Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
File:                     M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json)
Hash identifier:          YWPPSx/PbtLHhR2TR0BHemLJo8CEO71E3hHy1MBLsco=
Subject key identifier:   1D:57:85:7B:F2:EA:00:97:BC:9F:C9:88:BF:DE:AF:77:41:01:75:E1
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Certificate issuer:       /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial:       019D9A75305FB46199C6787E8CC33D962669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
Manifest number:          107E
Signing time:             Fri 17 Apr 2026 08:01:04 +0000
Manifest this update:     Fri 17 Apr 2026 08:01:04 +0000
Manifest next update:     Sat 18 Apr 2026 08:01:04 +0000
Files and hashes:         1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: IIgqDLRcn75KNF+UTd6wH2hX97JpFLEXu/t7BCEuMbg=)
                          2: dspttiokyRWTJ0EiYPb4T9i6tOw.roa (hash: QWCGmY5jOfRv55kAj8L2RUox3IsinGCno3NGv/5yToo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 08:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:75:30:5f:b4:61:99:c6:78:7e:8c:c3:3d:96:26:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
        Validity
            Not Before: Apr 17 08:01:04 2026 GMT
            Not After : Apr 18 08:01:04 2026 GMT
        Subject: CN=1d57857bf2ea0097bc9fc988bfdeaf77410175e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:71:00:96:92:49:b7:42:85:80:bf:4a:74:
                    50:90:e6:7d:af:35:21:4c:33:73:03:22:44:d4:8b:
                    f1:8b:f9:10:69:5c:a2:75:3e:8c:1c:82:ce:30:32:
                    77:0f:23:b7:af:27:16:f7:3e:e1:65:b8:65:2d:1c:
                    2d:17:27:00:e6:79:a5:72:3c:21:c2:96:d0:ce:f1:
                    68:38:72:1f:5e:12:c9:c0:08:94:ee:4e:56:9c:2f:
                    a6:93:93:97:27:4c:55:5e:86:8b:c8:ee:22:44:e7:
                    0a:51:5d:13:5f:fc:54:aa:fd:ee:73:c2:5f:d6:e8:
                    16:4d:7d:c1:64:82:d8:d0:49:a2:1f:7c:00:9d:96:
                    00:ba:e1:b4:07:6b:00:ec:1b:75:89:bf:6f:f4:34:
                    16:6d:1d:59:49:52:76:c5:eb:7a:53:c4:26:ab:d3:
                    97:51:dc:b0:bd:8d:1a:d6:83:01:35:6c:a2:57:7b:
                    d0:8b:57:4d:24:1f:f6:a2:03:50:e0:a3:01:0a:e5:
                    dd:7f:1b:7c:05:36:28:f0:95:94:8b:8c:e9:d8:f8:
                    a0:df:85:67:8c:cb:3a:9e:94:ae:99:e1:b9:2b:08:
                    12:c7:4e:ec:f5:ac:13:32:bb:a3:59:e2:f3:bc:6c:
                    47:f9:07:ac:8f:de:73:bf:d3:04:4a:57:4c:9b:d8:
                    98:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:57:85:7B:F2:EA:00:97:BC:9F:C9:88:BF:DE:AF:77:41:01:75:E1
            X509v3 Authority Key Identifier:
                keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:e7:6b:04:40:43:b2:40:ec:56:08:31:de:79:c9:9b:a8:26:
         ce:3b:8e:02:d7:58:4f:9a:95:85:f7:0f:23:6e:24:90:b9:9d:
         2b:ca:ce:70:0c:f2:c1:bc:a1:e2:56:c6:b1:6a:a4:d1:1f:d1:
         3d:d3:03:4a:e9:a5:1d:eb:16:11:4f:99:ca:b0:50:7e:89:e4:
         ba:04:61:70:ba:fc:57:e5:6a:17:6b:ad:de:3a:62:ca:e2:f3:
         fa:28:92:6e:42:2c:d7:2e:19:89:11:d5:27:25:ba:b6:b5:a2:
         38:37:94:cc:86:16:a1:db:05:6f:9c:8c:49:4f:c3:a2:ef:9c:
         7f:76:95:27:dd:5c:82:8e:1c:a0:07:e0:74:4d:86:ae:67:f6:
         23:60:b7:3c:a5:49:7b:92:3e:19:d4:d7:50:db:6f:d6:83:c6:
         e2:83:76:fc:69:70:b7:fa:45:71:1c:02:e6:c3:84:ba:13:df:
         de:47:be:af:6c:6b:86:8c:53:68:b0:ca:bf:c1:c7:c9:29:b1:
         24:79:ad:90:88:96:cf:fe:d8:61:ae:51:08:ec:9b:0a:d6:16:
         ee:eb:68:e2:d3:65:a7:52:75:6f:cf:b7:13:49:12:35:15:4c:
         fa:4b:9e:a8:a6:a2:a2:34:f6:9f:a4:3e:51:4d:f7:4d:15:e4:
         5c:dc:c7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:53:53 2026 by rpki-client