Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.mft
File:                     v27iTmpzNB7J5d_AQr71vFnah8c.mft (raw, json)
Hash identifier:          wD5ATilDjq2KWX9KFBReKvRTSY7a0Mg+WNiPJhhf3N8=
Subject key identifier:   59:4D:F8:8B:A4:0C:E6:5D:A1:5A:28:95:74:06:79:27:00:23:3A:A7
Authority key identifier: BF:6E:E2:4E:6A:73:34:1E:C9:E5:DF:C0:42:BE:F5:BC:59:DA:87:C7
Certificate issuer:       /CN=bf6ee24e6a73341ec9e5dfc042bef5bc59da87c7
Certificate serial:       019DA3783B519857084A98B987332EEE564A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v27iTmpzNB7J5d_AQr71vFnah8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.mft
Manifest number:          45
Signing time:             Sun 19 Apr 2026 02:00:58 +0000
Manifest this update:     Sun 19 Apr 2026 02:00:58 +0000
Manifest next update:     Mon 20 Apr 2026 02:00:58 +0000
Files and hashes:         1: aRyykpGyV8l037pwYFABQHmZBQo.roa (hash: Nh6oT8lybS2Q4BHuKgllOdaD6W0W7agU3wHBADfldjo=)
                          2: v27iTmpzNB7J5d_AQr71vFnah8c.crl (hash: bGXTB9oCnb0Rxr6bYBAeQaeWWvtiNQ5yyoGmPpDjW34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v27iTmpzNB7J5d_AQr71vFnah8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:3b:51:98:57:08:4a:98:b9:87:33:2e:ee:56:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf6ee24e6a73341ec9e5dfc042bef5bc59da87c7
        Validity
            Not Before: Apr 19 02:00:58 2026 GMT
            Not After : Apr 20 02:00:58 2026 GMT
        Subject: CN=594df88ba40ce65da15a28957406792700233aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:62:5a:24:c6:d7:71:18:63:40:bd:06:6f:
                    f9:d9:ee:8a:15:b7:8b:7d:be:9e:b9:9a:6e:eb:5b:
                    a8:f7:23:b5:8c:82:4a:be:73:50:12:89:35:99:a6:
                    81:97:ef:b2:ba:21:24:31:f3:90:64:7a:41:ba:a0:
                    76:dd:de:a1:35:e3:8c:76:cb:80:fd:f4:7a:2b:35:
                    6a:d7:97:87:92:71:46:08:1e:d0:01:cf:8c:94:a8:
                    f5:14:60:40:89:a0:eb:0d:fc:05:d0:b1:7e:a2:52:
                    62:d7:bb:b8:28:18:b1:83:77:b1:0a:eb:9f:e7:a4:
                    bd:7d:10:48:e8:99:6f:7f:6c:bf:98:96:4f:15:d2:
                    2a:63:f5:88:70:b8:0a:f9:48:cc:ff:97:81:d6:1a:
                    9d:de:6c:c6:f0:f4:3f:36:49:9e:73:f3:80:c1:f3:
                    80:34:3d:e5:1c:d7:58:05:c7:e5:55:c3:bf:1a:c6:
                    5d:ac:3c:b9:9d:90:a9:af:2f:f7:52:8d:92:d5:04:
                    23:12:5b:53:2c:5b:c2:27:e5:fc:e7:a6:5c:0e:0a:
                    d8:d5:1c:5f:59:47:3e:ee:c6:46:e7:ba:0f:9f:1f:
                    59:3a:ef:a9:12:2a:f6:da:9f:ae:89:17:42:ae:7c:
                    42:bc:9c:05:70:07:29:ae:7d:5d:bb:7d:f4:2f:5b:
                    8d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4D:F8:8B:A4:0C:E6:5D:A1:5A:28:95:74:06:79:27:00:23:3A:A7
            X509v3 Authority Key Identifier:
                keyid:BF:6E:E2:4E:6A:73:34:1E:C9:E5:DF:C0:42:BE:F5:BC:59:DA:87:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v27iTmpzNB7J5d_AQr71vFnah8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bbc723-058d-4a27-a070-d1948512fc7d/1/v27iTmpzNB7J5d_AQr71vFnah8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b0:5f:19:09:b2:3a:96:10:86:5f:d5:dc:a6:f0:b5:c9:95:
         ea:ab:ec:12:10:46:fc:d0:7f:5e:c3:f9:9e:e8:3e:fe:5d:54:
         4d:53:8b:2c:bc:84:de:dd:b5:a0:8f:12:9a:55:cc:d6:8e:dc:
         65:4d:a1:af:17:1e:8b:d1:fc:a2:8f:ef:3c:67:2d:3f:5f:99:
         16:e1:f7:b4:fb:68:ab:f9:1d:38:62:d8:52:99:99:43:ea:ce:
         b2:24:cf:91:7f:ff:25:e3:74:4b:e5:70:e9:66:97:c7:fa:c2:
         63:02:03:a8:18:b3:12:b1:3e:97:cb:8e:87:45:1d:91:19:d0:
         81:db:be:8e:e0:fe:64:0a:82:71:2e:7a:91:b9:4f:bc:ef:41:
         ef:2f:dc:fe:0d:1d:9c:18:f7:4e:8e:15:49:94:6e:08:a9:c7:
         6e:a4:c1:93:c4:f1:dd:40:e3:b2:e0:25:18:cc:35:c4:3c:82:
         06:bc:ea:90:1a:02:28:64:b9:93:3f:96:8a:69:52:d2:74:ec:
         13:a9:ab:1b:8f:13:c2:49:19:3b:72:ae:89:40:f9:bf:b2:49:
         78:c3:a6:29:7e:25:91:53:b6:5b:91:5a:8a:92:3e:e0:97:40:
         76:4a:12:09:4f:be:27:b1:da:b2:8a:89:98:de:ec:dc:a4:ea:
         73:d6:bd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:24:56 2026 by rpki-client