:15:10:50:
         a7:f9:0c:94:96:e5:af:aa:0b:c4:9b:a9:e6:18:71:8a:19:92:
         a9:e0:90:4d:10:e5:1b:6e:dc:5b:4e:b9:62:de:43:b1:5e:68:
         8b:3e:a0:94:ec:e5:42:f5:f6:10:39:c7:75:f8:e5:a7:fd:03:
         22:72:f5:11:04:85:14:0c:2e:7b:fd:90:d8:07:f7:20:31:dc:
         f7:57:dd:df:8e:52:32:d2:12:d7:20:77:17:cc:24:bc:de:49:
         5a:ed:0b:ba:60:8f:0d:0f:8f:d4:8c:05:25:b0:23:15:ed:04:
         a1:8e:6c:d5:5b:65:5e:f0:69:a8:11:03:25:9a:11:16:d3:7d:
         ef:7b:db:f5:ed:a3:ea:75:d2:f5:b3:52:d2:c1:0d:68:3c:18:
         00:4c:e2:cb:d4:a6:e9:3a:59:ba:e8:81:af:74:23:b4:8f:40:
         ce:ec:54:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:50:17 2026 by rpki-client