Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
File:                     eJkRG_1wuRdE36Skn_kDs5HFwzI.mft (raw, json)
Hash identifier:          8LWVuhwsYnKPWB6HQ2/3yIiw7dpHgBCBG0i4dFW8qAs=
Subject key identifier:   C3:5C:B8:F3:74:2C:76:EC:78:18:A5:D8:C9:09:99:7C:81:2C:64:C2
Authority key identifier: 78:99:11:1B:FD:70:B9:17:44:DF:A4:A4:9F:F9:03:B3:91:C5:C3:32
Certificate issuer:       /CN=7899111bfd70b91744dfa4a49ff903b391c5c332
Certificate serial:       019D9C2D463AF90058DC0226A45279567B07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
Manifest number:          50
Signing time:             Fri 17 Apr 2026 16:01:45 +0000
Manifest this update:     Fri 17 Apr 2026 16:01:45 +0000
Manifest next update:     Sat 18 Apr 2026 16:01:45 +0000
Files and hashes:         1: SKxfM8vS1jvBfGto0Ag-UhpANXY.roa (hash: WZ4CjS7lVOS4kiwT/i3rrLplH1i4HTFPFyS0A+9Y2ZQ=)
                          2: eJkRG_1wuRdE36Skn_kDs5HFwzI.crl (hash: sCMWEgHkZ0uzgcFDwFiDPmTHJkjkExOokNybfXzjmQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2d:46:3a:f9:00:58:dc:02:26:a4:52:79:56:7b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7899111bfd70b91744dfa4a49ff903b391c5c332
        Validity
            Not Before: Apr 17 16:01:45 2026 GMT
            Not After : Apr 18 16:01:45 2026 GMT
        Subject: CN=c35cb8f3742c76ec7818a5d8c909997c812c64c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:99:da:13:76:d5:d2:23:6d:f5:0d:8e:4c:
                    3f:b2:11:41:89:20:27:32:8c:16:4d:6d:95:5c:42:
                    15:69:f6:8b:81:da:d5:9a:fb:88:9c:fb:97:94:6c:
                    3b:12:f7:75:8a:8c:f3:da:77:56:d3:7e:8d:46:95:
                    32:44:ac:a1:cb:b5:46:64:fd:0f:e7:4c:84:c5:96:
                    f7:2d:29:60:df:e0:22:1e:c2:42:30:5b:04:33:f7:
                    eb:a2:13:23:28:3b:a6:b6:a0:0e:4b:8e:1b:5d:fc:
                    38:01:b7:96:c7:f4:84:ac:11:13:32:3f:3e:00:ea:
                    94:0a:5d:50:98:d4:b4:90:e1:1e:a0:b2:5e:50:a1:
                    7f:27:06:d2:6a:35:97:55:38:34:b9:1b:4c:28:b5:
                    79:1a:bf:a4:c7:0e:7f:89:51:a6:f4:fc:de:05:4c:
                    d4:13:c0:28:97:ed:1e:0e:d8:67:f3:02:cf:a5:7c:
                    1b:54:d2:1a:d3:29:20:93:05:04:15:91:09:01:f9:
                    04:8a:96:38:2c:01:3e:59:24:0e:db:12:54:b1:88:
                    12:8a:f9:22:9a:d5:a4:3e:41:e2:21:0d:9b:6e:d1:
                    28:2a:23:d7:13:c9:84:43:08:4f:27:f8:fa:28:f1:
                    4b:08:60:02:9d:2d:81:bd:e7:a3:ff:8c:c6:fa:e8:
                    db:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5C:B8:F3:74:2C:76:EC:78:18:A5:D8:C9:09:99:7C:81:2C:64:C2
            X509v3 Authority Key Identifier:
                keyid:78:99:11:1B:FD:70:B9:17:44:DF:A4:A4:9F:F9:03:B3:91:C5:C3:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:57:47:2c:db:4c:07:4d:69:b4:0b:35:7d:16:5e:73:e9:50:
         14:d7:85:1a:4b:a2:92:20:a8:4e:c6:f6:5c:23:7a:d5:49:57:
         47:78:81:20:6f:22:10:f6:21:cd:22:2b:d6:f9:7b:73:96:4e:
         99:fd:a7:a0:0e:b5:10:ec:4a:91:bc:01:24:a2:d2:ef:85:28:
         53:2f:af:6e:46:b5:66:59:61:99:84:08:61:50:d5:b3:c1:2e:
         cb:5f:da:ed:f9:93:7f:11:52:5c:35:77:dd:84:5e:39:62:f2:
         bc:b9:a5:3b:e7:43:a6:45:d7:75:db:24:d5:30:5f:67:f9:a6:
         2d:ec:47:55:7f:53:82:3b:c7:ad:28:5a:e3:8a:8c:2f:a7:c2:
         db:51:8c:de:c3:82:d9:7f:f3:09:26:92:b3:e3:cf:3e:de:1c:
         90:62:1b:6e:6f:86:de:32:c1:ea:8f:b6:42:19:e7:e8:51:18:
         4b:68:e3:7e:f0:83:2b:76:af:5f:44:cd:a7:49:78:82:9b:d1:
         43:65:4d:37:dc:56:d8:6d:4b:59:55:20:6d:2b:d0:4b:b1:7f:
         d9:99:93:77:df:05:62:71:1a:dc:d3:fb:86:a4:da:06:33:52:
         f9:46:20:c9:d2:31:2f:8d:17:2a:b4:fe:87:f7:b1:6a:ac:7d:
         87:83:92:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:37 2026 by rpki-client