Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
File:                     7cJgAozSqx0OQ3dPRATezSeu88w.mft (raw, json)
Hash identifier:          hIrISpNzAmr7guKS2Gpk+ycD6N6p3jSXOvM6zmcLwvQ=
Subject key identifier:   DB:5A:B0:A9:54:67:0F:B3:B9:C8:C5:B2:25:6D:47:2A:FA:44:8A:6A
Authority key identifier: ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC
Certificate issuer:       /CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
Certificate serial:       019D99D02886FAF83FECC6DD92F011B60872
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
Manifest number:          1492
Signing time:             Fri 17 Apr 2026 05:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:49 +0000
Files and hashes:         1: 7cJgAozSqx0OQ3dPRATezSeu88w.crl (hash: UJPdpIJ4mCfpunGRChzjunXrcj9KosJSw5DlrwAW1tM=)
                          2: bPSO6MwxWbbuX5pl75RHEJata0Y.roa (hash: AjyNVlFJkmNLyTmsoSE4kMhHz/W3/3nMb2xQxom7aZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:28:86:fa:f8:3f:ec:c6:dd:92:f0:11:b6:08:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
        Validity
            Not Before: Apr 17 05:00:49 2026 GMT
            Not After : Apr 18 05:00:49 2026 GMT
        Subject: CN=db5ab0a954670fb3b9c8c5b2256d472afa448a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a6:fa:90:00:2e:ff:ab:3f:b7:7d:ed:ac:71:
                    57:36:5a:e3:77:3c:2b:fd:a2:7f:03:b8:82:42:c4:
                    7c:a2:26:4b:5c:30:1e:bb:b5:34:d7:a4:b4:b5:27:
                    d6:e9:e0:69:9d:25:7a:9c:8b:06:d5:63:a0:eb:9a:
                    0b:05:92:82:d8:9c:02:ec:bd:c0:de:de:6c:39:e1:
                    3c:84:1d:ef:be:32:07:62:1f:44:e0:fe:d6:77:96:
                    67:bf:83:de:15:a8:42:14:1e:d2:c3:2d:b1:b4:a9:
                    19:54:17:3e:e0:c1:5b:e4:80:eb:02:88:bb:31:1d:
                    a2:51:d0:0f:55:5e:a4:12:17:91:c1:83:c7:c8:09:
                    91:81:32:4a:c0:e4:96:86:6b:3f:e8:a7:d9:06:1c:
                    21:a1:63:0d:a4:54:8d:f1:c2:3d:15:dd:8e:fb:a5:
                    ef:8b:0e:9b:91:f2:2e:a0:5d:ed:8b:51:03:c5:90:
                    5d:81:b7:84:c7:51:a3:a2:fe:26:4d:06:8c:70:e6:
                    85:d6:ee:83:44:3e:de:67:4d:93:09:f8:15:d5:53:
                    44:75:d4:9d:3f:3e:b9:f8:e3:cf:49:8e:3e:41:f8:
                    12:ea:81:53:83:08:24:33:2b:63:0a:dd:df:75:8e:
                    8b:e0:23:e2:b6:8c:9b:9a:90:ed:0e:ca:1a:35:7c:
                    c5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5A:B0:A9:54:67:0F:B3:B9:C8:C5:B2:25:6D:47:2A:FA:44:8A:6A
            X509v3 Authority Key Identifier:
                keyid:ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:b8:a4:3b:63:7a:fc:cf:c8:e2:74:de:63:ce:3c:da:83:7e:
         77:e9:c3:3f:bf:83:52:24:d4:f0:18:f6:fc:a8:a5:71:1e:cf:
         d3:ce:4f:12:12:86:1d:bb:8f:c6:56:79:5f:05:fe:e3:ac:ae:
         98:f9:13:18:24:87:4b:9f:82:b8:63:38:1c:66:50:2d:a8:05:
         05:c8:ea:7f:d4:bb:e8:c2:c3:a8:9b:c0:59:a1:65:c7:d2:fb:
         f4:af:ab:8b:8c:db:c5:12:f9:15:07:ce:8e:b9:46:fd:ca:27:
         93:ca:b3:1a:21:d6:5e:0d:6a:67:3a:93:a8:94:26:bf:4e:3c:
         77:bc:bf:17:ab:95:88:ee:3e:72:00:32:62:93:1d:3e:0d:38:
         40:84:45:c9:2b:ca:c3:01:b9:9d:51:ae:8e:28:41:f6:b8:85:
         a1:cf:63:a4:2e:a0:ff:93:92:17:1a:a0:03:a4:65:a8:7e:2b:
         cb:dd:55:79:38:31:07:17:02:3a:77:cc:c5:bb:1a:10:c0:b4:
         d1:8d:82:26:ad:d0:11:c8:c0:bb:f2:86:ff:df:e5:f8:f1:97:
         76:63:4a:7d:69:74:1f:95:99:d6:2d:af:7b:13:27:c4:00:87:
         2d:47:12:55:02:5a:b5:6a:0e:c5:b0:70:06:a8:67:9c:da:8a:
         06:c3:48:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:32 2026 by rpki-client