Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
File:                     Ez7rn3q6GeA7E2basIg_NlP8A74.mft (raw, json)
Hash identifier:          EekOQT0/+JHOXeT2J/FO2PYL6LTNQJRpfvIHNeql30U=
Subject key identifier:   09:C5:4D:75:80:07:57:D8:AE:B3:84:53:AE:17:0F:18:35:D3:8E:7F
Authority key identifier: 13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE
Certificate issuer:       /CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
Certificate serial:       019DA378A8757487FCD8EA48659198B369C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
Manifest number:          1617
Signing time:             Sun 19 Apr 2026 02:01:26 +0000
Manifest this update:     Sun 19 Apr 2026 02:01:26 +0000
Manifest next update:     Mon 20 Apr 2026 02:01:26 +0000
Files and hashes:         1: Ez7rn3q6GeA7E2basIg_NlP8A74.crl (hash: ye6xJJ2ZJEZuyzcMIZlUScsX28hAtDEf9K0ww6A4ruk=)
                          2: zUZH8frHV9LyqR8uuy29ut30zGA.roa (hash: ZtNFrARi4yUhBACRab5+tIfsO4m0wuC3iZpaWR0rbTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:a8:75:74:87:fc:d8:ea:48:65:91:98:b3:69:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
        Validity
            Not Before: Apr 19 02:01:26 2026 GMT
            Not After : Apr 20 02:01:26 2026 GMT
        Subject: CN=09c54d75800757d8aeb38453ae170f1835d38e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:83:5e:74:13:4f:12:65:f0:b6:4f:2c:3f:
                    85:96:d8:f8:9f:aa:29:10:cc:a7:c2:82:88:fc:1e:
                    14:78:66:2a:b3:90:b0:99:2d:5c:e9:4f:06:21:75:
                    82:13:c1:41:f5:a9:4e:01:40:63:97:31:87:9a:ed:
                    7a:7e:6f:3b:95:66:e2:d7:a8:04:38:8a:a4:9d:52:
                    26:22:a2:48:56:4d:ee:63:c3:da:2d:c0:44:55:3c:
                    c3:ed:be:ba:1a:3b:cc:e0:45:3c:07:8d:10:ce:39:
                    c1:b5:29:ba:da:0f:a0:4f:e5:f1:77:04:00:a8:3a:
                    b0:62:0e:8a:b3:86:3a:1c:c2:9f:ca:12:ab:fd:ae:
                    99:f3:0d:34:e4:19:c1:ef:c2:bb:d1:99:52:57:99:
                    c9:71:87:d8:b4:a6:d7:da:d8:e5:9e:8e:71:08:45:
                    6f:24:ae:6e:34:03:32:32:68:59:6f:2a:41:a6:0b:
                    b8:c5:f9:61:9f:66:76:9f:dc:f1:d2:7e:ce:e8:95:
                    dd:12:78:79:7c:dd:42:bc:cf:2f:81:ae:7a:eb:7c:
                    c4:fd:c6:84:7d:c8:22:a5:9b:4c:1d:ab:db:0f:02:
                    9b:25:a8:37:a8:cd:dd:b2:b0:28:f1:b4:e0:ef:7d:
                    4e:90:26:96:5c:9c:55:ff:9b:52:61:2c:f8:e4:23:
                    6f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C5:4D:75:80:07:57:D8:AE:B3:84:53:AE:17:0F:18:35:D3:8E:7F
            X509v3 Authority Key Identifier:
                keyid:13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:0c:3f:c3:86:a4:db:9f:6b:14:58:89:16:66:84:49:fd:78:
         b1:92:e1:80:0a:83:f3:96:e3:2b:48:bf:d3:90:bd:fd:6c:f4:
         29:98:7c:f1:bd:f8:b2:a7:8e:47:b8:c1:b0:af:62:e8:ab:23:
         e8:ca:d1:82:2c:da:d3:7c:8d:d2:b5:11:94:43:37:2e:f9:6f:
         ba:1d:30:c6:00:6c:16:b4:d6:d8:ea:26:9c:6f:4b:42:ed:ea:
         24:07:03:17:3e:33:26:25:3d:24:89:a3:2e:70:f9:0e:b0:38:
         20:a2:4b:49:34:b4:70:69:c1:6f:4d:c0:eb:e9:76:c4:ec:de:
         39:81:1e:78:89:eb:9f:34:86:3f:21:f5:74:70:cd:b3:ae:ea:
         4b:4d:03:d5:fe:ce:b0:8a:bd:34:4b:03:ed:07:db:9d:bb:bf:
         bb:9a:fb:7c:41:da:3d:5c:b9:84:30:47:9e:4f:03:57:34:44:
         56:e6:a0:52:73:27:fa:08:cd:83:39:a0:57:62:72:da:01:82:
         80:73:b6:a8:7b:f8:79:20:6d:92:a7:9f:9b:02:01:e0:db:64:
         f5:35:ae:e5:21:29:d6:b1:96:9e:46:c3:5a:5c:7a:73:2f:36:
         4b:34:ce:17:e2:09:e2:84:1c:b2:f5:47:e6:cb:cc:89:79:d8:
         14:c6:eb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:28:50 2026 by rpki-client