Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
File:                     7eXtRX90OCqO0LevaG4a2yk1IlA.mft (raw, json)
Hash identifier:          8bnVDA00yYVF6fnEZmoW1E5PpzaRZg7xY+1ioeGlZUQ=
Subject key identifier:   1A:B0:2F:B5:8A:26:0C:CA:3F:9B:1C:D4:06:66:4D:38:FB:32:F7:2E
Authority key identifier: ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
Certificate issuer:       /CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Certificate serial:       019D99991111C5BDD39B073ED0E1F943E9F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
Manifest number:          1259
Signing time:             Fri 17 Apr 2026 04:00:38 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:38 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:38 +0000
Files and hashes:         1: 6UcUmEautvpvMnTzbqlUFFqwHPk.roa (hash: ixisQXZ4Rb1bn7n/nHLhuuBXi93MfJ/FXdmklcMC01w=)
                          2: 7eXtRX90OCqO0LevaG4a2yk1IlA.crl (hash: k+kOxiSCuCGlK9pC/EBLStY7n7Z0NVcu7f9WPis3AqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:11:11:c5:bd:d3:9b:07:3e:d0:e1:f9:43:e9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede5ed457f74382a8ed0b7af686e1adb29352250
        Validity
            Not Before: Apr 17 04:00:38 2026 GMT
            Not After : Apr 18 04:00:38 2026 GMT
        Subject: CN=1ab02fb58a260cca3f9b1cd406664d38fb32f72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c8:a1:50:ab:a8:cb:9f:2a:13:54:86:ee:5f:
                    c7:b8:0d:ac:94:33:ba:1c:a4:30:60:9c:18:cd:2c:
                    de:09:aa:ed:2c:54:5a:62:13:0a:12:b6:ea:86:82:
                    e0:df:19:01:9f:a4:5d:15:c8:13:02:31:41:63:6b:
                    c8:a2:35:59:cd:ce:04:27:d7:08:ba:30:ad:d1:e4:
                    ba:a3:58:d1:ce:14:47:6c:f3:37:e4:91:fa:1a:08:
                    bc:06:39:69:77:7e:c2:9c:e8:2c:12:25:c1:a3:af:
                    6a:4a:e2:c7:3a:b0:37:17:b8:0e:7d:8c:86:c8:20:
                    f8:c8:09:8f:32:05:d3:6f:33:c4:68:71:bb:9d:e0:
                    18:3e:39:e6:49:ff:38:ca:11:cc:23:d5:fe:6b:5d:
                    c3:35:05:f3:64:ec:9a:f7:d9:f1:1f:f4:77:e1:e0:
                    f1:74:93:60:f9:dc:06:e5:6f:46:2f:68:91:25:12:
                    94:47:4e:13:76:58:f4:d9:24:68:94:93:f9:df:dc:
                    74:47:7c:05:88:3c:91:a6:72:dc:9f:ae:45:e8:de:
                    3d:77:10:ea:4e:6d:86:c4:00:92:54:1f:b9:26:26:
                    b6:8d:52:ba:5a:38:d2:5d:df:ce:9c:6c:cf:cc:7d:
                    04:1c:5c:3d:a0:e0:4b:e1:3b:cb:45:bc:57:08:f0:
                    25:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B0:2F:B5:8A:26:0C:CA:3F:9B:1C:D4:06:66:4D:38:FB:32:F7:2E
            X509v3 Authority Key Identifier:
                keyid:ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:5b:9a:a8:ca:37:ab:89:a7:c0:35:1f:30:46:0c:42:f9:bd:
         d6:4f:6f:55:9a:51:62:79:62:b8:96:3b:4e:1e:da:28:49:99:
         c7:bf:9a:d3:9f:11:89:31:2a:08:aa:8d:89:87:d2:59:b1:d2:
         d0:fd:98:2c:61:71:74:fa:28:a9:e4:93:f0:27:72:7e:b5:fb:
         0c:7c:4c:d0:73:a1:e2:d2:2d:0f:dc:8e:71:ce:bb:0e:7b:7a:
         d6:6b:c6:08:4d:99:05:f2:71:01:13:73:ef:f0:78:e6:3f:c2:
         59:4e:fe:51:26:68:8e:3c:68:ec:1f:c1:81:5b:56:1e:95:c8:
         c8:fc:57:3b:73:0c:44:fb:a8:6f:6f:59:db:fe:b5:0f:49:09:
         5d:b1:b2:c5:5d:6d:99:be:8d:b0:cc:ca:57:87:6c:b2:8e:21:
         f3:85:a2:c8:0b:db:8a:f7:38:5f:42:e9:d4:ac:95:d7:e8:fe:
         7e:2b:01:58:bf:c3:b6:d7:22:aa:0c:67:0d:6d:43:cd:5c:9a:
         04:d7:db:1e:a1:6c:35:ca:d1:bd:c7:8b:2d:4d:6e:4e:ed:ac:
         f9:f8:d0:2c:fd:91:c6:5f:d9:ae:1d:61:b6:2d:48:c0:5b:41:
         38:70:ed:a4:87:a7:2f:88:ae:87:3d:ac:a6:6b:43:4a:7b:ac:
         70:9e:53:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:16 2026 by rpki-client