Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
File:                     E0QDZgB-tW8Q6fmelSBNMwUIubA.mft (raw, json)
Hash identifier:          eqONowUZBSQkBiqPumgXxJ2SjGqr9p41RHkxz3ncgZ4=
Subject key identifier:   90:54:3A:CB:32:74:87:14:1B:B4:67:6A:CC:A4:B1:9C:D1:EB:A1:5A
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Certificate issuer:       /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial:       019D9B19989F0E6B23E314F494A8B5A69EF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
Manifest number:          1055
Signing time:             Fri 17 Apr 2026 11:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:39 +0000
Files and hashes:         1: Cd254sJdJwuu6H9I9E0srrpdoBA.roa (hash: pL8Cyr7W2nS2mcEsGc+8rfoSe9scnFA9gs7/69wjtfU=)
                          2: E0QDZgB-tW8Q6fmelSBNMwUIubA.crl (hash: owRo7BQDvy0wgMXs1WfTHyZql2gn87AftV35XtX5VqQ=)
                          3: NKEvDzhxDBmLfFoED7YoUdXjLow.roa (hash: 29vPP7S5TvS0wSCUMz6/EH7GaUe47diCIdiBQvatduI=)
                          4: d0PfZiDQAfUb8dfx15UglgBUuoc.roa (hash: HZDXDvgZeDrPookCn9v4kcGEbz0yWS2FqsD6q/CriPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:98:9f:0e:6b:23:e3:14:f4:94:a8:b5:a6:9e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
        Validity
            Not Before: Apr 17 11:00:39 2026 GMT
            Not After : Apr 18 11:00:39 2026 GMT
        Subject: CN=90543acb327487141bb4676acca4b19cd1eba15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:37:8a:4a:39:4e:f8:78:6c:ae:f8:4d:b4:26:
                    78:ec:f7:55:5d:8b:38:31:91:b0:96:ac:c7:9b:66:
                    30:c5:27:12:06:1d:1c:c3:d2:60:14:1c:06:c8:07:
                    64:16:9f:ca:62:11:d6:90:55:12:f6:62:6c:72:4f:
                    7b:56:cc:0e:d7:b2:ca:9a:e9:ae:72:d7:c8:64:f2:
                    25:8a:2e:ed:a9:03:2f:ea:45:6f:71:97:bc:f8:e4:
                    50:40:1f:3c:a6:91:5c:9c:a3:09:e2:36:45:e2:fa:
                    09:53:b1:b8:db:69:c7:48:e9:58:41:31:61:f4:a2:
                    bd:60:ea:0f:f1:ac:1b:99:04:33:b7:4b:e4:b5:05:
                    dc:8e:7c:61:bd:c7:7d:1f:b5:3a:89:a3:78:ce:ed:
                    4c:47:a8:3d:4b:b9:dc:be:79:8e:bd:ae:e1:77:89:
                    84:f9:f2:75:4d:3e:cb:b0:33:3f:c8:68:c1:a4:e6:
                    2a:3d:22:86:e9:0e:d1:d6:ab:c6:a4:49:ad:40:43:
                    4a:69:5d:a4:32:10:64:0f:69:ce:d8:c1:df:56:34:
                    c5:49:be:0e:14:40:4a:f7:05:2d:66:bb:c9:87:9f:
                    fe:e0:ee:e4:10:78:84:e5:4f:26:73:d9:81:18:30:
                    f9:6b:07:8d:4d:db:3a:fc:b7:49:0a:ec:b7:a3:be:
                    9a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:54:3A:CB:32:74:87:14:1B:B4:67:6A:CC:A4:B1:9C:D1:EB:A1:5A
            X509v3 Authority Key Identifier:
                keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:9c:98:6c:d6:f4:59:4c:2a:64:3c:c1:c2:a4:03:40:a7:08:
         c3:08:6b:b5:38:c2:41:78:15:5d:19:61:6e:73:50:c1:81:51:
         f5:6d:cb:46:2c:e9:50:2b:b5:8d:93:1a:85:93:1b:26:31:93:
         c7:30:3f:e8:0e:bd:9e:f4:64:07:77:01:c7:ff:1d:88:c4:21:
         4c:47:75:75:db:ae:f9:8a:f3:28:6a:46:47:d6:87:18:86:ff:
         ae:64:6a:d0:51:71:35:bb:ab:6c:7f:a6:22:3f:d3:47:d6:87:
         91:98:a7:61:41:dc:51:a0:21:65:bb:bc:a0:06:fd:c7:28:30:
         3f:56:96:97:91:a2:94:ae:ad:82:6e:df:33:aa:92:af:9a:c0:
         b6:e1:8f:ac:a7:22:40:3a:c2:64:02:67:56:6d:59:97:ff:55:
         d8:57:0b:58:4f:e6:bc:cc:9a:12:6c:97:f6:21:24:bd:ed:b5:
         1d:2a:42:8d:a0:77:33:c1:46:45:8d:35:41:4f:15:5f:d1:ed:
         15:b3:f3:86:f5:c5:3a:1c:cf:6a:18:d4:90:a6:51:23:bd:96:
         d4:5b:a1:02:73:50:d0:b2:87:e1:d6:05:dd:df:9e:dc:2a:e7:
         73:b5:ca:db:b9:eb:81:9e:38:e3:11:8b:60:3a:0c:c7:6b:85:
         70:a3:d5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:49 2026 by rpki-client