Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
File:                     fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json)
Hash identifier:          6+qoqUownsiW4CsAWHQ7njTDBXcrEFXG5bnNdXACNI4=
Subject key identifier:   E6:A1:48:77:3A:DF:0B:F0:A0:61:6D:24:1D:10:2E:9A:83:1F:9A:7B
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Certificate issuer:       /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial:       019D9850A8EFEE39611BDAFCE41BE89CBF95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
Manifest number:          0789
Signing time:             Thu 16 Apr 2026 22:01:56 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:56 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:56 +0000
Files and hashes:         1: 1WqxY3Ru6wUA1bBSLRXUbGPnrGs.roa (hash: 1Isp4qEhUMW8RbXIHRvEykaShiBFWYANN4lo8FswOgU=)
                          2: OF8_FWobXxZIravQspxAerLsQCQ.roa (hash: Y7S5oVSgN9LGWqLS5miIXFy0ldxtoJVgFrZlsFrthM8=)
                          3: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: IK1SLOIaramRSFq7t5ZREa04QOSkJYBcBVsyimquuLE=)
                          4: iYC8lbhytTD32pOwIBpaKnVh070.roa (hash: YM6e3l9qg3NAPYfHxGGt9x27m8gykxKp/xuSfybtvWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:a8:ef:ee:39:61:1b:da:fc:e4:1b:e8:9c:bf:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
        Validity
            Not Before: Apr 16 22:01:56 2026 GMT
            Not After : Apr 17 22:01:56 2026 GMT
        Subject: CN=e6a148773adf0bf0a0616d241d102e9a831f9a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:f8:d7:83:9d:ba:81:4a:76:dd:a6:cb:4a:
                    b5:a7:ce:f7:35:cd:36:1b:d3:e5:70:32:ed:c9:fb:
                    30:d2:66:c0:27:01:97:59:8b:10:14:d6:fa:ec:2d:
                    14:c1:b9:19:19:43:b3:44:14:11:a9:c4:c0:7e:6d:
                    ac:8c:d6:c9:ff:f5:b6:bd:91:e2:7c:e6:c0:0a:9b:
                    a8:91:0e:59:06:84:75:b9:6e:ec:8b:97:85:10:9d:
                    9a:99:67:ec:c3:03:ef:c9:56:d3:0f:54:c1:ce:6c:
                    5b:6f:fe:81:37:a1:ac:76:a5:7f:e4:eb:a9:74:e7:
                    6d:4b:b5:2d:d4:90:7a:06:e7:bc:9e:49:77:be:74:
                    41:ee:94:26:b6:0f:9d:70:0d:99:4b:ab:cd:a8:a6:
                    15:56:97:29:c1:4f:78:81:9b:d2:8a:b8:ce:7d:30:
                    c4:0d:95:8b:ae:9e:0b:99:ca:6e:22:0d:02:3d:63:
                    19:ca:e8:ed:9d:5d:4d:22:86:8b:d3:ef:26:aa:7b:
                    45:2a:fe:e4:61:c5:bb:36:9a:ab:f9:6d:db:15:6c:
                    7d:5c:b3:e2:b8:1e:e0:4e:e8:73:f0:b1:c9:3d:e4:
                    de:71:90:d0:e9:52:56:28:b9:90:b9:c3:91:5c:75:
                    45:94:bd:14:c3:3f:ce:c5:eb:d8:5f:ee:39:df:17:
                    7c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A1:48:77:3A:DF:0B:F0:A0:61:6D:24:1D:10:2E:9A:83:1F:9A:7B
            X509v3 Authority Key Identifier:
                keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ff:94:23:c6:c2:70:3c:52:e0:a0:95:b3:50:95:a1:b3:f2:
         f1:68:be:bc:63:d8:ac:ed:37:d2:19:e8:27:58:d0:9d:a4:df:
         a9:70:3c:5d:99:64:4a:54:c1:7d:0b:f4:f6:c5:65:5b:f3:51:
         71:52:04:88:6b:2e:66:5e:08:e9:77:38:de:42:ed:e2:f1:ad:
         ce:b3:91:9f:e7:9b:04:04:0f:98:96:7a:8d:ed:a1:e0:60:42:
         89:65:15:39:ae:2e:3f:cf:e4:bc:a5:72:1d:08:47:8c:1c:ff:
         17:3c:08:0d:b5:f4:65:88:d1:0c:df:69:cb:dd:70:94:e8:35:
         49:92:47:7d:dd:52:86:54:d5:e4:bb:f6:bb:72:59:8e:f5:8f:
         9b:cb:73:35:c8:61:64:bb:c3:56:98:cd:a4:1a:24:9d:7d:74:
         eb:87:23:b5:1b:90:1d:9f:1e:b4:3e:cd:7d:74:15:af:0f:a5:
         48:2e:dc:a1:5f:8c:b5:82:21:f4:19:c4:94:42:b9:ad:50:77:
         04:32:69:a8:fb:57:99:db:8f:95:5a:4f:48:e2:a3:b7:9d:37:
         fe:37:3e:42:16:9a:ab:d9:47:2d:1a:c1:76:22:48:ba:25:9a:
         fc:37:92:c4:5d:46:75:a2:ed:07:7c:04:b1:de:39:14:1b:a9:
         10:33:08:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:06:52 2026 by rpki-client