Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
File:                     e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json)
Hash identifier:          dTw9dw6+SrXazLhkyTbTNqo3ZcmVggFxCIPOrg9AiPg=
Subject key identifier:   FC:12:82:9B:5F:8D:72:4F:E6:20:CD:21:E2:96:94:DF:64:EC:F5:BB
Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
Certificate issuer:       /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Certificate serial:       019D9999103948A1AE980F23143AA7991680
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
Manifest number:          1675
Signing time:             Fri 17 Apr 2026 04:00:38 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:38 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:38 +0000
Files and hashes:         1: RCrqoUHCiCj-_mCIijuiOb69DWo.roa (hash: N+TGC8nICgkfbZEg/ul2Bb4VOH/CDC8qHnBferdNNKE=)
                          2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: hgGAP0ZQdDsx9N/rnK5Hjq/faOBWVSOkYog6DTBcNUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:10:39:48:a1:ae:98:0f:23:14:3a:a7:99:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
        Validity
            Not Before: Apr 17 04:00:38 2026 GMT
            Not After : Apr 18 04:00:38 2026 GMT
        Subject: CN=fc12829b5f8d724fe620cd21e29694df64ecf5bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a6:6e:1b:01:cf:29:74:dc:e9:6f:11:81:30:
                    1f:2d:b4:4c:2e:ef:8d:9a:c3:ba:fe:bc:a3:c1:99:
                    80:e3:56:0d:56:c0:68:d6:0b:14:c1:fe:84:90:0e:
                    c8:2e:a1:f4:1e:e2:e2:ff:a3:93:c8:05:b5:9b:f4:
                    f8:49:5d:02:32:19:75:56:d5:2d:2d:4c:04:e3:4a:
                    39:a6:eb:cc:02:bc:66:ed:76:6d:24:96:46:f1:7e:
                    da:a3:c6:47:ac:71:b1:4a:7c:28:aa:19:a9:3d:7d:
                    cf:2b:68:3b:c1:8b:f0:f2:b3:da:3e:2c:86:91:d9:
                    fb:41:21:e9:ab:2c:f4:2e:2e:4e:19:91:d9:3d:a3:
                    77:8a:11:19:f1:c6:99:7a:e3:16:3a:56:e2:95:72:
                    fc:d8:2b:2b:cb:1d:ba:63:e5:6e:01:c8:7b:69:bc:
                    66:72:dc:ee:b6:b0:ed:8b:6d:d3:43:81:d2:0c:91:
                    10:99:cc:b5:0c:85:dd:e7:cc:ed:90:6d:6a:5d:71:
                    b1:63:b1:2e:6e:39:ba:d5:82:3a:b4:14:ce:e2:89:
                    18:3e:31:68:77:6c:ec:11:07:d3:1a:bd:2a:ae:7a:
                    db:40:1e:93:6b:01:54:ad:ff:5e:31:e6:a0:20:00:
                    54:03:83:8f:7e:a4:a9:6b:fe:76:ad:d9:f9:69:b0:
                    1d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:12:82:9B:5F:8D:72:4F:E6:20:CD:21:E2:96:94:DF:64:EC:F5:BB
            X509v3 Authority Key Identifier:
                keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1c:14:b9:76:f9:f9:42:a0:0a:a7:86:8e:ff:3d:0f:03:84:
         eb:ec:be:a1:99:7c:78:7f:23:f5:f3:f9:6f:a4:03:2f:30:73:
         45:31:98:2c:de:1b:3f:ca:e6:10:a4:cc:c9:d9:21:dc:c1:95:
         e0:8f:0a:ab:a8:9f:2e:1d:cf:96:46:de:10:92:ac:52:2d:54:
         08:35:3c:85:18:3c:e8:a4:a5:d3:21:3a:23:3d:b5:57:b7:99:
         89:8d:4e:a1:e5:87:d2:71:3c:7c:47:df:f0:a3:d9:8f:a5:87:
         34:46:32:61:da:82:0e:83:ca:b2:76:7e:d7:a0:d9:c0:9f:c8:
         b2:ca:cf:8c:98:26:4c:81:e6:b1:20:7b:d7:38:4a:c1:1e:ef:
         af:f0:20:f1:cd:09:91:52:20:1a:f3:a3:38:cd:19:70:a9:47:
         c7:1c:53:5c:83:a8:d2:00:c1:89:88:66:e3:af:2a:bf:c7:8d:
         1a:02:94:9f:0d:c8:c2:e7:13:8e:aa:73:a3:81:f5:2e:a2:35:
         fb:87:22:91:31:fb:c7:02:c9:b1:75:bc:c8:4a:14:4f:50:a6:
         fb:c3:9d:11:46:ce:70:31:e0:8a:fd:cc:95:86:ce:ab:1c:3c:
         a6:b3:4f:2f:17:ed:e5:9f:05:f8:b1:b2:70:2e:6b:2c:c7:ef:
         93:76:98:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:15 2026 by rpki-client