Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File:                     e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier:          d47G0+UbMC3fUST+g4XpKJ0MbKygaf5ezzlk9fi3GH8=
Subject key identifier:   C2:D8:80:53:79:B2:39:4A:37:1C:C1:07:2A:6F:A9:F4:AD:FE:EC:53
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer:       /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial:       019D6FC205FA478855D018FBBB428DCF0C4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number:          09E9
Signing time:             Thu 09 Apr 2026 01:01:19 +0000
Manifest this update:     Thu 09 Apr 2026 01:01:19 +0000
Manifest next update:     Fri 10 Apr 2026 01:01:19 +0000
Files and hashes:         1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
                          2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: BehCxj7q4/oyaIZ23Sxd0e4+H/EQzLPF/pdk8ethXOU=)
                          3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Apr 2026 20:11:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:6f:c2:05:fa:47:88:55:d0:18:fb:bb:42:8d:cf:0c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
        Validity
            Not Before: Apr  9 01:01:19 2026 GMT
            Not After : Apr 10 01:01:19 2026 GMT
        Subject: CN=c2d8805379b2394a371cc1072a6fa9f4adfeec53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c9:a9:06:25:e5:82:9f:72:d7:ee:e4:f2:a0:
                    fe:c8:c7:fc:16:b8:75:85:2b:e8:67:b5:a7:d3:dd:
                    2e:0b:23:6e:e3:f5:49:8b:0d:45:68:36:aa:4f:85:
                    c8:d6:1e:6b:dd:81:ec:79:d1:dd:68:bb:dd:02:86:
                    33:dc:aa:98:d1:76:2c:55:ee:68:9d:4a:a3:85:01:
                    19:40:55:53:54:89:8e:ad:ae:ad:9b:42:b1:fc:fa:
                    a4:94:25:f5:5a:04:70:31:ad:aa:a0:ce:7b:04:2b:
                    3a:f9:84:ed:a9:89:7d:dc:2f:a8:04:0f:f5:42:cd:
                    16:a2:7b:da:b2:b0:cd:83:8a:91:87:92:c6:eb:e8:
                    68:5c:c5:66:6b:17:97:76:44:8e:1c:a9:76:46:9d:
                    e1:b2:bf:48:51:66:7f:b1:39:f2:5b:f8:5a:ba:a6:
                    ec:0e:9a:c2:d1:03:b2:e2:78:33:44:52:6d:35:16:
                    dc:88:0f:06:e4:00:0b:81:01:d9:37:e3:27:52:f2:
                    3f:f2:25:7a:16:db:00:f0:15:24:62:e2:a6:d2:f3:
                    2f:ba:39:61:74:92:41:ad:e3:a7:00:cc:97:c2:c3:
                    18:07:1c:d4:a4:f3:5a:dd:f4:7f:f3:da:7a:55:fa:
                    4e:14:3e:a8:b3:3b:53:cf:92:8d:bf:68:03:57:a9:
                    04:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D8:80:53:79:B2:39:4A:37:1C:C1:07:2A:6F:A9:F4:AD:FE:EC:53
            X509v3 Authority Key Identifier:
                keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:83:ae:61:d5:8d:f7:27:23:f6:73:62:f4:a8:e9:aa:40:a5:
         61:03:62:ac:87:75:86:09:9d:94:ff:09:ba:27:a5:0c:bd:b7:
         3f:2c:ba:f6:79:a0:bb:0c:fa:56:86:65:d0:8c:b9:10:f2:5c:
         62:74:fd:91:2b:a4:1f:6e:1c:e2:f4:17:01:ac:93:42:38:d4:
         df:39:b9:0c:c0:c4:87:18:77:94:a1:ea:d1:56:66:cc:cb:6a:
         97:28:fd:36:b2:df:8f:46:c1:a8:6d:b7:44:28:97:6f:71:c2:
         76:92:01:35:d0:1a:70:d6:9f:3c:1d:85:3f:18:db:74:da:17:
         d1:75:5b:b7:f2:42:60:70:12:eb:f0:5e:04:fa:16:5e:e7:54:
         20:02:67:86:f6:8d:08:e4:5c:5b:d9:df:97:2f:70:39:db:28:
         1f:63:bc:bf:e9:f2:2a:1b:fa:9f:6e:9b:76:25:94:4d:df:cd:
         98:ba:68:1d:92:46:6b:93:3a:0c:cf:28:49:d1:89:79:ad:1e:
         c5:e7:0e:b1:1d:dd:b0:aa:35:16:97:d2:8f:e2:d9:80:38:4e:
         5b:0d:37:3c:4c:b2:90:09:65:f2:8e:9b:70:05:39:d4:ae:bb:
         37:f9:20:bf:87:50:29:b1:ac:26:58:1c:dd:20:1e:2d:27:34:
         7d:41:df:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 06:29:05 2026 by rpki-client