Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
File:                     59nPsHjtpYFvyAnpjCXLcZY-dbc.mft (raw, json)
Hash identifier:          t7ywIg1q4QPnRL7FPum2cZ4gOeWMruXsA5FEqkDj1t8=
Subject key identifier:   9B:1C:D5:CD:DB:60:9D:54:51:EB:74:7A:28:EA:61:C1:54:CD:FE:F8
Authority key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
Certificate issuer:       /CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
Certificate serial:       019D99999790E34A9A60AD5F0A358345F884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
Manifest number:          13E0
Signing time:             Fri 17 Apr 2026 04:01:12 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:12 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:12 +0000
Files and hashes:         1: 59nPsHjtpYFvyAnpjCXLcZY-dbc.crl (hash: vh4s5Qvug/MUICIjMO8RxrkaSaBTxeJjVmuglD4FtqY=)
                          2: NuJEHjDX6DrNz16mjk8EVqK6rfk.roa (hash: Ys6DWelm4t8OA8iEU1qUmznaHoT0ZkwCkm2E4AX00hk=)
                          3: SZX71ph8QaHTDKUZ_awWsJ3Rop8.roa (hash: Ezxrik8lWqt6m7GXayjzec/qOLlnThrVGFvxsgwlbj0=)
                          4: fcB7v88dNhWSMeT9xkM_6tDlgB4.roa (hash: YUROPGa3vWTnRdc4QLIk9Iod/RP5OfyerhymP88IP4Q=)
                          5: gwoEbA-s4PqsDQjmI3X53FaRSJ0.roa (hash: avXcM/pU53LLvoxo3B9yOyXnFdyqGLBv2h2RqdKqi6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:97:90:e3:4a:9a:60:ad:5f:0a:35:83:45:f8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
        Validity
            Not Before: Apr 17 04:01:12 2026 GMT
            Not After : Apr 18 04:01:12 2026 GMT
        Subject: CN=9b1cd5cddb609d5451eb747a28ea61c154cdfef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:53:a9:39:f6:a9:c0:c9:b2:e7:4b:37:59:10:
                    64:c7:b0:1d:44:a1:c0:6a:ab:95:0f:34:3c:4c:b5:
                    29:2e:da:1c:04:00:c0:6f:83:20:5b:df:7c:4a:b5:
                    d2:05:be:a1:1c:e6:6b:71:14:a0:97:f2:78:b2:96:
                    7f:61:73:e1:50:29:bc:c6:ab:66:41:fe:f4:14:d9:
                    0f:50:d1:af:fe:e9:9b:19:5f:fa:78:b4:ba:8a:37:
                    89:7d:5f:d3:11:4f:49:0e:52:9a:34:63:88:00:ee:
                    b4:bb:3d:95:3c:a4:5a:2f:6c:57:a1:04:c5:15:3a:
                    b2:10:d0:87:cc:f3:1a:6a:cf:d0:52:a8:bd:68:1c:
                    f4:4a:92:ac:52:e2:45:6b:86:2e:5d:cf:cb:50:96:
                    63:c0:4b:00:9e:5e:0f:97:15:04:46:c1:d4:f4:24:
                    a2:09:61:0f:d1:61:f8:ee:84:b4:bb:be:e9:6a:c8:
                    c4:af:0d:09:c3:2e:e6:2a:25:2a:72:c5:45:9d:e7:
                    0e:c0:e8:28:ed:49:d9:ef:29:0c:36:9b:8f:c2:3f:
                    dd:40:ca:a2:ff:b0:0e:af:85:0f:32:0b:8b:a5:e7:
                    c3:97:82:f8:09:eb:6d:f1:e3:55:11:9c:ee:f4:cf:
                    67:64:35:75:31:74:d4:66:f5:15:60:95:8e:c8:4c:
                    4e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1C:D5:CD:DB:60:9D:54:51:EB:74:7A:28:EA:61:C1:54:CD:FE:F8
            X509v3 Authority Key Identifier:
                keyid:E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:33:b9:13:4b:b8:8a:87:59:23:7c:a6:4a:42:17:50:57:fa:
         07:55:e3:6b:7d:2e:36:ee:b0:4d:7d:26:bc:a8:5d:a9:85:73:
         08:db:21:56:5d:d8:cf:c6:26:22:19:73:57:f6:3c:49:bb:d3:
         75:9f:d3:77:6c:dd:16:10:fb:96:da:5f:7d:ee:4d:e7:33:5d:
         fc:ad:4e:a2:28:67:87:cb:eb:0d:a2:cd:a2:f7:eb:3a:37:58:
         d3:1f:75:66:08:04:97:61:fa:03:a5:b1:56:7a:52:c9:03:58:
         b6:0d:64:4b:cb:90:ba:88:94:2d:6a:fc:9c:4d:f0:05:9f:ae:
         62:8e:52:aa:4c:d0:0f:e5:e2:b1:e9:0e:19:57:87:fa:c6:08:
         16:82:74:c7:a0:21:e9:b3:f4:d7:f1:76:ce:81:70:d4:17:d5:
         df:c0:14:e6:aa:b7:7c:f6:95:45:e0:ab:1b:10:63:94:3a:30:
         d2:d1:f5:8f:59:0a:19:6a:37:34:30:33:e4:61:16:69:75:ff:
         6c:1a:6c:21:0a:ce:ff:dd:31:19:0f:be:e5:8a:85:9b:6c:53:
         d7:02:1d:5e:1a:7f:75:d5:8c:fb:37:c2:d1:0b:22:df:37:50:
         85:f5:44:27:2a:5c:68:91:71:d1:62:9f:7c:6a:c0:47:ff:76:
         0e:77:b1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:21 2026 by rpki-client