Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.mft
File:                     7w79XeePk7yurRXhTABu270bWVU.mft (raw, json)
Hash identifier:          E2qCRQdalQeheIief/I012klAC4YKpHhH3DyQ9vbsjk=
Subject key identifier:   29:84:70:7E:F7:FE:01:46:51:79:5D:FC:EA:8F:B7:AB:51:10:E1:35
Authority key identifier: EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
Certificate issuer:       /CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Certificate serial:       019DCB990007D65B3381F128EC728153D9A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.mft
Manifest number:          0EA2
Signing time:             Sun 26 Apr 2026 21:01:35 +0000
Manifest this update:     Sun 26 Apr 2026 21:01:35 +0000
Manifest next update:     Mon 27 Apr 2026 21:01:35 +0000
Files and hashes:         1: 4UtpBbuncICgv9efuHvxROM6-RY.roa (hash: YRGR60bkJx2AW9aNIbqOxesw3CP4UiCdMcSI2Vcci1o=)
                          2: 7w79XeePk7yurRXhTABu270bWVU.crl (hash: /Jf6buYpYhvVK4wC3yL/nzlb92bng6SgWX+8q7g59d0=)
                          3: FiWAWUaA9PAq7EYCucRhI4X4OjA.roa (hash: LrZbMygKaTHugy/xr017bsHS1FYdSALcrqp7tkKb3CA=)
                          4: I9D94vAMORn9BnYQdtM7qbiXt58.roa (hash: tRnx+C50ZgRJmovpffXEPU717rWWK6T8adcAGLprF4I=)
                          5: XpfJYLgMV5bnMcp4kd3YDs5m9SU.roa (hash: 9r0UifMuNC3XdFhlQB/mM/buwTOdToirlzSEloh4Ke4=)
                          6: _8ru7yjHkHZFd4T9rzkqG6vyZHE.roa (hash: gyLIqrjpNcTOkIhbabjexHZ1iC6HjtvhbyC/VMu1ZaM=)
                          7: _vrnY4z9n3eCeCrITmxUO-Pj33Y.roa (hash: XGTJ40NaVW8qqI0RUTAw8+XnQAVER3fUng+XIPClp7g=)
                          8: b9Q4ikh7P1-VewBOlxjh6fowvZA.roa (hash: JZ6Vz7a38Av/sfq39iREbtu+EKiAMHTBIZnSyAMSJE4=)
                          9: ibrjFLT4gT8cQigEm0PqDSKjwjc.roa (hash: YCO1VcOyG1lW5Ct+ItZ8CVjLxVqoUm88/zL2+EIwN4U=)
                          10: p-JxEDOKcaUoOpRmGmrl0kQQiWE.roa (hash: 1axE32b50kyPXpAsj6U5h6FUdP+HsrAsrldiViVW8K0=)
                          11: wBSh6gDeV7XNH2X7PQXLFHCUg3I.roa (hash: 99JIPx6lgWoxYu0uMeoGJkCqNZKh/023eQvcqtBW/MI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 21:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cb:99:00:07:d6:5b:33:81:f1:28:ec:72:81:53:d9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
        Validity
            Not Before: Apr 26 21:01:35 2026 GMT
            Not After : Apr 27 21:01:35 2026 GMT
        Subject: CN=2984707ef7fe014651795dfcea8fb7ab5110e135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:49:2c:91:be:2a:f5:3c:85:a2:c6:59:56:ec:
                    bb:cd:ff:82:ca:b8:05:9f:4a:90:f8:70:e7:8d:8d:
                    e9:2e:a6:a0:3c:39:26:b8:f0:a8:7b:91:7d:e4:96:
                    75:fa:3d:08:9b:3f:18:85:e9:a8:16:ef:75:ce:99:
                    1b:0e:32:5d:21:b8:62:7b:9f:db:bd:4f:22:53:ad:
                    8a:bc:bf:e2:d6:c7:f9:76:ae:93:64:d2:eb:e3:f8:
                    05:f5:8f:94:01:2e:22:63:5b:d3:dc:d5:bb:2f:79:
                    15:20:2f:e1:02:14:d0:33:2d:3f:cc:fc:23:74:53:
                    fe:60:f6:ea:f8:8c:05:53:39:69:22:53:29:4b:64:
                    67:0d:3d:1d:54:d0:05:59:6e:b0:33:51:6d:10:8c:
                    3d:f9:47:da:b1:11:8d:cb:fb:6a:1d:9e:8c:7b:3b:
                    87:8d:3d:32:fc:39:24:c0:d1:42:e3:96:e2:46:1f:
                    ae:65:8e:b1:25:3b:3b:4d:83:5e:21:4d:d8:96:89:
                    53:0e:d5:e9:81:a2:6c:3a:ca:53:89:68:53:e1:fd:
                    b9:e5:9b:72:7f:52:75:a5:cc:82:db:8c:81:08:3f:
                    36:87:ca:43:be:e4:03:4f:f1:9e:4b:12:bd:32:3c:
                    7e:00:0d:c0:fa:f1:c9:0f:95:bf:86:f7:62:3e:02:
                    85:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:84:70:7E:F7:FE:01:46:51:79:5D:FC:EA:8F:B7:AB:51:10:E1:35
            X509v3 Authority Key Identifier:
                keyid:EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:78:52:c7:0d:a6:13:31:f2:4a:64:f0:94:7b:27:e4:b6:c5:
         ff:e0:af:51:34:74:1b:79:a9:58:9f:0b:75:5d:e6:35:02:3e:
         a2:1b:d4:bd:9e:f3:3f:46:19:3c:bf:41:d1:79:c6:28:4f:88:
         33:fa:67:53:35:a5:18:e1:8a:c7:1b:98:67:26:ba:c1:26:9f:
         7b:e2:94:d3:b5:22:2b:45:80:9d:9b:51:5c:81:f8:3e:a5:dc:
         dd:32:b4:fb:33:ce:ac:05:4c:06:01:16:c6:12:f7:79:0f:c1:
         14:0c:95:63:f0:f8:c2:83:f0:13:db:70:28:eb:c3:cd:bb:6c:
         3b:cf:6a:05:40:cc:80:af:62:20:e0:61:42:c9:eb:dd:88:5b:
         cc:fc:ef:3c:47:62:6e:6d:7d:4e:17:95:35:41:92:8d:04:9b:
         e9:bc:73:66:6f:ba:ff:16:ef:8c:96:04:24:1d:b7:b1:4c:13:
         8a:b0:3a:56:21:12:71:31:57:33:fb:71:14:c4:c6:f6:bb:a2:
         54:1c:49:e3:32:03:32:ff:84:81:25:a3:1e:3e:fb:06:bc:79:
         20:fe:3a:bc:47:99:0f:52:8f:82:9c:13:3d:ee:ec:a9:ad:65:
         c6:54:cd:4b:e5:08:37:61:d1:64:1d:63:6e:ff:66:7d:c3:83:
         fb:e1:6b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:16:58 2026 by rpki-client