Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File:                     e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier:          ySeC0Ima0oeP7oOZ+BLvZbLEVUJy9BTerZqYaYrjY7I=
Subject key identifier:   F9:81:70:AE:C4:1B:A3:08:B9:F9:F9:5E:B4:B1:B0:44:87:E6:AD:C8
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer:       /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial:       019D88DD305C4DFAFFD9AB5D8075ED4C7726
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number:          09F6
Signing time:             Mon 13 Apr 2026 22:01:30 +0000
Manifest this update:     Mon 13 Apr 2026 22:01:30 +0000
Manifest next update:     Tue 14 Apr 2026 22:01:30 +0000
Files and hashes:         1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
                          2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: JwA4OFHwqhPCUoMP3y2Tb+cLph2v+QV5i0Fxpgx/4Qs=)
                          3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 Apr 2026 22:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:88:dd:30:5c:4d:fa:ff:d9:ab:5d:80:75:ed:4c:77:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
        Validity
            Not Before: Apr 13 22:01:30 2026 GMT
            Not After : Apr 14 22:01:30 2026 GMT
        Subject: CN=f98170aec41ba308b9f9f95eb4b1b04487e6adc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:54:5e:92:02:d7:8e:85:27:69:9a:49:0d:6e:
                    ea:55:53:88:7d:c0:e3:c9:a0:f8:b9:42:88:34:8a:
                    bc:d5:74:92:93:d6:e8:bb:4a:32:cb:f0:2f:a3:47:
                    4c:0d:14:da:a7:7f:cb:72:73:a9:d9:88:f1:40:e9:
                    b1:4a:bf:ba:1f:cd:ab:ea:d9:ac:25:c2:08:c1:28:
                    07:df:14:cf:06:13:60:1f:f7:b9:7f:8d:26:4a:09:
                    77:b3:f9:09:e8:60:12:cd:e4:37:95:aa:76:e5:78:
                    ca:f3:58:13:b7:70:07:e9:e4:90:b1:f4:a0:6f:dd:
                    3f:99:af:5d:ef:5c:c2:b2:af:6e:8e:8a:9e:22:8b:
                    61:8f:bf:dd:62:43:db:ed:99:fc:a7:4e:ea:bd:d4:
                    fe:46:b4:bf:f2:07:8b:8d:71:56:a3:a3:a8:43:fd:
                    d0:ac:00:45:07:99:cb:73:ff:93:28:36:23:fe:94:
                    cf:f1:da:8a:1b:20:4b:da:65:58:c0:29:c7:95:df:
                    b6:2e:c6:be:8c:d3:00:96:98:bf:ce:0e:b6:45:b9:
                    f6:c9:43:f0:6c:c0:e9:3f:f0:dd:86:ce:34:b8:f1:
                    5d:05:bc:2a:bd:ab:d6:a7:af:9e:23:c0:dc:aa:83:
                    9d:bc:ae:53:22:76:2b:c3:fa:31:85:94:d3:fb:be:
                    e3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:81:70:AE:C4:1B:A3:08:B9:F9:F9:5E:B4:B1:B0:44:87:E6:AD:C8
            X509v3 Authority Key Identifier:
                keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:9d:50:cd:c4:3e:52:1a:19:6c:77:da:9e:00:02:52:8c:33:
         ef:19:c4:1c:82:13:63:0a:c1:e1:19:e0:ce:4e:1f:3a:46:19:
         3e:0b:59:cd:78:5e:3d:ba:69:e0:f4:dd:94:1b:99:e5:a4:ae:
         ca:3d:2e:f0:85:92:e5:f8:6e:4a:d5:95:28:7a:3e:a6:f6:20:
         d7:09:83:3f:d9:dc:18:d5:d8:69:13:6f:86:5a:06:a3:5e:8d:
         15:b4:8b:a7:06:bc:e9:36:a2:67:7e:b2:0e:20:9c:07:58:c8:
         67:76:8d:c1:d1:02:b8:1a:5f:22:e3:b6:6a:64:f8:a8:49:36:
         d3:c7:35:62:ca:0f:a9:72:1a:15:e3:a0:2e:9f:1e:b4:71:51:
         23:2b:cb:5e:34:95:b4:38:6d:a9:05:57:b6:a8:89:6b:6c:be:
         7f:eb:1d:10:73:21:05:9e:3c:c4:4b:d2:dc:d9:fe:58:7c:09:
         19:84:ac:74:15:bf:e6:5b:a4:52:10:8e:6a:df:0e:16:1e:50:
         f0:52:f0:5d:9c:72:94:5c:c1:cb:8c:7d:1e:3b:b0:06:f7:95:
         97:33:b0:b4:1f:1a:94:46:49:4f:d9:6e:32:e4:a4:11:82:1d:
         b9:a2:f8:84:13:36:55:a6:8d:ac:17:cb:fc:34:dc:a9:cb:ac:
         9c:d7:a0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 02:59:38 2026 by rpki-client