Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
File:                     7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft (raw, json)
Hash identifier:          6D0A9NbU5iJOy6+Y8DxeCSM6YcZ7EYc9dqEDHMhh1u8=
Subject key identifier:   94:9C:1F:68:0D:09:C2:E2:7E:55:4C:AD:24:92:99:26:21:5B:92:7C
Authority key identifier: EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57
Certificate issuer:       /CN=eebe79d147882422ec275417dfd2affa93a02757
Certificate serial:       019D9AAB862A5B34BB713236808DAD7B9718
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
Manifest number:          08DF
Signing time:             Fri 17 Apr 2026 09:00:25 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:25 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:25 +0000
Files and hashes:         1: 7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl (hash: TJCW6Fzx0bHdnVZ7XCjS6AYjnEHjg/3w2laSPthaIhs=)
                          2: QSFo4SzW5Mxl0PfFRdNnIL_TgtQ.roa (hash: ihRbYBAqH4CF7W2NY5WPRwb0ldsVjq6C79woYjxyC0Q=)
                          3: Qhj-dAw4UmH14cGcWPixT30vFoE.roa (hash: JjCn/CEVqHRrx5g3GCN0ImneG9z/AYQZMRc57RLWwA8=)
                          4: UfUKm5VRI_4IDkO1oFXvYLTnZWQ.roa (hash: FWPMWaa8EhT3K9Uzqt/ZpfSh1CKxfYK1Ozqf41dv8H8=)
                          5: Up3P0BLXnOn0NJzNO22oJuB2P-0.roa (hash: WAsExi4a515grUSlWqpJ211VY3MEpndWg6Zn1Kyg9+8=)
                          6: eDlvHgRtKsU4i-jNtF947Zs0OH8.roa (hash: O24cI9pKOeR6BhzhlKYvgEN2vTJ+LKMhalZO6Gb3Tb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:86:2a:5b:34:bb:71:32:36:80:8d:ad:7b:97:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebe79d147882422ec275417dfd2affa93a02757
        Validity
            Not Before: Apr 17 09:00:25 2026 GMT
            Not After : Apr 18 09:00:25 2026 GMT
        Subject: CN=949c1f680d09c2e27e554cad24929926215b927c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:22:d7:af:bc:d3:46:c8:a1:2b:f4:35:ee:b0:
                    16:6c:7f:dd:e0:8c:c7:b2:38:4d:17:c5:1a:42:39:
                    9c:f9:f3:b9:12:1b:83:26:3c:a6:47:d0:70:2a:0c:
                    75:e7:55:4f:35:4e:be:7d:0b:d3:a4:a0:a4:e4:28:
                    46:06:cd:d0:95:ea:f5:40:e6:7a:d4:97:82:c1:0c:
                    d8:db:12:e4:48:7b:b4:4f:0c:4f:23:cd:ec:24:13:
                    dd:4f:76:38:c9:d1:51:bf:db:9a:2d:60:eb:d4:c6:
                    47:01:ea:3a:7f:ba:e6:fe:a1:60:f0:81:32:86:5f:
                    21:6e:76:84:51:9b:dd:c2:8d:63:ae:e0:97:78:2e:
                    e0:32:13:e7:18:37:14:c2:41:ff:10:85:ff:9b:b6:
                    83:79:42:a8:e4:02:7d:f1:60:52:f6:11:de:6b:79:
                    d6:3e:8a:d1:87:b6:99:2c:34:91:9b:45:50:5f:40:
                    6c:42:44:09:d4:02:f6:25:e9:2d:8b:67:80:39:d5:
                    c7:77:c3:bd:0b:45:9b:9a:d3:cb:9d:19:af:a8:e2:
                    41:32:23:c0:87:a8:74:b4:86:64:43:dc:26:69:08:
                    19:f1:9b:94:2a:a4:18:32:08:09:e0:2c:5d:03:60:
                    51:cf:87:5d:12:2e:73:eb:95:d0:f2:b6:c8:dd:f4:
                    59:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9C:1F:68:0D:09:C2:E2:7E:55:4C:AD:24:92:99:26:21:5B:92:7C
            X509v3 Authority Key Identifier:
                keyid:EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:42:4c:7d:13:19:9f:69:f3:5a:f6:21:3e:72:5b:e8:29:83:
         7a:b4:ba:aa:dc:00:5b:83:fd:3e:cb:4b:d2:e3:54:66:7b:7a:
         ec:8f:1b:39:ca:f7:fb:db:18:1f:b1:09:d7:86:09:d9:96:a6:
         4a:52:9e:3c:16:d9:94:39:6e:6b:79:70:68:47:c4:c8:b4:bd:
         94:cc:45:e6:8b:b2:2b:d2:d3:df:f1:6b:f8:4c:e5:e9:48:35:
         d3:bf:0a:16:a7:ef:ae:57:7c:73:b2:42:fd:9f:dc:de:30:9c:
         b1:53:d6:4f:87:0e:cc:b2:c8:3b:ed:c1:89:72:2e:91:04:df:
         83:89:75:ed:36:e7:db:ea:fa:59:45:90:52:7b:50:96:6a:8d:
         df:5d:d7:9c:0c:b3:69:7f:0f:fb:e0:d9:92:00:b7:16:78:cf:
         2b:7e:c9:5a:23:b8:b2:67:de:4d:e3:72:fb:03:69:04:0d:ed:
         31:13:e7:81:f1:5d:4c:c7:d9:25:2f:d0:74:07:a5:40:5e:88:
         f6:e5:a6:12:3f:8b:df:95:56:a7:bd:40:bd:a2:30:45:48:a9:
         10:66:b8:a8:2b:4b:49:c0:46:9e:af:c1:a9:f4:97:5b:a2:0c:
         f6:7b:88:b6:c2:b6:77:77:d0:5d:4a:b2:57:20:4a:ba:55:aa:
         99:88:40:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:59:58 2026 by rpki-client