Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
File:                     Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft (raw, json)
Hash identifier:          pz9aVIk73Z5eWIwgonkbCc0Bo2s5ereem7IC54Gm7vM=
Subject key identifier:   23:F8:90:86:31:A5:56:89:3A:B4:F8:83:75:5D:E8:2D:66:83:22:92
Authority key identifier: 3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94
Certificate issuer:       /CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
Certificate serial:       019D97E17EE72C9A007C62828E5B57CFD04F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
Manifest number:          1169
Signing time:             Thu 16 Apr 2026 20:00:30 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:30 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:30 +0000
Files and hashes:         1: Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl (hash: WtKvTgNQAPNKpNZRklvZSXbc7xJJC8CUmakVWxlsG9c=)
                          2: ovxLd3-R8YHUP-795BmS15YxMz4.roa (hash: ihtlHUZTymcC/9UwMeLjxx7SKoFJMvGJaK2E/0fEXh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:7e:e7:2c:9a:00:7c:62:82:8e:5b:57:cf:d0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
        Validity
            Not Before: Apr 16 20:00:30 2026 GMT
            Not After : Apr 17 20:00:30 2026 GMT
        Subject: CN=23f8908631a556893ab4f883755de82d66832292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5c:19:75:98:af:af:d6:df:f4:50:02:49:43:
                    9d:b0:3c:e6:a8:84:0b:a0:8e:ce:ff:4f:da:cd:27:
                    40:33:6f:31:02:a6:d6:a3:41:68:f6:3a:03:1b:3a:
                    df:d3:68:3b:1f:f7:74:06:e3:90:20:94:33:98:19:
                    0a:d9:8b:19:b8:15:f7:6f:0d:06:e0:f7:03:7f:96:
                    f9:cc:ae:7e:ca:37:46:f9:aa:ed:3f:b9:ea:db:40:
                    34:f0:45:75:c4:7d:df:be:09:4c:14:f6:84:1a:5d:
                    bf:fe:15:7b:7b:03:fb:7a:fb:4c:a2:50:12:8e:25:
                    48:4c:d2:9a:25:54:fd:20:7f:56:60:73:a1:c3:03:
                    ae:a2:d0:f0:02:10:a6:85:1c:c9:6f:19:b1:24:26:
                    81:19:3f:67:14:79:81:9d:2e:73:9e:22:f6:db:89:
                    08:82:d4:8f:e1:bb:0c:37:31:24:1c:38:d3:aa:68:
                    c0:44:2c:ea:fe:04:33:83:da:a5:a3:f1:00:4a:cb:
                    f4:3a:6d:d3:0a:0d:d3:31:13:37:ec:c2:38:11:71:
                    2a:e3:08:91:c9:40:e5:36:d8:28:7e:a8:6b:bb:80:
                    5b:0f:15:60:cc:9d:76:40:6d:c6:ee:08:53:73:98:
                    7e:00:2b:4c:37:51:cc:48:fd:67:b0:af:88:9f:6b:
                    d4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F8:90:86:31:A5:56:89:3A:B4:F8:83:75:5D:E8:2D:66:83:22:92
            X509v3 Authority Key Identifier:
                keyid:3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6f:e6:2f:5c:d0:be:53:74:b8:44:d0:c9:88:87:1f:7e:04:
         b9:f2:45:da:82:99:66:37:39:3f:df:29:92:9c:e2:68:41:6d:
         f7:e7:9f:18:2e:b1:16:50:c1:31:f9:a7:0e:cb:ea:76:1e:34:
         e3:71:1a:82:d4:01:28:cc:36:3f:54:41:0f:54:3e:8c:0c:03:
         ad:90:a1:c0:c6:ee:b7:16:e1:d6:68:f9:5d:27:fb:87:e8:6e:
         ef:a7:36:0f:24:40:73:d7:7d:33:6c:47:20:ac:21:63:57:2e:
         a3:49:6e:b7:2e:a2:20:3f:eb:e5:d1:43:f2:bc:f9:87:b6:3b:
         6e:43:20:b3:a0:96:ed:b9:9e:c2:28:36:d3:ad:ac:10:c9:96:
         20:09:b6:65:5b:c1:35:ef:be:6e:59:21:d9:59:3d:06:b8:23:
         72:fb:8f:b8:e2:d0:6e:7a:36:7d:a6:bc:f0:fe:1f:39:0e:97:
         22:74:ae:34:57:11:f0:5e:c2:c7:a7:02:4b:dc:87:dd:97:06:
         0f:5c:b6:22:3e:af:6d:1c:24:7d:ad:f2:51:6a:32:7b:79:e5:
         08:b1:ac:db:9d:36:8b:f1:fd:61:59:41:b1:7b:b9:41:21:d9:
         11:77:b3:5f:91:94:c4:a4:c4:db:99:db:64:da:09:f6:09:17:
         0d:4b:f0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:52 2026 by rpki-client