Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File:                     e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier:          ISgLEfsWSOjULP2p53l+V/c0Ba3gV9fK7l+w4Yyc58U=
Subject key identifier:   9E:BC:2E:2C:C7:DC:EA:9A:C2:2E:16:F6:BC:8B:AF:C6:B4:99:1A:98
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer:       /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial:       019D796A2839582E6A77C2A8A1F8C34E2DA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number:          09EE
Signing time:             Fri 10 Apr 2026 22:01:33 +0000
Manifest this update:     Fri 10 Apr 2026 22:01:33 +0000
Manifest next update:     Sat 11 Apr 2026 22:01:33 +0000
Files and hashes:         1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
                          2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: kv1NQSrVr3WmTtuZw2Lricb9H1dWL3B3NpbrpiJv5xY=)
                          3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Apr 2026 22:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:79:6a:28:39:58:2e:6a:77:c2:a8:a1:f8:c3:4e:2d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
        Validity
            Not Before: Apr 10 22:01:33 2026 GMT
            Not After : Apr 11 22:01:33 2026 GMT
        Subject: CN=9ebc2e2cc7dcea9ac22e16f6bc8bafc6b4991a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6d:52:f3:bb:ce:43:af:1f:ef:64:8d:38:b1:
                    ae:21:75:d5:bf:4d:90:fb:9f:35:ab:62:09:98:62:
                    09:2e:6a:71:49:65:fa:72:fe:59:ee:5c:8b:8a:3e:
                    4d:9c:df:ec:f3:46:15:4e:32:6c:71:2d:73:b0:7f:
                    32:b2:6a:ef:a0:6d:79:10:02:6b:3d:81:6b:c2:81:
                    ce:fd:2d:5d:cd:d8:fa:57:ef:32:1a:9b:3f:4f:06:
                    2f:dd:7d:ac:a1:35:1d:cc:65:4e:ef:41:e9:20:a6:
                    2f:97:c0:86:6f:16:1d:82:4b:a1:59:21:b9:25:4d:
                    75:89:8a:5e:35:9c:7d:1a:6f:bd:11:3a:22:7a:1d:
                    29:81:11:40:ca:3d:44:b6:c0:66:eb:40:81:a5:48:
                    d3:33:60:78:68:45:b1:d6:e8:21:f9:f6:33:a3:85:
                    8b:21:61:54:1d:3d:ea:b6:05:e0:df:6f:2a:f5:c6:
                    2a:5d:1b:25:0b:d4:5f:0c:6b:09:7d:98:6e:f6:2a:
                    e7:a2:fc:37:c8:21:e7:58:1e:b3:b1:c6:78:a1:46:
                    f4:59:ad:bf:09:2b:db:1d:b6:e8:e0:d6:81:89:b1:
                    69:b3:38:c4:a1:88:48:4c:0f:17:ca:9f:85:31:8e:
                    13:86:62:c8:02:b8:be:9e:d8:18:d3:ba:78:37:7a:
                    6c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BC:2E:2C:C7:DC:EA:9A:C2:2E:16:F6:BC:8B:AF:C6:B4:99:1A:98
            X509v3 Authority Key Identifier:
                keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:4c:e9:f9:3b:4c:01:b6:1b:f5:1a:12:cc:fe:f3:55:9b:ca:
         2d:fb:8a:42:f6:c1:4c:4e:4e:c7:c4:60:1b:30:02:76:01:0c:
         c8:3a:33:a3:dd:02:02:67:81:7e:c7:cb:56:c7:8c:05:02:b1:
         d6:ae:6c:90:b2:8e:b8:99:7a:7b:35:c3:3c:e3:d9:f7:bf:98:
         dd:a0:44:25:03:72:5e:bd:cb:06:3e:a2:7f:8b:db:f7:e1:63:
         ce:9a:c2:16:51:52:d6:9a:65:6d:c4:81:99:d1:c9:c1:56:ec:
         6c:75:58:27:88:4f:46:c3:91:90:40:22:a5:00:cb:44:14:95:
         e3:2e:13:39:87:0b:9b:b1:56:17:4b:73:7c:95:b0:87:11:5e:
         f4:a7:b4:bd:4b:98:18:4c:fe:b7:26:2e:ab:e8:73:f9:c2:8a:
         60:5c:f2:0d:b4:8a:bb:f5:af:b5:a5:8a:57:61:b0:54:51:e0:
         73:26:c0:3e:77:6b:a4:4a:b1:a6:c4:32:1f:ee:8e:6a:b3:ec:
         fb:df:5f:7c:cd:0f:84:23:07:71:1a:d6:42:e4:bc:9b:94:40:
         0e:04:ad:de:b8:6b:40:a0:b2:bb:5c:86:62:bf:4d:30:cb:60:
         fc:25:7f:9e:29:e4:27:61:86:05:c0:69:fb:50:d3:3c:5e:69:
         0f:8f:2f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 07:26:48 2026 by rpki-client