Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
File:                     p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json)
Hash identifier:          E5uMqakQgoh+9Qb/rcKHGNDeGH/dkt4cbhCzWBjh9fg=
Subject key identifier:   9E:50:DB:33:7B:F0:C4:0D:46:F3:84:9B:40:52:4E:37:26:F9:19:4E
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Certificate issuer:       /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial:       019D9A3E3BA4AB423240732BCDFC38875555
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
Manifest number:          15D3
Signing time:             Fri 17 Apr 2026 07:01:02 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:02 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:02 +0000
Files and hashes:         1: 2U0mDkF6k188FlI68TZ1uJWmy1k.roa (hash: 7JEOUa3UIN+/J9E0Zd5VhYU2fI+uSkBnOTYRU58DUPc=)
                          2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: OPIWH88+z1J8X4FxF6GyiPBEk3i5uBjqFsvq+4m3G/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:3b:a4:ab:42:32:40:73:2b:cd:fc:38:87:55:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
        Validity
            Not Before: Apr 17 07:01:02 2026 GMT
            Not After : Apr 18 07:01:02 2026 GMT
        Subject: CN=9e50db337bf0c40d46f3849b40524e3726f9194e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fb:38:cd:8a:8e:59:c1:4a:11:73:0b:ee:54:
                    68:a9:f6:62:7a:02:0c:6b:ce:6a:3a:87:87:0b:3e:
                    a8:cd:8e:1c:2d:c9:5b:36:d7:65:ef:f1:2a:b2:98:
                    fd:75:f3:a3:06:f1:15:b9:e8:34:40:a0:cb:6f:38:
                    a3:48:b4:1f:cb:24:17:37:d8:68:2c:b2:ac:c9:2f:
                    31:66:31:43:4a:9a:ca:d7:57:18:22:ad:6d:01:af:
                    7b:8b:f8:08:e5:44:ea:dd:3a:9c:b4:53:84:7d:14:
                    7a:3b:bf:67:86:95:e3:7a:cd:ce:e1:4a:9a:58:f2:
                    06:ba:f7:5a:98:b9:4a:0e:72:5f:72:ae:71:3b:ef:
                    79:80:09:10:8a:a5:52:4b:5b:4e:d8:41:de:d4:44:
                    07:e4:57:e8:20:37:87:d8:4d:42:78:63:4f:85:d7:
                    71:92:a9:9a:13:c2:1a:fa:2e:a1:b6:7d:fd:9a:5d:
                    47:f4:e8:a5:ca:05:87:2e:aa:76:b4:c4:12:6e:b0:
                    4a:82:b5:06:ed:20:83:98:69:0f:5d:bc:5f:d8:fc:
                    b5:0d:77:b2:04:aa:d6:7c:5b:12:60:88:94:a6:7d:
                    bb:95:27:3f:a0:64:fc:7e:ea:e4:fd:0c:3e:c6:e9:
                    9d:94:a7:de:47:8c:30:fd:8f:e0:44:41:4f:18:a6:
                    8b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:50:DB:33:7B:F0:C4:0D:46:F3:84:9B:40:52:4E:37:26:F9:19:4E
            X509v3 Authority Key Identifier:
                keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:05:fe:b3:8c:80:49:66:64:15:ea:a1:4d:1d:41:f8:ef:29:
         cb:be:5d:8d:e6:35:88:1f:57:fe:ce:66:89:46:fe:be:92:b8:
         7c:b9:09:26:b0:12:bb:75:f9:d8:4a:a4:7f:21:3b:01:ee:54:
         88:1e:44:50:54:52:e8:73:83:20:d0:1b:05:3a:69:3e:a7:b0:
         f2:02:fe:74:c5:27:40:b6:62:51:ee:90:a3:13:56:c1:47:74:
         04:c1:1b:d0:0d:2c:5f:62:32:a3:53:25:23:68:29:dd:99:93:
         75:90:b2:d8:05:11:13:66:ca:12:e6:3a:a4:44:e4:da:26:13:
         cd:70:13:d8:9a:b1:13:0c:7c:83:1f:13:77:06:b1:53:7b:d6:
         af:3e:f6:df:b5:da:dd:3d:8f:fe:f1:ea:6c:20:e3:b3:46:38:
         cc:49:a6:bd:d7:71:68:94:fc:1c:73:26:8f:36:bb:f0:f6:d5:
         97:c1:59:40:3a:ad:74:33:a0:b7:34:1b:0c:dc:1c:9a:c9:07:
         b9:fe:b1:be:ba:d6:8c:09:b2:d8:41:70:ce:d9:c3:43:43:a9:
         dc:26:ef:44:c0:48:8b:28:1f:6b:c4:39:23:c3:a6:63:ae:2a:
         87:e2:4d:99:69:d9:92:9f:50:6b:73:7b:97:38:d6:aa:49:9d:
         f6:81:b7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:21:18 2026 by rpki-client