Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File:                     eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier:          QF7Ds06vEaXKpScBb11J2qCczhgBxapKSeV0v2PDzQE=
Subject key identifier:   B2:86:6E:88:95:06:04:73:6D:37:9E:84:FC:AA:5A:2C:74:E7:06:0F
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer:       /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial:       019D661A6F737F3C04FA0CAE907BDF8E3171
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number:          074E
Signing time:             Tue 07 Apr 2026 04:01:41 +0000
Manifest this update:     Tue 07 Apr 2026 04:01:41 +0000
Manifest next update:     Wed 08 Apr 2026 04:01:41 +0000
Files and hashes:         1: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: YIIAscInZOcq04pqPy/D+EzxNTEQj4jeiRNChaIvL+I=)
                          2: qXkw0QfrHcnGQSy5HSSgU96t89k.roa (hash: 0wRXU7/knPguYz2PH2GBKtyb9XdxaFy8E6VNNqtVEPw=)
                          3: tF9YKOONiKk1CscCM98zlB8EJLs.roa (hash: 6wUmwqGkAOvn8GZ/bao7dMUtyUHLPWG5h6PlJNzejcg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Apr 2026 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:66:1a:6f:73:7f:3c:04:fa:0c:ae:90:7b:df:8e:31:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
        Validity
            Not Before: Apr  7 04:01:41 2026 GMT
            Not After : Apr  8 04:01:41 2026 GMT
        Subject: CN=b2866e88950604736d379e84fcaa5a2c74e7060f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:7d:6a:da:9a:ab:bc:7e:f1:83:8b:10:9d:
                    b6:c7:2a:36:aa:57:79:61:ba:fd:7f:e7:63:a2:29:
                    3c:e6:aa:c5:b4:06:db:dc:86:cb:be:fa:20:84:f9:
                    4e:d6:2d:20:5b:f7:c8:f7:5f:3b:e8:cd:19:1e:d8:
                    5a:fc:a1:8b:56:1b:9b:8c:1c:85:b7:af:e3:5f:93:
                    00:d5:20:02:aa:6b:d4:47:77:91:50:f5:b0:73:24:
                    36:37:03:19:e0:2f:e3:85:6c:0c:d4:4f:8f:43:85:
                    8d:4f:a9:79:56:ca:22:0f:83:71:a5:fe:96:e4:91:
                    b4:18:8b:0a:7e:bb:ee:ce:4d:20:11:93:da:26:f4:
                    3a:33:86:9a:31:94:85:b7:4f:e1:04:a1:ab:4e:07:
                    0e:28:02:dc:10:fc:eb:93:f9:ed:70:cf:a2:09:23:
                    43:f1:df:38:12:44:02:38:34:d3:9b:a5:41:19:3b:
                    29:6d:07:f5:7f:76:f0:d1:57:07:0c:f1:a2:2c:c3:
                    7e:58:e5:50:bc:3b:ef:50:b9:11:92:f9:19:c9:f8:
                    ab:54:8f:94:1e:26:08:e5:a5:65:b5:8b:ce:c3:1c:
                    26:c0:0f:9e:62:95:dc:d3:40:60:c5:0e:cd:de:0d:
                    89:f7:39:08:12:5d:d4:fc:ab:e1:89:ca:0a:16:58:
                    d8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:86:6E:88:95:06:04:73:6D:37:9E:84:FC:AA:5A:2C:74:E7:06:0F
            X509v3 Authority Key Identifier:
                keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:1a:41:e2:02:ea:26:49:33:67:61:33:72:5c:81:eb:04:96:
         c0:f7:f1:a3:63:a4:c4:1b:31:e1:59:7e:b5:c5:42:eb:15:bb:
         7c:ae:c3:ea:76:ae:f5:f8:9a:62:d9:cd:23:46:d3:d3:65:c7:
         31:90:4e:1a:e2:42:84:1f:4c:84:04:4e:61:f0:77:ba:a2:05:
         29:08:af:bc:07:91:1e:2c:00:97:35:fa:3e:8f:85:89:a0:90:
         63:bc:d5:03:68:e1:0d:6f:0a:1c:d9:1f:d1:08:2d:df:c2:26:
         68:c3:ee:90:f0:9b:f6:73:c6:36:cd:a6:8a:e8:3f:ca:e0:1e:
         38:fd:2a:e3:41:38:99:d7:94:69:77:fd:1d:7c:af:52:55:41:
         3b:47:57:0a:c1:ce:3e:95:01:2e:a6:ab:fb:2a:19:fe:b3:5c:
         96:38:80:8e:32:44:d4:cc:87:45:8c:4b:78:3c:de:34:e3:01:
         78:a7:31:9a:7f:12:55:2f:fe:2b:7c:11:71:63:79:30:7f:6f:
         04:99:c1:03:b5:51:e8:14:5c:e4:90:99:a6:f4:a3:51:d4:13:
         d2:ac:df:1b:ca:7a:e0:f5:2d:2a:6a:25:fb:b4:3c:99:e8:5c:
         1a:e4:23:16:a6:46:20:be:19:c4:42:dc:0a:f0:a6:5c:ca:99:
         c6:7a:ec:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:07:45 2026 by rpki-client