Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
File:                     Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft (raw, json)
Hash identifier:          Pq5HeyTHdkIN3NUwiO4AzkEbUxklYegrPLtwXe97oa8=
Subject key identifier:   1A:7F:7F:C2:C2:59:90:88:66:D5:8F:98:B1:9D:C7:33:C7:4D:E5:64
Authority key identifier: 45:BB:B0:C3:77:04:BF:D5:58:84:9C:65:49:AF:97:34:E7:D1:4B:E5
Certificate issuer:       /CN=45bbb0c37704bfd558849c6549af9734e7d14be5
Certificate serial:       019D9B19A7FF029B9AD87AC9443E740484D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
Manifest number:          07F7
Signing time:             Fri 17 Apr 2026 11:00:42 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:42 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:42 +0000
Files and hashes:         1: MN0FobgarBhpw32QkaiUeOLIfT8.roa (hash: sYBcnYZm0d6n3fTXqtD2MHlZuTyo5Oki3xfMexfQHb8=)
                          2: Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl (hash: gd864lHJ8Hq5/Jf7qlY9pulJdum+bz9eNIKOenXBu0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:a7:ff:02:9b:9a:d8:7a:c9:44:3e:74:04:84:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45bbb0c37704bfd558849c6549af9734e7d14be5
        Validity
            Not Before: Apr 17 11:00:42 2026 GMT
            Not After : Apr 18 11:00:42 2026 GMT
        Subject: CN=1a7f7fc2c259908866d58f98b19dc733c74de564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e6:1a:84:70:fb:c7:33:6f:81:99:50:4c:9e:
                    12:23:5e:56:62:90:09:90:8a:71:c4:15:0d:ab:e6:
                    a4:91:12:c5:b8:0c:16:62:83:be:7e:a8:88:5c:44:
                    f6:18:d4:21:75:bd:7d:a6:e5:7c:c3:b2:d6:23:e0:
                    fc:7e:74:38:f5:9c:25:6c:4c:bd:69:03:2a:3e:0f:
                    be:56:1e:4b:6a:e2:9c:6e:9e:0c:a8:6e:e2:11:79:
                    7f:7f:b4:f8:d8:df:87:98:58:0c:e1:cc:46:a4:8f:
                    b7:47:b4:23:25:15:74:6f:f3:c7:ee:a6:e8:f3:be:
                    bf:06:46:81:ce:9c:33:01:02:49:e6:d1:a6:ef:40:
                    c3:c5:66:a5:8c:d9:fc:2f:5d:57:79:8c:be:18:90:
                    31:d8:0f:c4:05:4d:61:07:64:d2:7f:60:f4:6e:95:
                    ef:e4:2d:e3:25:5d:8b:4d:30:35:73:62:f0:d3:3e:
                    86:81:47:9c:be:04:8b:0b:eb:ef:e4:1a:73:d1:85:
                    4a:6c:8b:c1:59:47:ae:e4:09:72:44:03:c2:ec:2a:
                    bd:2c:95:47:21:a7:fc:fa:88:c3:53:76:66:d6:08:
                    c2:6f:dd:9d:86:09:06:4c:9a:2b:47:3c:f4:58:bb:
                    a8:9d:fc:4b:2a:58:b1:56:52:7b:52:48:03:39:60:
                    f4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7F:7F:C2:C2:59:90:88:66:D5:8F:98:B1:9D:C7:33:C7:4D:E5:64
            X509v3 Authority Key Identifier:
                keyid:45:BB:B0:C3:77:04:BF:D5:58:84:9C:65:49:AF:97:34:E7:D1:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:07:4d:6d:0f:8d:40:81:b6:97:54:df:02:7b:c1:7e:cb:e0:
         c7:6f:85:27:a0:5f:24:33:56:2d:50:b4:9f:2e:37:30:76:62:
         cf:35:2b:e0:bc:c3:2f:1e:71:ec:64:93:b8:28:86:12:b0:84:
         d1:d0:a9:44:1e:c6:ba:79:a9:58:5f:e9:eb:11:39:04:47:1c:
         4e:a8:e4:48:2c:62:b8:aa:28:26:a9:57:c6:da:ba:36:a3:06:
         47:f1:c2:4d:53:c1:72:a6:f6:d5:93:13:69:02:f7:e3:e3:11:
         4e:57:83:d4:b2:b7:a1:3f:9b:fa:55:8e:92:a0:9c:b4:73:f6:
         77:33:b9:bc:1a:5b:46:cd:e0:de:f4:9a:2e:13:0e:92:e5:8a:
         a1:43:6a:c2:4e:a8:69:31:d1:67:a4:b2:73:77:64:97:56:46:
         32:87:d5:7c:c1:39:eb:cf:dd:63:8f:7e:fc:d3:3c:b6:34:aa:
         da:44:59:de:70:d5:77:98:c1:25:a3:3a:bb:3a:60:72:3c:ad:
         bf:4c:66:f3:41:e0:d7:c9:98:42:67:a5:31:62:c8:b7:9e:ae:
         23:f9:57:59:24:b6:db:93:6a:bd:5b:77:02:01:25:2a:ca:ff:
         45:3b:bf:0e:23:bf:cf:c4:a8:ab:cb:47:4b:9e:2a:ea:6a:43:
         22:9b:30:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:42:39 2026 by rpki-client