Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft
File:                     eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft (raw, json)
Hash identifier:          Zeh4JCQGNOpJaMshMzLfWdqLiUwFMDz+uT9W8Q7sGjc=
Subject key identifier:   FD:D5:1D:43:8D:0D:51:32:F7:CE:AA:1D:B6:17:DA:68:37:56:CB:14
Authority key identifier: 78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85
Certificate issuer:       /CN=78decead419807747c92ace69448113ff0928b85
Certificate serial:       019D9AAB935F4B1A7FB9BE7EF980D6D6C7C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft
Manifest number:          0353
Signing time:             Fri 17 Apr 2026 09:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:28 +0000
Files and hashes:         1: 4Iq17c_GHtel1CbLjFxgwB0Dn1M.roa (hash: ynXE8G+gS/lsZOLIqXkN1x5b0cy4lp5fSomJfLM7n9s=)
                          2: EzLM6o264fzi2aUeuo8X1-IxasQ.roa (hash: egEkzBQdw69GxTodEUiKdxFXNinDxPmtmsSk0Laf0Kg=)
                          3: JlJF5EbQzwplegsjgak95qFufvc.roa (hash: SWOatFVOoit3m90PErmrJxk2vw5+frRT4NdsxOBZwLo=)
                          4: eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl (hash: JXc/DGUBOg5Q6RIT2oi32y5D0tYAuC12XiWPRZrjDs0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:93:5f:4b:1a:7f:b9:be:7e:f9:80:d6:d6:c7:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78decead419807747c92ace69448113ff0928b85
        Validity
            Not Before: Apr 17 09:00:28 2026 GMT
            Not After : Apr 18 09:00:28 2026 GMT
        Subject: CN=fdd51d438d0d5132f7ceaa1db617da683756cb14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b3:6a:a4:12:aa:b7:eb:14:75:1e:ae:89:31:
                    b9:fd:d2:37:56:f9:34:dc:e4:56:c7:d4:15:89:e5:
                    69:d6:c6:f0:c3:df:84:37:9b:d6:90:e5:d2:b1:a1:
                    13:0b:09:41:26:d5:28:a2:17:f0:e0:cf:fb:23:49:
                    7f:5a:a0:2f:e0:5f:fd:22:73:a6:02:36:75:e1:f8:
                    60:5b:88:91:6b:a5:81:69:35:17:fd:d6:0a:a3:0f:
                    40:7b:38:4e:d1:cb:ab:4b:a8:9b:92:65:ca:b6:f1:
                    6a:67:9a:7e:13:e7:44:dc:7a:b2:11:3e:99:51:83:
                    10:2f:50:0e:9e:22:a8:47:a6:ed:37:e8:82:e3:84:
                    0e:13:8a:d5:f3:a5:bb:60:b0:b4:8e:10:4e:f7:0f:
                    be:70:65:7a:56:c2:48:00:2b:4f:25:52:74:ef:94:
                    d5:64:1b:04:85:53:b8:fa:2b:c4:7f:d9:47:4e:b7:
                    32:22:a8:df:db:00:39:28:e4:6f:2e:96:a5:25:11:
                    53:9e:70:f6:38:f8:aa:58:a5:b2:dc:be:2d:2d:ac:
                    e9:33:0f:17:8b:bd:47:aa:80:27:50:58:7e:a3:f0:
                    2a:1b:79:17:a1:b6:e3:4e:b8:c9:45:56:8a:2f:0c:
                    22:6a:cb:02:ba:61:ce:83:24:31:12:23:24:51:14:
                    62:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D5:1D:43:8D:0D:51:32:F7:CE:AA:1D:B6:17:DA:68:37:56:CB:14
            X509v3 Authority Key Identifier:
                keyid:78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c7:45:5e:63:1d:a2:29:d0:64:c7:03:d7:4e:7d:22:34:f0:
         de:9a:f3:74:0a:70:f1:8c:3b:ad:f7:90:b9:72:87:a8:ed:6c:
         7b:59:e8:e0:61:fc:39:98:41:82:e7:1e:45:35:91:94:b4:a7:
         30:04:98:29:8a:33:ad:cf:24:2d:2f:a8:33:06:42:c0:f8:5e:
         c2:3d:d5:b3:4f:db:59:f1:ee:b9:9f:21:cc:06:3d:e8:61:cc:
         6f:f6:0b:09:d4:ad:06:4f:20:8e:d7:2b:a1:b8:f9:53:9b:b5:
         b8:1d:c0:de:12:d0:70:90:f0:e9:f4:12:44:dd:76:e8:0a:09:
         67:e5:8b:76:02:e7:a6:43:99:06:5a:c0:6d:f7:f6:04:07:48:
         e1:6b:20:4c:5d:3f:24:4c:89:fe:05:3f:df:c4:6a:b5:85:06:
         1d:c8:d2:c0:19:9f:e8:b6:e8:54:b7:1b:d7:aa:de:22:56:de:
         dd:df:9a:17:ff:d4:b8:9c:7b:11:85:7f:04:65:75:99:05:67:
         60:97:da:90:cd:1c:ea:92:22:24:2f:71:b1:53:ab:b3:91:0f:
         5d:36:7f:1b:4e:4b:7c:c5:99:00:46:27:a2:ae:6c:13:32:ea:
         89:65:90:84:f8:74:bc:a1:aa:74:99:d6:df:19:61:c7:60:45:
         4f:b9:03:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:00:35 2026 by rpki-client