Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
File:                     7DpjPvLAglGlhgNWLlaqbvqT7CU.mft (raw, json)
Hash identifier:          p59OGdHEJGPWCAmWdVVgc6a75Vmq5oGXnZ3h7NUXsPM=
Subject key identifier:   4D:D2:5D:8B:D6:AE:F5:BD:22:34:EB:98:BE:E0:2A:BD:5C:F9:C7:0D
Authority key identifier: EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
Certificate issuer:       /CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Certificate serial:       019D9A3EB92F9B3450702080BD9CCD28BC05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
Manifest number:          1320
Signing time:             Fri 17 Apr 2026 07:01:34 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:34 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:34 +0000
Files and hashes:         1: 7DpjPvLAglGlhgNWLlaqbvqT7CU.crl (hash: z3g+qDm6oBiL5x6+DB3WTj77ijoxDBQqfTjVicBem0c=)
                          2: Swf3FFLXHYfQ6NVyQRwDIxCz49k.roa (hash: WjJASBXtMbMx6UjFd1CviKnEyJIaLn92uMYlDMFmvww=)
                          3: bmiicfROGlo9yf7zWdyA9ISaaIk.roa (hash: 1eggDeotMzuLMDhclZE88i2+/VDlsW1ydjGiJvLTfSk=)
                          4: lx-y9PtQp55g9e257pFIFA6PrMk.roa (hash: 3zWuaGtosieGRl8uoqyXPsU0RM4EJfQrxujvT6qUxD8=)
                          5: vOmtSoi-0VnTRfrdo0vo947Kkjo.roa (hash: YDH3N/wQDGDdiYRYpU2cCSEAou9IYJQNs0umXr6ibys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:b9:2f:9b:34:50:70:20:80:bd:9c:cd:28:bc:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
        Validity
            Not Before: Apr 17 07:01:34 2026 GMT
            Not After : Apr 18 07:01:34 2026 GMT
        Subject: CN=4dd25d8bd6aef5bd2234eb98bee02abd5cf9c70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:65:19:39:9e:3b:13:6b:8e:c0:e2:ee:aa:06:
                    01:4e:7e:b5:ba:52:e1:27:21:b8:0c:3a:b8:9d:ac:
                    2d:0a:cb:77:3f:4f:52:2b:55:d9:68:06:be:ad:f5:
                    16:5f:78:1a:b0:d9:20:94:eb:7f:08:3b:74:c5:ac:
                    bf:c0:e1:77:15:56:54:97:00:dd:f1:4b:d2:69:99:
                    c1:d8:be:94:98:48:c5:cd:2d:11:4e:9e:03:96:03:
                    98:42:7d:ea:cb:8c:eb:95:6d:5a:a3:a0:d1:13:77:
                    89:6b:1b:d0:63:28:23:42:4b:c3:0a:64:0d:68:06:
                    e7:7b:b6:a0:42:24:20:32:29:3a:7e:ee:d4:94:66:
                    7d:93:82:ce:82:d4:ed:e8:a0:be:f3:b1:d4:fb:fb:
                    20:ff:c7:3a:bc:cb:31:b0:65:0e:90:5d:31:58:93:
                    2e:63:59:21:15:45:a5:a6:ae:31:25:86:5c:ac:a1:
                    ea:09:1e:65:23:2b:53:68:55:87:08:1f:b0:61:36:
                    fd:90:ac:36:2f:1c:c4:67:a3:54:1d:87:04:25:07:
                    77:bf:e9:f0:29:bc:de:e1:4d:e8:08:f3:5e:31:67:
                    89:ca:07:91:28:9c:0e:09:40:a6:e6:34:34:55:4e:
                    e0:13:8a:81:35:5a:e5:be:82:8d:26:a2:af:c6:1e:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D2:5D:8B:D6:AE:F5:BD:22:34:EB:98:BE:E0:2A:BD:5C:F9:C7:0D
            X509v3 Authority Key Identifier:
                keyid:EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:2c:b8:06:62:2d:1b:71:98:17:25:22:d5:81:54:30:c9:df:
         5e:aa:76:f4:5d:4c:33:08:c7:db:56:49:d5:96:6a:cd:1a:e2:
         e1:4d:91:27:d7:e0:a3:00:9d:9c:10:db:2e:5f:a9:ec:f2:be:
         3a:7a:e9:5c:76:0a:a0:30:ab:41:a8:82:ec:84:0c:33:fc:34:
         43:48:31:e0:f2:de:19:d9:b7:5a:8d:9a:21:1a:c9:bd:03:07:
         65:bd:09:e2:00:46:6d:b5:bc:70:9f:c8:f5:c8:39:88:33:60:
         82:d0:aa:b6:09:dd:36:52:95:2c:71:b3:e2:01:0c:0a:ff:d3:
         dc:dc:50:ef:02:07:d0:72:c2:23:4f:4b:c6:c0:4e:9e:ee:63:
         6e:86:a1:11:f2:15:88:7d:a0:b5:a5:55:62:23:96:87:ba:90:
         8b:02:34:06:87:9b:5f:0a:9b:f0:ed:1e:19:97:c9:30:ae:f7:
         c0:68:c9:0d:69:f5:2e:ec:47:4f:86:e8:df:c9:d9:de:d2:fe:
         8a:f2:1e:17:fd:db:27:1c:5f:49:27:e3:09:91:8a:52:1f:cf:
         f7:6f:b6:68:71:e5:ae:3d:e1:f2:aa:10:9c:31:8e:b3:11:42:
         52:a4:ee:a1:ba:15:35:6c:86:2f:84:b1:d7:45:2b:e1:df:40:
         8b:c1:68:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:29:07 2026 by rpki-client