Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
File:                     f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft (raw, json)
Hash identifier:          B+X20BvikQ6bTQzvlsU2WJAONzYfqd/S9Y297r4C6e0=
Subject key identifier:   A1:EF:83:C4:91:0E:63:6C:43:11:BC:15:68:50:8B:6B:F0:CB:A1:AC
Authority key identifier: 7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8
Certificate issuer:       /CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
Certificate serial:       019E2FCDE4FB8A2E8DD424978A2FB536C2DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
Manifest number:          18A1
Signing time:             Sat 16 May 2026 08:01:23 +0000
Manifest this update:     Sat 16 May 2026 08:01:23 +0000
Manifest next update:     Sun 17 May 2026 08:01:23 +0000
Files and hashes:         1: Ix0TT5IrmKD226rBGnrwxJKMQZE.roa (hash: kT8aM1b7+8tvbyvrC/BU4Ml9NWdK/DRuTi32q1ndZgU=)
                          2: f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl (hash: ZZ/zvuxGRcmV+4oJnXG9qeuc6PrBCuC+dX1cas1DkrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:e4:fb:8a:2e:8d:d4:24:97:8a:2f:b5:36:c2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
        Validity
            Not Before: May 16 08:01:23 2026 GMT
            Not After : May 17 08:01:23 2026 GMT
        Subject: CN=a1ef83c4910e636c4311bc1568508b6bf0cba1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:57:02:5d:ce:9e:1b:55:7e:e9:a3:14:c8:20:
                    df:bf:4c:e4:d2:a7:1e:f3:7f:99:bc:6f:1c:d8:49:
                    63:58:a4:82:52:f2:48:f9:54:eb:f6:44:78:3d:b4:
                    fb:b8:a3:93:12:02:72:9a:bb:18:6f:c4:f5:2e:2f:
                    1b:37:bb:f4:1d:b7:31:33:9e:5c:13:e0:83:4b:38:
                    f7:1a:cd:79:2d:f6:4c:2b:a2:c8:b0:cb:dd:5f:a1:
                    5c:a9:89:2d:9b:0e:aa:93:76:32:11:db:ee:70:2d:
                    e4:96:3f:bd:27:47:22:78:aa:4b:e2:f0:c2:30:a6:
                    be:6c:83:22:ff:01:4d:bd:b1:45:86:59:a8:e6:de:
                    6c:35:f7:56:d1:41:6b:15:78:37:be:0c:5c:d9:c8:
                    da:02:d9:8b:8c:23:1f:ae:36:92:2a:24:4d:7b:a5:
                    b3:cb:ef:96:4f:51:da:63:fa:49:91:e1:b7:92:9a:
                    72:07:20:07:48:90:fb:df:95:e0:16:99:54:de:01:
                    f9:26:26:f6:87:bf:8e:63:58:6e:f8:83:62:e6:8b:
                    eb:a6:7c:4f:f4:b5:c7:42:16:39:6d:88:a5:08:c8:
                    52:64:d8:0a:ab:de:5b:9c:5b:70:62:83:0e:f3:0f:
                    7e:30:46:be:4e:8a:c8:4e:a8:0c:40:a9:9e:f9:9b:
                    eb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EF:83:C4:91:0E:63:6C:43:11:BC:15:68:50:8B:6B:F0:CB:A1:AC
            X509v3 Authority Key Identifier:
                keyid:7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:fb:6d:c1:19:8a:ab:9c:41:32:ea:5f:b3:e3:87:11:b5:e6:
         8c:71:33:13:48:72:e9:fd:2b:61:70:a5:f0:39:10:34:dc:9d:
         da:48:4a:7a:3c:da:b3:77:87:26:a8:ab:77:5d:bf:45:b1:ed:
         ca:02:8a:ae:df:45:07:6d:bb:dc:49:3d:86:f9:c2:1d:4c:26:
         73:fd:56:7d:d7:e4:e8:78:82:f9:15:ac:f2:d3:18:a5:e1:19:
         42:f5:c5:19:02:fe:87:3e:35:d4:eb:03:04:88:ed:af:49:ac:
         7e:16:37:15:53:e6:41:88:8d:3c:2f:80:08:6f:7c:be:31:e2:
         1f:2a:45:7d:d9:cc:f0:b6:cc:46:ca:e2:2f:ca:65:7f:8c:76:
         34:d7:69:e4:10:4b:8f:94:b3:21:0a:51:9f:28:d5:22:8b:b8:
         12:ce:09:74:77:71:5d:a2:7b:4c:5a:7f:23:f5:63:29:db:ec:
         71:d6:6e:84:f6:da:13:40:82:d8:7e:1c:66:95:e0:8b:0d:2a:
         4a:11:bb:fc:45:5a:a2:d4:44:e7:fa:65:9f:6a:bd:aa:84:7d:
         93:d7:cd:c8:53:e1:a5:ae:65:41:aa:6a:d4:fa:bf:6e:fc:0a:
         e1:cb:f8:00:b2:79:f3:fa:3a:3d:ef:0d:ea:8a:3b:e0:12:8e:
         df:86:23:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:38:22 2026 by rpki-client