Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
File:                     miM7vd_kOGRvWG8IXl3w15vfufw.mft (raw, json)
Hash identifier:          rTyCjxleQ4Mu1i1YK9lFtti/UAnKhftsFB1NWC5beks=
Subject key identifier:   BC:AD:98:52:A7:A7:EC:70:5F:8B:F9:3A:DA:28:E1:55:F9:6B:41:E4
Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
Certificate issuer:       /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Certificate serial:       019DCFE3FB810327217C39488CE364052557
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
Manifest number:          07D4
Signing time:             Mon 27 Apr 2026 17:01:57 +0000
Manifest this update:     Mon 27 Apr 2026 17:01:57 +0000
Manifest next update:     Tue 28 Apr 2026 17:01:57 +0000
Files and hashes:         1: M1ruMNKluNAuiHKd8f6PvAhDGEs.roa (hash: FWsTJhEBrkq8kPBWZ62T1F7ClTwy4cYS4tWh5TLbeTA=)
                          2: XNKWPCMOPLauToaa-Vtz2zcauoc.roa (hash: luJuVPoWx92bH75pBWbCMtwrgqr+Km6/eamqOW1HDZc=)
                          3: dyhz1TfOcl672ykR-umzk8d_7AQ.roa (hash: i2scR6hBPf9EaO7J0DMnFp1+UeNi6vv8mMyfEjaxgaY=)
                          4: miM7vd_kOGRvWG8IXl3w15vfufw.crl (hash: LLlWOWIluvDJDi4sri8axtI3W033Siwp+VjMik30y+M=)
                          5: nl8rJp2Gx045j4pPDWegyHxSDoU.roa (hash: 2GNCXLXhx5YXmc3JB/+CLbWieU0ZOSqkjHUYlGnPA30=)
                          6: vhhE0LlaMoAC65mEN3TyEobLF50.roa (hash: Us5rGsyQlFj4bRY6YlCqwzJno3k3/qLxqTpPkFS4SJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:e3:fb:81:03:27:21:7c:39:48:8c:e3:64:05:25:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
        Validity
            Not Before: Apr 27 17:01:57 2026 GMT
            Not After : Apr 28 17:01:57 2026 GMT
        Subject: CN=bcad9852a7a7ec705f8bf93ada28e155f96b41e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:15:cd:47:93:49:86:bd:ad:5a:63:ec:92:
                    49:bc:32:03:1b:54:5e:88:87:60:18:5a:60:05:c7:
                    03:0b:60:ee:92:d7:ca:37:5c:4a:34:27:5c:98:01:
                    3f:ac:97:bf:e8:72:91:43:86:da:a5:f1:78:27:5c:
                    00:ca:94:c4:13:58:39:50:8b:63:1e:6f:78:47:42:
                    ba:bb:0a:0b:0b:7d:26:4c:e2:8c:8b:43:5f:bb:87:
                    30:19:c9:f3:49:02:7a:b2:e5:20:9a:26:dd:78:e0:
                    5b:29:38:08:6a:1d:be:2a:6b:4a:94:7a:39:06:88:
                    3d:03:7a:bd:63:10:4b:58:54:5f:49:84:0b:40:4a:
                    fa:c8:5e:22:a8:36:01:36:56:09:86:b3:bd:86:7a:
                    2e:e1:65:ab:7a:57:8c:39:92:81:f5:3d:77:6c:86:
                    ed:b5:59:3e:e7:ef:97:ff:49:8f:d2:a0:c3:d4:51:
                    1d:9e:fc:54:62:a7:92:11:b8:5c:60:76:4c:9d:13:
                    7e:70:66:3c:18:d2:a5:0f:13:9e:d3:dc:b5:e5:78:
                    ef:f6:9d:db:03:96:d0:26:c4:e3:a7:85:ac:ff:d0:
                    64:52:0d:f9:0b:d1:f8:4e:99:b3:d1:72:51:d5:8d:
                    09:85:46:de:78:2c:04:cc:cb:a6:fc:9d:5a:c8:0c:
                    e3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AD:98:52:A7:A7:EC:70:5F:8B:F9:3A:DA:28:E1:55:F9:6B:41:E4
            X509v3 Authority Key Identifier:
                keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:da:1a:ec:08:68:8f:63:88:3e:27:b4:47:3c:aa:2e:9f:90:
         b9:1e:43:25:97:52:3c:7a:89:69:90:6f:cd:5f:76:b6:20:6d:
         eb:75:34:07:dc:70:e4:14:49:69:21:f8:56:ac:17:ff:34:96:
         03:59:19:50:0f:75:09:80:25:4c:a0:8d:7b:09:77:b5:a6:d7:
         86:71:0d:62:b9:2f:bf:a0:20:1e:c2:ed:91:ea:59:49:58:86:
         d1:a0:ed:3a:06:d0:c3:e1:a9:b9:12:3a:7e:e1:d0:82:d7:df:
         2e:c0:cc:44:7a:67:10:d6:da:cc:bd:5c:17:1a:d3:5a:1d:7e:
         c1:1d:f2:20:e3:95:41:b1:2a:35:0c:6e:ff:46:44:98:f7:04:
         04:83:ba:ec:e8:60:e4:69:c2:99:cf:10:57:e9:35:23:de:f1:
         46:5f:d1:ca:c9:09:82:a5:5a:ce:16:fa:79:0a:62:58:2c:85:
         32:29:93:18:31:00:89:80:eb:b9:2c:99:61:21:15:b8:84:b7:
         12:f5:f2:69:3d:69:a3:37:22:f4:96:6f:c4:2b:d9:bb:ba:03:
         56:59:e7:15:98:fb:19:22:f8:18:d4:d0:a5:6b:de:68:59:16:
         fe:dc:7f:bb:79:7e:00:83:55:68:f1:71:c8:db:60:1a:9f:8d:
         6e:bf:81:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:47:51 2026 by rpki-client