Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          JRzbwB8vEmIFtv33ZcSaloS4/GOWyOY686PpaiKVBQE=
Subject key identifier:   FB:76:91:60:35:74:42:AD:2A:FB:90:3F:64:DD:53:7A:21:58:B2:DA
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019D7065F03C9582FF50764FB0F2A31B64BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          18F7
Signing time:             Thu 09 Apr 2026 04:00:22 +0000
Manifest this update:     Thu 09 Apr 2026 04:00:22 +0000
Manifest next update:     Fri 10 Apr 2026 04:00:22 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: ALj8Jw_vLPfuxhGkrNZe2ZmHHf4.roa (hash: 9HMLj+nWEm3obGLFbDMgKi1p1g38OTKr4AsjrophMb0=)
                          4: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: Cp7hgxaXgZB4WLWhtyw5X3WZ5X4UdQod8ggpqU8W1TM=)
                          5: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          6: OQT-T2xwDnT3SaaWIX_swo_jqrU.roa (hash: 6jhpIBR4CaUCC7h962ftGGzayHzglVk18hHzO4Kre0g=)
                          7: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          8: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          9: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          10: Sp4JhFUAyekIacUgRv336KvjT_o.roa (hash: De1RZZOHCJNIcik/zANnmI2X7I3Z/7PHfNu3v3ZB8fk=)
                          11: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          12: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          13: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          14: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          15: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          16: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          17: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          18: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          19: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 Apr 2026 00:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:70:65:f0:3c:95:82:ff:50:76:4f:b0:f2:a3:1b:64:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Apr  9 04:00:22 2026 GMT
            Not After : Apr 10 04:00:22 2026 GMT
        Subject: CN=fb769160357442ad2afb903f64dd537a2158b2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9f:34:7a:e0:cc:e8:5c:98:33:18:63:43:ed:
                    f4:ab:8d:d8:9d:c3:c3:2d:01:45:94:da:bc:95:16:
                    11:c2:90:52:fc:a7:eb:6a:6b:a9:a1:0c:74:7c:a5:
                    a6:84:47:57:34:a0:a2:4e:db:fd:27:cc:f1:65:26:
                    8c:2d:ef:23:7e:8e:6f:fc:a2:02:af:3b:4f:f0:3f:
                    94:30:97:10:d8:2b:f0:b3:88:49:bb:e5:50:91:81:
                    95:fe:6d:fb:e1:2b:06:f2:e8:b4:52:4c:88:16:be:
                    7b:c2:9f:19:81:64:9c:8c:e8:18:85:6c:ac:a9:b8:
                    2e:47:d5:21:ad:18:b7:ca:2b:f6:8f:e3:60:89:9b:
                    15:aa:ab:2a:df:e1:8c:f8:0a:f1:e2:c6:08:10:4e:
                    43:39:66:96:2a:3e:0c:e4:7f:a7:88:68:b8:2b:20:
                    39:8b:a0:fc:4f:e1:a5:12:4e:08:c7:89:11:bb:30:
                    8b:de:8e:30:d5:ba:28:c5:fa:fd:f4:ad:97:7b:e1:
                    1a:ef:21:c9:ac:11:6e:f4:7f:05:36:3b:82:f2:09:
                    70:20:23:29:dd:d6:76:dc:67:18:e1:d1:17:eb:e3:
                    75:dc:c1:73:14:60:d4:e4:3b:32:c3:54:a0:ef:89:
                    63:84:23:a8:fc:e8:6a:de:b7:41:da:9f:c2:47:e0:
                    72:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:76:91:60:35:74:42:AD:2A:FB:90:3F:64:DD:53:7A:21:58:B2:DA
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a2:84:83:bd:20:81:ca:f0:02:24:9f:c4:6d:9c:f9:f1:ed:
         45:d6:cf:fd:f5:b7:e7:ce:b4:2e:16:2d:53:54:df:14:33:2e:
         4e:58:bb:d3:6e:5e:32:b9:13:1b:17:df:35:69:01:5f:0c:7b:
         f3:33:cb:39:c9:6c:dd:91:cb:ba:74:63:28:03:61:b0:cf:d5:
         15:6c:7b:bb:57:9a:fd:3b:81:4e:fb:cb:d3:1e:8a:6a:5f:c1:
         aa:21:a6:e1:74:6e:15:61:ad:f5:93:23:ac:67:74:1c:cb:29:
         ab:8c:05:f1:68:94:15:38:0f:be:4e:24:64:8a:88:9f:f9:02:
         6f:47:94:93:4a:92:2e:b9:2b:d2:2f:23:6b:98:62:ea:1e:15:
         68:d6:f2:d1:3a:2f:c5:79:b5:8c:84:8f:34:80:51:46:79:41:
         77:60:19:89:5b:64:f7:45:05:e2:4f:f4:7c:ff:72:ac:15:7b:
         56:06:e3:ad:7e:77:ab:91:ab:b2:08:52:e1:9c:c1:9e:bf:41:
         74:37:1c:ea:22:92:d3:0a:21:f3:ba:c8:0f:8a:4d:76:25:c7:
         35:91:37:9b:88:86:3a:fc:14:9f:9f:24:52:69:a1:b5:59:58:
         fe:f5:4c:41:c6:82:d7:94:38:0a:d2:96:c9:e2:42:2c:51:a6:
         1b:95:c5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 10:27:26 2026 by rpki-client