Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
File:                     7sxM83JBztFGfJGKonbTiLCoLtU.mft (raw, json)
Hash identifier:          QvPjr+EG6fsucxUsGzNrRYPqCb2RJ132UCPcNBeiATA=
Subject key identifier:   A5:D5:51:29:A2:4D:2E:91:23:5A:5F:F9:BA:D5:0B:58:E4:0C:15:4C
Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
Certificate issuer:       /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Certificate serial:       019D97AB2B00F8C3DEAB7AE0E17B0C67B0B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
Manifest number:          18C5
Signing time:             Thu 16 Apr 2026 19:01:10 +0000
Manifest this update:     Thu 16 Apr 2026 19:01:10 +0000
Manifest next update:     Fri 17 Apr 2026 19:01:10 +0000
Files and hashes:         1: 7sxM83JBztFGfJGKonbTiLCoLtU.crl (hash: LAPOIUoRmlJipNRVpNSp/v2EcgPEqIKUbikHWD/igwg=)
                          2: QxCjxkjtj8M1Cw8s1SanJKG1uKw.roa (hash: yUeAAf/exzaMVpONZcSdDF3y2oSzL/ioLlZZZr6Czjg=)
                          3: hYf0wiSt5UOQBZRTWRiBOS988RY.roa (hash: 4jDomdS9bAQ98ArIxK0xlDy/5jdmzb5p/if3uxmbpbI=)
                          4: jXTSk0KpzmwKGlT8c0WjRwEGGZY.roa (hash: NnQHdGOV+Y72Fq5VRgEhZrBnuzQZy/8YU6VukVFGbMo=)
                          5: yaUBqNTaQMWqSltcjWLwAbI6Dic.roa (hash: sOTKYTUCmoiXCQC706JaxDQN8FM9bOIQlniRkh/J3lM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:ab:2b:00:f8:c3:de:ab:7a:e0:e1:7b:0c:67:b0:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
        Validity
            Not Before: Apr 16 19:01:10 2026 GMT
            Not After : Apr 17 19:01:10 2026 GMT
        Subject: CN=a5d55129a24d2e91235a5ff9bad50b58e40c154c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:7e:03:b4:8c:0f:34:46:42:83:9a:69:97:2d:
                    31:59:7e:3d:84:4a:66:30:d7:7e:00:12:60:fa:d2:
                    44:3f:e4:4e:e3:65:ed:fe:86:c8:7a:43:c7:ed:32:
                    1e:d3:77:15:26:33:99:91:27:f9:45:38:16:59:78:
                    15:46:f4:e1:25:56:3a:5e:12:54:bd:ea:ac:77:7f:
                    12:61:4f:72:fb:67:79:89:1e:f8:ca:a6:0b:f2:73:
                    18:ed:a4:69:f6:05:c9:fb:0d:9e:59:13:bc:56:74:
                    54:85:1d:7d:16:88:a9:06:40:05:7f:13:b7:53:c8:
                    ca:c5:cf:22:2b:f2:2e:bb:8e:f7:28:f9:54:d2:2e:
                    50:e3:0e:42:37:4f:66:3b:d4:07:02:8c:1d:1a:a4:
                    66:d2:36:fd:52:c9:06:bb:bf:3a:de:f2:4b:88:88:
                    cf:f7:86:92:33:f3:eb:9f:92:94:71:1c:54:e7:0d:
                    80:49:e2:32:0d:10:1e:45:64:cb:37:4e:17:de:70:
                    2e:f7:ed:8b:8f:65:83:d7:63:2a:70:93:17:e7:7d:
                    32:a5:0c:f5:24:e9:38:0e:57:80:37:fc:5c:f5:99:
                    ae:45:3d:cc:6b:6e:5a:7f:bf:e4:ec:d1:64:e5:d1:
                    66:3e:0d:b5:c8:37:7b:34:b4:a6:77:f1:81:ef:f9:
                    9f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D5:51:29:A2:4D:2E:91:23:5A:5F:F9:BA:D5:0B:58:E4:0C:15:4C
            X509v3 Authority Key Identifier:
                keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:1f:68:07:42:c3:10:47:71:f2:1b:83:6f:f5:08:19:01:74:
         e3:d6:a7:3b:e3:8a:cf:58:9f:81:d5:fc:d5:3d:89:74:45:dc:
         9f:e8:7c:ea:21:cc:30:1c:83:76:4b:7b:a5:e4:92:ef:0c:3b:
         5e:fd:60:b1:88:6f:98:c3:11:96:b5:c1:35:af:6f:4d:74:a8:
         6a:18:0c:84:e5:9b:9c:ef:27:82:05:da:51:f1:46:a5:65:6d:
         68:55:e3:13:e4:37:b4:6e:e5:f7:b9:76:cb:3a:f8:03:e5:ab:
         72:2a:cc:c5:2e:ec:11:ac:2c:90:60:52:b3:a7:b4:29:64:d3:
         84:6a:4e:31:48:9c:82:7e:7f:7e:42:bb:12:81:c3:39:85:29:
         ba:c4:14:40:a0:e0:c9:fa:8e:31:d5:d4:ed:0b:2c:84:1c:3d:
         f4:8a:75:a5:45:70:4a:98:9b:fd:cb:f5:30:2f:a7:96:c9:fd:
         89:f2:54:f3:af:33:0f:ce:ea:14:dd:0b:ac:da:c2:c5:df:60:
         9c:89:29:fb:ec:ae:54:0b:82:fb:2d:4c:85:66:a6:4d:3b:86:
         d0:0c:6a:59:62:29:08:27:1a:6c:c0:70:22:04:99:78:17:fc:
         db:ed:04:99:a8:2a:8f:ce:32:fe:d9:91:50:cf:df:11:28:13:
         9a:c7:83:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:18 2026 by rpki-client