Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
File:                     hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json)
Hash identifier:          tKv83XeKIJ8ZgIsWr11r6zAJ36oillO09qXhUpk7PLs=
Subject key identifier:   CB:C7:C7:6F:BB:4D:39:E0:89:BD:32:B2:6D:29:5B:D4:99:31:CE:1A
Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Certificate issuer:       /CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Certificate serial:       019D97E1B15EE8014A9B48368FD59EE29D1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
Manifest number:          1362
Signing time:             Thu 16 Apr 2026 20:00:43 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:43 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:43 +0000
Files and hashes:         1: V6Mvsnc7Z774Ev5q6h6Mb-ytj-8.roa (hash: /GNFnTbzQDf+YRxBgnXt7mG8KTDdxxNld8mJ/4Y6skk=)
                          2: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: 5DZtewvGC2W4AkJO4uZ5pm26Zs1UxINzAjhWLTZiD3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:b1:5e:e8:01:4a:9b:48:36:8f:d5:9e:e2:9d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
        Validity
            Not Before: Apr 16 20:00:43 2026 GMT
            Not After : Apr 17 20:00:43 2026 GMT
        Subject: CN=cbc7c76fbb4d39e089bd32b26d295bd49931ce1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c6:68:8c:17:ad:56:80:d1:dd:98:10:14:d5:
                    25:b3:51:4e:38:8b:b0:d7:69:f0:8b:0a:68:ae:41:
                    7b:58:98:53:88:2c:7a:a5:e1:a4:d5:71:8e:8d:fd:
                    e8:c5:b9:81:20:85:33:73:44:5f:6b:28:7b:e2:7f:
                    0f:40:84:68:83:77:03:ed:c2:08:01:40:4f:e6:dc:
                    5e:63:b2:9a:74:be:8d:f6:5c:1b:5f:7b:d6:66:5e:
                    b5:bc:c9:fd:30:ce:37:54:a4:85:62:94:77:cb:aa:
                    88:89:12:17:11:61:6b:df:35:1e:e8:29:6d:01:a5:
                    8c:fa:a8:c0:2e:bd:bf:93:52:90:64:c4:79:cf:eb:
                    fc:69:af:80:4c:ec:14:32:19:e1:84:12:19:b2:aa:
                    c0:fa:b7:02:06:d9:80:df:eb:be:93:79:ce:26:55:
                    ef:2e:c3:7e:36:84:78:13:10:37:14:5a:e0:97:11:
                    56:ff:ad:dc:32:71:4e:b0:d7:25:d1:8a:57:c1:d1:
                    71:da:d1:a6:74:39:c4:63:a2:b8:6e:0f:c7:4d:78:
                    1a:a1:88:00:e4:67:6b:40:77:2c:be:cc:7f:25:39:
                    8b:5d:fe:ae:ed:c1:5e:91:cf:b0:dd:80:36:cd:22:
                    6e:d9:6d:76:53:04:9d:ba:73:a8:6b:66:5c:d4:73:
                    a2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C7:C7:6F:BB:4D:39:E0:89:BD:32:B2:6D:29:5B:D4:99:31:CE:1A
            X509v3 Authority Key Identifier:
                keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:e5:36:71:1f:08:6d:99:68:aa:53:12:58:4b:b2:e1:72:5f:
         67:d2:99:b1:ed:eb:1b:31:76:2e:a4:c8:3e:32:93:5b:a6:80:
         1f:49:ae:66:07:84:8d:e5:c0:9a:3b:7c:03:f8:b5:58:a4:c7:
         2c:6c:af:2d:ce:bf:4b:9b:f0:b9:a8:5c:2d:58:1b:cd:c6:d6:
         f2:ce:4c:a3:1d:eb:95:4b:47:03:2f:b5:53:c0:18:26:b1:67:
         63:36:43:82:ba:b3:34:c2:8d:18:97:ca:be:1f:37:da:f2:6b:
         41:2c:f0:df:53:b4:e6:10:ae:56:8b:70:a8:00:0d:6e:30:9f:
         8c:1e:e6:bb:dd:71:67:e3:ed:52:80:58:ee:d3:7c:26:5d:7f:
         2a:17:fe:26:ea:1e:05:4b:d0:5e:0e:3c:0f:8b:4c:14:3c:56:
         00:b2:fa:bb:df:27:b5:4a:f4:68:d7:91:76:99:42:84:8f:ca:
         4e:18:65:5f:15:61:fe:d4:0a:94:0a:56:ce:30:9b:3a:9a:6b:
         f3:c3:12:07:27:e6:51:9d:fc:21:14:bd:f6:7b:ce:76:64:c8:
         d6:10:55:dd:d5:38:be:04:50:91:9a:5f:07:9c:65:c0:84:93:
         82:81:74:9b:ad:f4:2d:f6:b7:e2:74:b9:f8:6e:da:76:dc:95:
         e7:e1:9f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:35 2026 by rpki-client