Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft
File:                     Mwe9udWFUeFJKsQ6I7m2KWac624.mft (raw, json)
Hash identifier:          cAXsOwe/ZOVKcaw8lMdOMxYymIWI/NqRq0KbY+dUPn4=
Subject key identifier:   E4:77:BD:71:A2:70:27:2B:F8:4D:C2:03:EF:09:33:9D:95:CB:E2:89
Authority key identifier: 33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E
Certificate issuer:       /CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e
Certificate serial:       019D9BF5275F05978EB6CDF4CE77E633BB6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft
Manifest number:          03A1
Signing time:             Fri 17 Apr 2026 15:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:28 +0000
Files and hashes:         1: 5CsJQbk37xiXoy3hwH8D-YG-5Ks.roa (hash: gMzNQr0CHei7E1lRV/ytteIthIW9m0i5qgAObYiInOc=)
                          2: Mwe9udWFUeFJKsQ6I7m2KWac624.crl (hash: ddw7bH6WvXaetEhLggh8u3SCIv7UlQcV8OsKJR0jOdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:27:5f:05:97:8e:b6:cd:f4:ce:77:e6:33:bb:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e
        Validity
            Not Before: Apr 17 15:00:28 2026 GMT
            Not After : Apr 18 15:00:28 2026 GMT
        Subject: CN=e477bd71a270272bf84dc203ef09339d95cbe289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:15:4c:1a:41:60:98:ce:3c:45:08:c5:19:bc:
                    3e:2e:34:e6:d0:8c:c5:64:b0:fe:85:8c:36:40:27:
                    60:c9:d3:79:ad:e5:bb:57:da:1c:bc:f3:c7:5e:11:
                    85:29:b9:d0:7d:a4:60:f4:e9:b8:75:39:c2:b6:9d:
                    7b:5c:7d:09:12:97:88:77:5d:34:64:ad:91:23:3e:
                    ba:70:11:6d:c8:29:ca:6e:a1:75:c1:38:f8:93:f5:
                    a8:2b:4e:24:c4:ea:c5:e0:b4:1a:7b:8f:42:6b:21:
                    b5:4c:4b:c4:78:d0:85:fb:ca:ba:4a:1e:13:6e:ea:
                    62:85:d0:a1:b9:30:09:eb:03:2c:45:fd:64:9d:26:
                    c1:d3:23:fb:e4:2a:0a:ff:c4:99:03:94:35:25:eb:
                    85:de:d2:dc:bc:c3:94:d7:53:97:3c:50:14:d7:f6:
                    d0:ca:c9:5e:11:13:e0:dd:eb:bc:1e:36:b3:db:1e:
                    b8:df:b5:f9:c3:0e:f6:5a:61:4e:9a:c7:01:94:6c:
                    fe:ac:b3:3e:57:9e:eb:b8:77:ec:c9:4b:0e:c3:b1:
                    aa:23:07:80:df:dd:4a:86:e8:52:90:17:e1:67:f4:
                    74:1f:89:5e:0d:42:cf:c7:a7:4a:52:1f:3a:a7:87:
                    ee:8b:98:dc:fe:d8:89:a5:51:23:35:67:3f:e9:bf:
                    92:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:77:BD:71:A2:70:27:2B:F8:4D:C2:03:EF:09:33:9D:95:CB:E2:89
            X509v3 Authority Key Identifier:
                keyid:33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:8a:37:59:95:ac:f2:0d:ab:a7:81:5b:84:84:ba:0a:69:15:
         8b:60:88:03:a9:1a:36:70:43:b8:2c:e6:0e:59:44:5a:bd:25:
         4d:d4:bd:f1:76:d8:48:7a:97:45:4b:55:16:cd:23:c0:35:25:
         86:f7:34:3d:1a:ae:76:f5:b4:0f:0f:45:ca:fa:1c:82:a7:f0:
         a1:b5:82:6a:c2:c8:fe:ef:0b:a1:49:f6:2f:52:cf:ec:db:44:
         43:5f:31:19:2f:e8:42:fe:ef:3e:26:c2:ca:04:ff:0c:34:b7:
         49:24:e3:ba:61:ed:20:77:2e:88:51:2b:a9:c3:34:c7:2d:5d:
         02:f1:62:92:c1:b2:09:19:83:e3:69:59:92:13:bf:e2:dd:70:
         72:f8:c5:13:ef:30:d9:d2:e0:e9:5f:8d:34:71:5b:ac:14:fb:
         22:58:ab:2b:9e:48:6b:11:c6:31:4d:9e:d5:3f:27:6e:41:e7:
         4c:4f:59:c1:29:b9:69:0b:50:7c:af:50:d5:15:81:58:9f:04:
         30:c6:2a:02:61:ab:2a:03:03:12:a0:45:18:a0:65:6d:50:5c:
         cb:65:3b:e2:7f:45:b0:55:7b:58:d2:c4:f5:c6:47:1a:ea:61:
         f8:b7:ca:05:59:2a:2f:46:c0:0e:bc:fd:ad:81:c9:64:34:c6:
         a4:40:f7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:45:58 2026 by rpki-client