Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
File:                     cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json)
Hash identifier:          EGVrGxtRrI2PHeTsQbTUtJlWfVPlVCpdu0Y36IUhanE=
Subject key identifier:   4F:30:A0:6B:8E:1B:38:FB:A0:5B:67:98:8E:DD:CE:41:B2:5A:11:6F
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Certificate issuer:       /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial:       019DCED00106E7D9A63C3E230B731503A4CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
Manifest number:          14F7
Signing time:             Mon 27 Apr 2026 12:00:31 +0000
Manifest this update:     Mon 27 Apr 2026 12:00:31 +0000
Manifest next update:     Tue 28 Apr 2026 12:00:31 +0000
Files and hashes:         1: 9Ek2AgPG-IuKRn4Ap7Q4taz5tIs.roa (hash: US5wluLOurNHGWpdK09uPzxIy4dNtgDg+FM3oRliWV8=)
                          2: J6BzaoEADEU3mnLpaeWB28tTH_I.roa (hash: LmZ8HNRZsz6o3yc1qdlURwkpFlRv54OEGoGiLtspLgg=)
                          3: KvGvnsUPTXn11jrE2Q3HUL3nJnY.roa (hash: GZr/8STpN+spxS7hr5Mqyl5f4Xkr+OLbAhQcRXrsj/I=)
                          4: PDRXvo0P_0NveIGADmK4mqe815M.roa (hash: Rt8tDT1Yhhc7JTO2euWnUSC2nUqLohrFpJ3t3YB6850=)
                          5: VxDIXA6mTGbD5-82yK7aUruPsa0.roa (hash: 6ywkNg1zwWV8B8t2RNAXo9ZBmG+pbw7ReG5CtVK2wj0=)
                          6: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: HF8UtjcbYEI4vduh21uMXCXcG6Ric77j03D9UUIlKvc=)
                          7: uct3FriMmJ2dsZBkcrXJVXsGDFw.roa (hash: YxoLUypivPWxn2AjW2R+K6r0FePAjOs61fBGsFzRkR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:d0:01:06:e7:d9:a6:3c:3e:23:0b:73:15:03:a4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
        Validity
            Not Before: Apr 27 12:00:31 2026 GMT
            Not After : Apr 28 12:00:31 2026 GMT
        Subject: CN=4f30a06b8e1b38fba05b67988eddce41b25a116f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:43:f7:ca:8f:35:9d:2d:e7:45:8f:07:55:62:
                    b1:2f:96:70:a9:1d:e2:4d:f8:cd:cb:2e:69:90:00:
                    09:dc:50:7d:f6:11:8f:31:93:38:fd:fa:5a:22:bc:
                    d7:6b:9a:37:2b:46:6f:45:c7:f1:fd:ea:55:7b:82:
                    62:7b:6d:fb:fb:fd:48:56:ea:de:f4:35:1e:39:ed:
                    e2:e2:5f:19:f5:f6:47:69:f4:f9:ae:7b:fd:78:74:
                    0a:8f:ac:1b:95:95:c7:ba:7c:7a:b7:f9:90:6d:20:
                    14:1b:74:fe:2b:c4:cb:3c:92:32:8c:14:6c:3a:4e:
                    89:b8:39:27:80:e9:74:f4:d2:b7:22:7d:35:e0:7b:
                    8d:95:a7:08:da:8c:cd:fe:8a:f1:05:cf:95:26:74:
                    3d:31:fc:0d:ec:ba:ef:2b:2c:8e:c5:29:fa:fb:f5:
                    b8:0e:b3:38:6e:77:a6:33:12:71:46:c9:2a:08:64:
                    a2:e9:f7:fc:97:1c:2b:2d:63:50:cb:55:ab:eb:3e:
                    b7:87:b7:33:63:37:54:ba:9c:da:38:e3:dd:f7:43:
                    3a:5b:a0:62:fd:5b:91:89:e4:64:e0:82:bf:d5:cb:
                    2d:fe:73:dc:a8:ab:b0:5d:1f:cf:84:2e:6f:43:8b:
                    14:9a:87:d1:2e:14:6a:00:ce:b9:13:c2:b8:c9:b4:
                    34:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:30:A0:6B:8E:1B:38:FB:A0:5B:67:98:8E:DD:CE:41:B2:5A:11:6F
            X509v3 Authority Key Identifier:
                keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:8c:8e:37:73:86:68:96:93:8a:9a:2b:bb:93:a7:e0:e6:69:
         51:ab:ae:7f:45:38:1c:77:46:98:0e:50:4e:f7:84:9f:f4:5a:
         71:a3:db:7e:5f:8b:e6:1f:ec:60:07:47:6b:1a:0b:68:cd:4b:
         0b:73:9f:ba:6e:a5:0b:29:42:9e:2f:c1:66:d3:d0:83:22:dc:
         b7:2e:54:d6:79:ca:f0:80:db:ee:fe:5d:6a:5f:a2:5a:57:16:
         53:d9:38:e6:b4:86:92:86:fa:46:be:23:79:4d:96:75:f7:f4:
         01:69:a8:7e:78:bf:d6:9e:ea:03:0c:72:ab:39:33:9f:ab:e3:
         e2:68:f0:6a:fb:74:d3:26:c5:2b:32:e8:cb:d6:2c:52:8f:17:
         ff:d5:26:0d:08:ff:e8:a8:fe:98:a0:c6:17:7c:08:33:9c:4a:
         e9:99:08:8a:d6:bd:24:17:72:fc:28:da:17:00:f4:ba:61:ab:
         77:27:f9:ab:d5:31:fa:f2:7f:d7:9a:54:ef:a3:bb:9a:c8:f3:
         73:da:49:a6:54:bf:62:3e:56:a9:5e:f1:53:5d:ed:51:e4:34:
         df:87:5b:be:48:16:c0:5c:1b:78:09:e1:46:ab:07:16:44:1e:
         41:e7:1b:67:41:90:f5:ec:a6:44:84:25:17:09:07:d1:f9:b5:
         be:c4:8b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:08:41 2026 by rpki-client