Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
File:                     7JxoXPZnHMZW-S52RVejg3jygnw.mft (raw, json)
Hash identifier:          e+2PCRmg5uekAH8dt/Lg0uyBdh2h/nAI8B7fdKM0BHE=
Subject key identifier:   07:9E:59:37:89:F1:B0:36:85:19:7D:0D:A8:6A:84:73:F0:C4:50:B9
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Certificate issuer:       /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial:       019DA97A821E3C6442C6A8D1F0BA82CB9291
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
Manifest number:          09FE
Signing time:             Mon 20 Apr 2026 06:01:11 +0000
Manifest this update:     Mon 20 Apr 2026 06:01:11 +0000
Manifest next update:     Tue 21 Apr 2026 06:01:11 +0000
Files and hashes:         1: 1-OYnNzXr6Vo5v0tdTY5uXPebeXE.roa (hash: HvTSCO8dnKWpIGNv0ZhtPHvjO7rUBO8uy6VJMUgGVj0=)
                          2: 5DTG2pQHtM0QiGmSH96_4M3Hn5k.roa (hash: ITY7NiqI6LopyqA5OlrdJTOTC/MthEeeabjTB3wyEhU=)
                          3: 7JxoXPZnHMZW-S52RVejg3jygnw.crl (hash: yp4RmgGUGBvt2vhVHR8MNeK5qudqPpgj/Wh2oxJ7tic=)
                          4: Rb9KBoBLJn6K8gQhZg2wL_hnX2Q.roa (hash: Pnn1XhHhvI1FVLr7IXQzdyTXVT364mukcsmYH/cxMhg=)
                          5: djl4yLaR492a1MyY0DtkNwyzb78.roa (hash: ej60VYUqOdqHjFm3piE4ykWKGCUfy0gAqtpywAR05qI=)
                          6: n6Q7Dz0YljZRgjb4Ej38nYOG1kE.roa (hash: A8op5Re6jPP6C2oorXQWf6MTZbk9dP/pw1d5qjwWEks=)
                          7: qaTz9Gcvv3rYivfDPN_oMa7zdMg.roa (hash: wLlpBBMoxpNd4ichZWbUSTgH+M9/gymFfeCx9hn+ga4=)
                          8: x77ckgBnyFjNyEr_z-PzyG8KyRo.roa (hash: tyi/lTtGkxn6eIin2giJPjtV2rcAYKNSiCivHdTdGL0=)
                          9: x8PuWJNPJBC35K_SG-mLe9gxJtA.roa (hash: i+jPp0P0KxStb0wvP/NjPbGbfQidMuZ2R8mV3ecH7IA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Apr 2026 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a9:7a:82:1e:3c:64:42:c6:a8:d1:f0:ba:82:cb:92:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
        Validity
            Not Before: Apr 20 06:01:11 2026 GMT
            Not After : Apr 21 06:01:11 2026 GMT
        Subject: CN=079e593789f1b03685197d0da86a8473f0c450b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:ba:45:d6:96:0a:b9:40:08:70:b7:99:c0:
                    72:da:4f:c0:64:66:c0:45:32:ba:6a:e4:9b:c6:13:
                    68:8a:c8:4f:b0:f9:73:49:78:91:b3:44:e9:a1:3f:
                    f7:64:87:e1:28:2d:84:99:e3:6e:e0:14:fe:ca:89:
                    77:ae:d1:d8:bc:5f:a9:8e:97:ea:44:51:02:2c:a7:
                    e4:80:d5:e7:74:d8:8d:3a:aa:c5:29:4f:6b:b8:b8:
                    be:2a:5f:59:30:c2:64:8f:86:7b:c7:98:1f:4a:06:
                    bb:63:60:f2:41:2f:f8:f5:ba:45:9f:c5:2c:42:aa:
                    4f:f2:a2:ab:3c:4d:24:7a:19:44:b2:15:f4:f5:5a:
                    20:03:7e:62:68:08:43:2a:00:a1:4a:93:50:e9:d1:
                    e2:a7:de:b4:c1:f2:18:ea:d2:84:43:7f:a2:c8:83:
                    f5:a1:d2:36:eb:25:02:a6:3d:07:e6:69:68:e2:70:
                    65:3f:96:ef:5e:99:78:67:3e:8b:7e:36:57:af:ec:
                    03:1d:d5:90:41:72:ce:2d:a9:52:97:86:47:dd:83:
                    5f:c4:93:e6:58:2a:3c:f3:d9:21:30:71:f2:d2:24:
                    f0:86:8e:67:2a:0d:67:55:b7:56:37:ab:43:e8:b6:
                    9c:20:4c:38:cd:cf:63:1e:9b:74:ff:50:a0:48:24:
                    f4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9E:59:37:89:F1:B0:36:85:19:7D:0D:A8:6A:84:73:F0:C4:50:B9
            X509v3 Authority Key Identifier:
                keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b2:d5:08:eb:c0:45:f7:91:7e:02:01:ee:2a:1c:2d:85:68:
         f0:70:82:d3:3d:f0:3d:31:e9:aa:cd:6f:2d:46:92:61:e0:02:
         0a:ba:3f:a8:88:48:75:57:c6:f6:2c:e3:b8:c2:c4:09:25:e5:
         3e:53:49:fb:13:25:05:3b:98:c8:bd:d3:f7:e0:b0:4c:b9:dc:
         21:c8:52:73:b2:b4:6e:9d:ac:16:cd:12:fd:ac:95:b6:eb:a4:
         e7:a1:24:59:0c:fd:76:7e:cd:32:a8:2f:27:11:7c:68:b2:10:
         ef:e8:b2:28:e8:bc:c7:39:53:68:bf:91:37:8b:7a:73:9c:f2:
         47:32:cb:91:04:f1:fc:74:f6:c0:aa:6f:fc:83:1e:06:33:8d:
         96:f3:d7:39:bd:55:5a:ba:38:a6:6b:0f:69:97:fc:71:3b:12:
         68:84:cd:46:34:df:4c:84:87:92:84:dc:ae:c9:0a:50:10:2a:
         fc:f6:42:20:81:8b:84:d8:d7:81:d9:f2:d8:8d:a1:67:97:38:
         73:9d:39:b0:a6:b5:dc:f8:38:ed:60:4b:4f:78:f3:29:48:d4:
         0c:0b:a1:e1:53:24:f2:97:42:be:03:46:37:20:61:8a:44:3f:
         47:1b:ae:7b:c3:90:5d:79:5b:30:a0:20:3d:3d:52:6e:50:d0:
         44:68:d1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 09:39:31 2026 by rpki-client