Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
File:                     mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft (raw, json)
Hash identifier:          oBGiKYHk7PSeJaNKNz2zjuMu9v0z7hcHWl8DYOGiU4w=
Subject key identifier:   EC:0A:3E:F0:A4:70:C0:56:3D:76:1B:F3:C4:EA:A7:9F:E4:E9:FE:4D
Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
Certificate issuer:       /CN=987277fc47d848fa5634ce8031a174fc249fa673
Certificate serial:       019D98F476E5389994DFBD4EAA5A35EA6517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
Manifest number:          1437
Signing time:             Fri 17 Apr 2026 01:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:51 +0000
Files and hashes:         1: HXYHaazK-agsXQtrAp4TdIiFPCw.roa (hash: 8c6r2+HmrNIxR72NP8l7eeROpR6oXO6CEMfBkvZx7+M=)
                          2: IDDMpCjqYwAGI-peC47tdVFpVME.roa (hash: Wn6wDDm3PxHp8jcuiJeMcmVpL1iWQEDeRHHD8I7chpQ=)
                          3: Ic-s3BxEKNsh-PbVJpc1Xz23AYs.roa (hash: oUF2uyrZqrkZx39wCYRgq/1hjdMckUA4FiG0GID4cJw=)
                          4: hnzz_PU7efQx6H153s8gnlp79IY.roa (hash: n+Gty9V7GKTlH1GHsjEfP3vQhmL0KYOhTaCWQIcvZc8=)
                          5: mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl (hash: Q9gfwxvuKoloQ/Q3OyfkXpUmZ3fWshiCz+UlxtJXamw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:76:e5:38:99:94:df:bd:4e:aa:5a:35:ea:65:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673
        Validity
            Not Before: Apr 17 01:00:51 2026 GMT
            Not After : Apr 18 01:00:51 2026 GMT
        Subject: CN=ec0a3ef0a470c0563d761bf3c4eaa79fe4e9fe4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:08:53:7a:b3:7b:d6:73:c8:90:ab:9d:ba:73:
                    fc:61:33:71:71:9e:65:da:6a:68:67:e4:fb:78:40:
                    aa:cb:16:16:a2:76:db:04:91:b6:8a:9d:57:dd:a1:
                    81:78:e5:4e:52:3f:42:88:8d:e5:dc:9e:e9:22:48:
                    ec:b7:9b:be:c3:57:00:42:04:85:55:e8:a5:c5:22:
                    f0:7b:84:2f:a0:a9:7f:17:10:fd:73:64:91:12:e6:
                    63:a5:14:d8:6a:c2:88:5f:3b:ba:32:ad:c0:44:c8:
                    05:ba:b0:73:a6:e8:94:73:19:d1:33:cd:b4:84:b9:
                    90:7d:39:31:12:68:42:a6:85:57:69:9a:c2:32:16:
                    83:31:90:6b:c5:2a:48:ad:bd:c3:ed:32:8b:ea:60:
                    1a:20:da:d7:e7:55:6d:ed:4d:bd:7e:a7:3d:7e:c3:
                    5d:a2:9e:60:7d:78:00:c0:63:80:43:1b:5f:82:c7:
                    c2:9a:0e:78:39:e7:e1:51:48:02:1b:27:07:2b:7f:
                    79:95:e1:4c:39:93:5a:c4:bf:26:cf:62:fd:c5:43:
                    c3:5f:a7:4d:5d:f1:f6:40:8f:c8:e4:a1:17:2c:16:
                    21:dd:39:0f:d1:85:7c:7f:6c:53:2b:a2:7a:c2:51:
                    6c:34:10:dd:b5:81:72:26:23:64:56:62:dc:0a:05:
                    33:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0A:3E:F0:A4:70:C0:56:3D:76:1B:F3:C4:EA:A7:9F:E4:E9:FE:4D
            X509v3 Authority Key Identifier:
                keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:6d:1b:7c:e1:aa:c0:22:2c:a5:77:de:0b:ff:ee:97:3b:59:
         d5:9f:7b:24:1a:03:0c:24:f1:f7:53:d8:4c:8f:e1:f7:5a:31:
         51:3b:3e:e0:85:40:ba:62:77:8f:8c:6c:a0:87:51:82:3e:12:
         a4:34:42:8a:7a:86:66:56:d4:b9:0a:7c:3e:71:a4:fe:00:6c:
         87:61:98:96:fb:f4:b6:6d:a4:a1:09:45:ed:cb:53:c6:31:7e:
         11:a8:db:d4:c2:e3:e0:da:12:09:f5:f6:99:e6:8e:f0:17:d3:
         1d:34:78:5b:46:5f:d5:d2:bc:47:c5:a7:43:27:a0:df:41:9d:
         8b:4b:f4:35:bf:da:4d:a5:84:2a:e3:63:8c:a5:9c:24:8c:39:
         9d:bf:0c:d5:11:c2:53:9b:bc:2e:63:cc:fb:2a:bf:03:87:b0:
         93:b2:ce:2a:48:42:4b:e4:8a:bc:7b:53:43:f3:f6:9b:ec:bf:
         90:58:44:0e:89:e1:e6:98:10:4b:ac:43:8f:d7:5c:8b:de:57:
         35:d1:3a:1b:d2:aa:25:28:f0:37:44:b5:d8:1c:5d:e3:c7:35:
         74:d3:24:d2:17:f8:1e:ff:36:9c:b8:7e:40:a2:44:4e:36:0e:
         1b:5c:97:fa:28:7a:0b:de:ad:71:f7:02:98:04:1f:29:62:6b:
         75:92:91:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:25:44 2026 by rpki-client