Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          i6bvH0K1szvimUjTpqzkVI3h8fszLKcEjgQpTHzH2lU=
Subject key identifier:   92:9A:00:A0:43:B6:F3:B7:87:66:C5:3F:CC:9E:B0:EC:AE:41:EF:22
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019D7FD990B42E725474BA54DCAD4D68D95C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          18FF
Signing time:             Sun 12 Apr 2026 04:00:57 +0000
Manifest this update:     Sun 12 Apr 2026 04:00:57 +0000
Manifest next update:     Mon 13 Apr 2026 04:00:57 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: ALj8Jw_vLPfuxhGkrNZe2ZmHHf4.roa (hash: 9HMLj+nWEm3obGLFbDMgKi1p1g38OTKr4AsjrophMb0=)
                          4: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: X9QVAb47f84jpJeEGy1FRUkxq/I+luoDAN/gqZ90h6g=)
                          5: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          6: OQT-T2xwDnT3SaaWIX_swo_jqrU.roa (hash: 6jhpIBR4CaUCC7h962ftGGzayHzglVk18hHzO4Kre0g=)
                          7: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          8: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          9: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          10: Sp4JhFUAyekIacUgRv336KvjT_o.roa (hash: De1RZZOHCJNIcik/zANnmI2X7I3Z/7PHfNu3v3ZB8fk=)
                          11: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          12: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          13: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          14: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          15: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          16: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          17: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          18: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          19: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 Apr 2026 02:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:7f:d9:90:b4:2e:72:54:74:ba:54:dc:ad:4d:68:d9:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Apr 12 04:00:57 2026 GMT
            Not After : Apr 13 04:00:57 2026 GMT
        Subject: CN=929a00a043b6f3b78766c53fcc9eb0ecae41ef22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:c9:e7:e5:dc:2c:f8:92:9b:30:7a:a5:08:
                    da:04:5a:7d:cf:fb:a6:f7:37:4c:6e:9a:d0:d7:57:
                    e0:e7:df:ed:05:cd:3d:5d:09:1c:56:47:1f:3c:74:
                    ec:5d:85:66:37:60:74:fe:df:fa:d6:ac:ee:6d:80:
                    a4:0f:cc:51:57:d5:0e:aa:85:bd:b2:77:2b:c5:a8:
                    7b:2f:4f:18:b6:bd:20:45:78:87:d7:c5:eb:e1:af:
                    6b:c7:6d:57:8f:21:bd:dd:6f:97:b0:3e:3e:a7:7d:
                    9e:84:2c:b5:6a:af:c6:cb:2c:d0:73:97:1c:47:ca:
                    87:9f:44:7c:fa:49:59:13:5b:89:23:b6:59:35:56:
                    9d:8c:4e:72:8c:07:43:67:03:3f:02:b8:32:b1:78:
                    c7:7a:c5:63:f3:80:cf:e8:d5:3b:f9:a6:c6:86:1e:
                    78:41:d3:a6:8e:bb:95:6f:54:68:0b:3b:a5:91:ec:
                    21:fa:39:c2:61:0e:43:f7:ed:97:9f:0b:6b:70:2a:
                    dc:c1:5e:e8:c7:86:18:8e:61:4a:33:30:9a:22:90:
                    35:6b:26:73:42:29:52:e1:45:3b:3c:3f:91:af:f2:
                    33:96:3d:47:3d:39:06:38:37:c8:2a:ec:88:63:11:
                    3e:ac:4e:9f:1a:09:c1:07:c6:a3:22:05:1b:e0:4e:
                    fb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9A:00:A0:43:B6:F3:B7:87:66:C5:3F:CC:9E:B0:EC:AE:41:EF:22
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:31:ad:b9:cd:75:26:e9:1e:21:70:be:ab:62:fe:13:8f:4b:
         6a:ec:bf:71:d0:c2:a3:a6:56:17:76:75:da:9f:24:6f:b4:db:
         4d:a3:0f:c5:8d:c3:b4:ae:33:1a:37:c3:db:f0:26:d8:32:f2:
         83:14:30:d2:9b:1a:73:b2:8a:86:c5:e7:d0:e7:da:a1:2b:eb:
         be:c4:20:58:ef:01:61:f5:dc:1c:d0:82:83:1e:9b:32:43:86:
         4b:c9:7d:54:37:95:08:0a:3a:90:1c:6d:d0:e2:85:2d:57:9c:
         cb:25:75:44:0c:40:1b:f8:2a:e4:45:41:8f:70:1b:11:d1:98:
         70:a0:3d:c7:73:5e:f8:36:6d:81:f9:da:f5:dc:f6:26:d4:91:
         d5:f3:0b:82:e7:1f:85:a6:dd:81:b9:b5:1b:e1:ea:f5:94:86:
         42:d0:f4:4a:b2:6a:92:a3:42:78:10:63:e7:01:9c:46:db:09:
         54:ce:d1:5b:c4:7c:ab:49:bc:99:2d:08:0e:90:bc:98:8f:54:
         cd:d5:bc:9d:d8:5f:ea:52:8c:88:3e:b2:66:69:c5:b2:9b:85:
         a8:9e:94:26:09:a4:92:36:14:54:14:ed:ce:7e:7d:11:82:3b:
         13:79:8a:50:0e:b0:ef:7e:39:6a:bc:91:46:ce:98:57:62:1d:
         2b:31:0b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 10:07:16 2026 by rpki-client