Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
File:                     Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft (raw, json)
Hash identifier:          FiZeStgbrCZKqI6QRdXKwNSBux28waMobo6uJ2qR87Y=
Subject key identifier:   0D:4F:7E:E3:65:A1:61:78:AB:9E:50:A3:5E:6A:E9:83:77:6D:2C:7C
Authority key identifier: 3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
Certificate issuer:       /CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Certificate serial:       019DA4C1D43DA4FE03EBD05A6EF5C8725223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
Manifest number:          0C73
Signing time:             Sun 19 Apr 2026 08:00:59 +0000
Manifest this update:     Sun 19 Apr 2026 08:00:59 +0000
Manifest next update:     Mon 20 Apr 2026 08:00:59 +0000
Files and hashes:         1: 1RQLtNwsJfIFpRzUfnhxJpXZkyM.roa (hash: wMjp06WKn3OrqdyFTd7sBWSyRC6sXJcxycCDPSTxcI0=)
                          2: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl (hash: QngD0ZUhC/ZgECs/l1PIL1NeWFF2o3KGy+yd5rVoB3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:c1:d4:3d:a4:fe:03:eb:d0:5a:6e:f5:c8:72:52:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
        Validity
            Not Before: Apr 19 08:00:59 2026 GMT
            Not After : Apr 20 08:00:59 2026 GMT
        Subject: CN=0d4f7ee365a16178ab9e50a35e6ae983776d2c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:45:09:c6:ca:b5:d3:a8:92:c7:ec:e2:9b:70:
                    0e:f3:67:de:e4:23:e2:ff:a9:f9:fd:e4:57:3a:55:
                    09:4e:76:38:71:ab:8b:c6:01:24:01:9e:0e:83:d3:
                    13:d5:b0:4a:c6:ca:4e:f9:0e:e7:14:3e:cb:7e:cd:
                    72:1b:0e:11:56:30:7d:1d:45:c4:9c:c8:8e:b4:e9:
                    16:38:0c:36:93:13:5d:82:f1:d2:32:9c:20:2a:a5:
                    1a:9c:a3:88:9d:27:06:c9:68:c0:ad:8f:c6:0e:06:
                    50:5d:b3:c3:5a:37:35:73:f3:08:20:89:43:3d:96:
                    d9:b2:07:a9:fb:e5:68:8a:74:0b:6a:2d:90:d9:21:
                    0c:8a:99:4a:e0:75:d2:e8:ec:11:db:e7:88:ef:f1:
                    80:cd:b6:15:90:5f:e0:5f:d1:96:3e:76:56:86:66:
                    cc:ea:e6:bb:23:0d:5d:83:e2:99:51:e2:7e:4f:f3:
                    77:d6:ea:65:06:9d:e8:98:c4:18:75:0e:3d:9f:31:
                    97:8f:ea:79:8d:c1:21:58:8f:7c:4f:90:47:f9:ed:
                    68:59:a2:78:ec:f9:b8:be:c0:23:c0:26:ed:e6:8d:
                    e3:a2:b8:5a:64:d4:c0:03:9d:91:89:84:6d:13:ae:
                    69:ad:e7:3c:ea:5a:21:20:01:19:f3:4c:04:71:ac:
                    78:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4F:7E:E3:65:A1:61:78:AB:9E:50:A3:5E:6A:E9:83:77:6D:2C:7C
            X509v3 Authority Key Identifier:
                keyid:3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f2:81:6e:bd:60:02:2c:97:d4:56:b7:a2:cf:87:ff:8e:24:
         4c:1e:d5:86:04:50:c9:14:09:08:f4:71:4c:d1:72:f8:0c:e9:
         47:9d:df:0a:87:84:4a:43:1a:c4:56:07:b9:b2:a0:71:63:21:
         96:c0:7c:d7:6a:0b:bc:3c:74:e9:8a:f0:d3:c2:f1:6f:3b:68:
         2f:e4:c5:72:78:50:c8:0d:65:a2:a9:16:00:7d:25:a7:48:e9:
         41:8e:57:09:fb:92:3a:dd:fd:41:dd:db:9a:14:8c:b5:7c:0f:
         e6:11:57:1a:f3:38:cd:40:90:2f:a8:ee:80:4d:68:17:6a:36:
         49:bd:fe:5f:e0:3a:56:9b:9f:28:58:48:24:2e:40:b6:10:99:
         ee:a6:b9:fe:ce:28:b1:13:7c:21:7e:00:21:ec:10:98:c1:e9:
         f5:26:56:2e:0e:b6:3a:e7:2e:88:53:8c:0a:b3:02:a0:ca:b0:
         5a:74:7a:be:69:ef:be:f3:e6:5e:28:cf:cd:4a:a0:d3:c5:0f:
         a8:d0:78:8b:5d:84:41:04:11:4e:92:af:90:c5:48:c5:aa:9a:
         66:11:b9:c4:ac:88:a9:8d:6b:8a:4d:ad:9a:ad:c0:3a:97:89:
         62:40:9a:ba:9d:82:8d:5e:89:b8:e9:84:03:74:2d:17:b5:a1:
         16:a7:bd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:47 2026 by rpki-client