Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
File:                     fciRFoK8XKcc7OHv46wTW_21ndY.mft (raw, json)
Hash identifier:          +hWdUItpjGxX8NtYf9FjpGpHf3u0Iz8XDvxCey8cFc4=
Subject key identifier:   7E:E3:A6:FF:DD:63:96:52:17:66:B9:F0:C9:69:AD:54:C5:8F:FD:04
Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
Certificate issuer:       /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Certificate serial:       019DB2EBF55AE0B7AEC5496AE83CAF5F5C24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
Manifest number:          13D3
Signing time:             Wed 22 Apr 2026 02:01:41 +0000
Manifest this update:     Wed 22 Apr 2026 02:01:41 +0000
Manifest next update:     Thu 23 Apr 2026 02:01:41 +0000
Files and hashes:         1: 9w9SZI03wkoC4C4p8xbj1xyQTSk.roa (hash: 4ZjNUluDOnXe4+ntofvgh0yoY5kqpiMhMwraHxso+o8=)
                          2: CfxZ0eGeh6IDIqEVp-fjZEspGOw.roa (hash: 64gVJuHjRSQovFr9XT+uIvTrz2Nlh3y9/QzHL+fzAZ0=)
                          3: fciRFoK8XKcc7OHv46wTW_21ndY.crl (hash: +Xq10B8T9xFpkITdyr73WyC59RfFp+NWfCydVKfDnIY=)
                          4: hLVnBuf3u_JFi21jPT8scSeq55o.roa (hash: 9Kl/ni4B9iNPukEzlMtSOKbm3FCZbPlEMODKtlh8/eY=)
                          5: t9sZ-svkNCOn_aB5PqRUJcIA5qw.roa (hash: kWqIg6Zu9e2cjZJBsJNhAniK6OQKlOVK34Tp81YEZc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 21:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b2:eb:f5:5a:e0:b7:ae:c5:49:6a:e8:3c:af:5f:5c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
        Validity
            Not Before: Apr 22 02:01:41 2026 GMT
            Not After : Apr 23 02:01:41 2026 GMT
        Subject: CN=7ee3a6ffdd6396521766b9f0c969ad54c58ffd04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bf:e6:e2:8d:a0:85:f9:45:08:cc:63:96:15:
                    0a:b4:55:7f:00:63:e5:1b:4a:2b:05:50:47:9c:7d:
                    54:9d:08:4a:45:63:c3:a4:77:7f:21:a3:43:2e:2e:
                    cb:fc:19:63:cb:56:62:af:4d:0e:ed:90:23:24:d5:
                    e6:92:1e:5a:d2:13:dc:30:14:d1:f9:f6:ab:56:b6:
                    d3:01:a6:30:c5:95:ab:54:aa:31:f1:7e:74:81:73:
                    bb:38:eb:31:1f:73:21:9a:f9:10:f5:ee:e3:99:c1:
                    e5:b5:a7:aa:3c:54:3a:8e:92:bc:73:2e:19:a1:3c:
                    88:03:c5:66:8d:1e:ef:56:67:7d:f2:f7:17:c0:c0:
                    ff:4e:d1:73:65:55:cb:15:4a:49:21:e1:8b:94:1d:
                    08:61:2d:71:5a:59:8a:a1:a0:46:02:4d:6d:a4:0b:
                    10:bd:ec:31:1e:6e:35:16:c9:b3:4e:fc:b2:b0:e8:
                    7a:21:6f:c0:28:54:15:1b:f2:4b:4d:d6:15:24:cc:
                    7a:8f:98:6d:25:30:e8:d0:c0:ab:f8:56:57:96:12:
                    ab:5d:e7:6d:f5:08:5e:2e:c7:81:9b:98:68:6e:de:
                    1a:9b:e3:79:35:eb:88:9e:24:4c:78:a9:d3:b7:eb:
                    df:55:47:b4:29:1b:87:8f:18:19:56:63:b1:f0:0f:
                    89:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E3:A6:FF:DD:63:96:52:17:66:B9:F0:C9:69:AD:54:C5:8F:FD:04
            X509v3 Authority Key Identifier:
                keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:53:d6:7c:e4:3a:6b:cb:2b:47:3d:c3:0a:df:43:7b:23:b2:
         0a:2f:11:e8:12:10:7c:c6:90:a9:42:d8:fc:9b:24:99:43:84:
         c9:a4:f0:8e:20:65:03:c7:a4:03:6c:eb:5e:e3:a8:85:ec:8f:
         e7:87:06:44:62:62:79:83:61:8e:03:33:f2:7c:84:ee:76:00:
         6e:18:5c:de:20:9b:c9:24:83:e0:36:b5:1a:3c:d8:05:20:21:
         46:2c:09:91:d8:e9:2c:31:d2:4d:19:4d:6e:d7:58:7c:2e:a9:
         c3:75:3b:24:05:7e:2f:d2:aa:c1:b8:2f:fe:9e:16:71:56:07:
         c1:55:34:13:af:85:9b:7d:d9:23:df:2e:73:28:63:2d:df:6f:
         19:1c:54:62:5d:61:88:4c:2e:05:f1:5f:f6:a7:d8:f7:31:37:
         94:b8:6e:6f:de:41:33:d2:2f:63:b6:1d:97:3a:ad:df:54:fd:
         42:cf:db:2e:d0:28:c0:d4:60:d6:dd:5e:58:c7:3b:d0:3c:df:
         f2:15:09:29:42:ac:11:05:15:81:ea:a3:ec:8b:0d:d4:ab:ba:
         d0:8a:47:de:da:3c:49:e9:6a:ee:75:07:4a:6e:7b:ca:b5:7c:
         84:bf:f0:0f:7f:f7:9f:0b:15:cb:7e:1a:e1:78:4b:a3:5f:2d:
         8c:9f:90:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:08:26 2026 by rpki-client