Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File:                     e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier:          IIKG9Dfc8D09eSPwuQ7+Wwp1ByM1CZ1G227OU7Zlp1o=
Subject key identifier:   94:A8:1B:7D:A4:33:7B:D6:B4:13:72:A3:E7:BF:78:0D:C5:50:72:FA
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer:       /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial:       019D5A8465663EFEBA0AA320FB1EB4C92CA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number:          09DE
Signing time:             Sat 04 Apr 2026 22:01:59 +0000
Manifest this update:     Sat 04 Apr 2026 22:01:59 +0000
Manifest next update:     Sun 05 Apr 2026 22:01:59 +0000
Files and hashes:         1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
                          2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: GhY+g0jm1tTTDX4CGKjxq3XUG0nyWs6ttn8np701oQA=)
                          3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 Apr 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:5a:84:65:66:3e:fe:ba:0a:a3:20:fb:1e:b4:c9:2c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
        Validity
            Not Before: Apr  4 22:01:59 2026 GMT
            Not After : Apr  5 22:01:59 2026 GMT
        Subject: CN=94a81b7da4337bd6b41372a3e7bf780dc55072fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:ab:8d:0d:f4:bc:2d:c4:20:2e:f5:19:02:cf:
                    3b:fc:4f:de:63:4a:08:59:cd:23:4c:75:ab:bd:26:
                    93:11:05:a9:c0:dd:4c:66:46:78:cf:00:86:0f:1a:
                    4d:4e:16:73:21:af:c5:18:97:2e:a6:b4:1f:e7:94:
                    b9:c1:d8:8b:8e:4d:ab:43:54:4f:d4:49:10:b7:84:
                    8f:93:8d:63:b6:f8:ba:52:c1:15:3b:12:6b:6b:2d:
                    1c:8a:8c:8d:26:72:c7:09:9c:26:41:2c:76:59:6c:
                    45:ab:1a:fb:41:71:f1:8e:b7:2f:0f:a7:ba:22:9c:
                    51:9f:c0:6b:61:e0:6f:1c:bd:44:06:1f:ea:07:70:
                    db:3e:4b:49:c3:c5:c4:d3:61:c5:67:f9:81:78:69:
                    7d:ed:a2:c2:fc:ae:67:25:96:7b:6e:92:f1:21:6a:
                    55:bc:9d:8a:54:43:00:a4:2f:37:46:95:6e:fa:40:
                    41:d0:8a:88:b6:60:39:80:e5:2f:ca:15:ce:fd:45:
                    46:65:b9:54:78:47:e9:ff:b0:1a:32:b8:84:a1:a3:
                    3f:09:2b:86:ba:17:ca:c5:52:b8:2a:bf:91:a1:45:
                    de:81:20:6f:a5:b0:54:df:01:8d:49:9d:07:8c:ac:
                    d2:4c:05:50:e6:17:ec:92:f9:f1:8a:21:f9:f1:ff:
                    a8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A8:1B:7D:A4:33:7B:D6:B4:13:72:A3:E7:BF:78:0D:C5:50:72:FA
            X509v3 Authority Key Identifier:
                keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:60:73:02:67:f0:65:42:11:62:35:28:aa:60:7a:78:ff:15:
         1b:c9:26:c6:91:de:0d:11:fc:97:59:f1:87:ac:82:b0:83:5e:
         8f:7f:02:40:9d:37:d8:1d:73:bf:f4:1a:89:27:a7:67:a9:99:
         e5:a2:bf:bd:b7:c0:b9:7f:0e:c9:34:5e:7e:82:98:22:42:0e:
         75:fc:2d:41:0f:a4:ce:96:fa:9d:d9:99:c0:d9:91:15:03:60:
         8b:69:32:5c:f0:65:06:26:de:4b:c5:8e:2c:c2:a7:7d:e8:c0:
         f2:1f:c2:90:1f:08:2e:d6:25:f2:d4:1b:5c:53:69:e8:6b:b7:
         49:39:9b:57:41:15:ee:b9:cf:cf:86:73:4c:68:f2:51:ca:78:
         ac:a6:0d:bf:cb:34:a9:e5:11:38:c0:82:ee:ef:21:b9:eb:a4:
         10:3a:1a:38:31:d7:d3:9d:01:f1:70:ff:af:59:01:36:e5:32:
         2f:a6:0a:fb:96:7d:da:83:1b:04:19:fa:a5:73:ff:c6:24:e1:
         95:e3:ed:d6:d6:26:d4:a1:e4:09:62:63:18:d4:91:a1:76:29:
         4c:73:64:4d:9d:ec:24:67:ae:90:e0:e2:39:dd:5c:56:d5:c5:
         26:b6:f4:1a:bb:e4:a9:b1:e6:da:c1:93:21:d6:be:36:79:4e:
         60:72:64:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 02:16:58 2026 by rpki-client