Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
File:                     d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft (raw, json)
Hash identifier:          TDdcjVjaWMpIqXWae3VD/5XlIQ4JCpqmYGQE5hjooDo=
Subject key identifier:   AD:B2:A6:D8:E0:F9:64:0B:DC:17:8B:02:E7:EA:A2:8F:A4:EC:7F:79
Authority key identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
Certificate issuer:       /CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Certificate serial:       019DCE2B26215622EF31528369A651F31443
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
Manifest number:          18EC
Signing time:             Mon 27 Apr 2026 09:00:27 +0000
Manifest this update:     Mon 27 Apr 2026 09:00:27 +0000
Manifest next update:     Tue 28 Apr 2026 09:00:27 +0000
Files and hashes:         1: 0EYCl_u7AU56YlSvHpYQis-MWnk.roa (hash: lcxZZ3W8GXhqGxMNgdkpvNjJpkamu9CsXtsLtPwfuzQ=)
                          2: Cs9YxhZfyW4Urdc5-fOqJwKIHoU.roa (hash: I6N20mO9htN36i6vVwot9Ufj6P1C7DFWXR9BR2KjJ0Q=)
                          3: d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl (hash: Qvx4b/Aq6o+cWal4avqgHpubKFyMDqXR49JZ7GlPJy8=)
                          4: gApx7_2-IVeTOgv2vlenRdRxu4A.roa (hash: c6v6uoIsvWo8tgRVkkD7YA4iGmNGOGbbt0sNKC1bk1c=)
                          5: pp7zPOmyknFg8d0Gr5g-I2wOEDQ.roa (hash: 2LjSnEN+hHc9XuvzHuSzawxoX9WgA8pySl8rAgAIPKk=)
                          6: zvW2BXG_KR2tH5wPFjzByZu5Wic.roa (hash: aJKDQB0eC1MIkoZBUkIu5PMs0EeE5CsftG39rD94VMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 09:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:2b:26:21:56:22:ef:31:52:83:69:a6:51:f3:14:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
        Validity
            Not Before: Apr 27 09:00:27 2026 GMT
            Not After : Apr 28 09:00:27 2026 GMT
        Subject: CN=adb2a6d8e0f9640bdc178b02e7eaa28fa4ec7f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:f1:dd:30:10:db:5c:13:16:83:63:7f:a4:
                    fa:bc:a7:da:36:be:6f:44:16:41:4e:76:5f:4e:cc:
                    88:07:c4:d2:40:dd:2e:da:64:c8:e5:09:17:45:c4:
                    c6:5f:09:b7:07:03:10:48:4b:fd:2a:aa:db:1a:5b:
                    17:00:6a:66:59:2e:58:54:45:eb:43:40:75:00:6e:
                    6a:18:13:32:18:85:46:e2:c2:31:44:89:cd:85:e0:
                    fa:0b:76:e1:c9:c5:9c:32:de:1c:4c:a5:42:17:6a:
                    d9:b1:89:ce:cd:93:59:e2:55:17:36:cf:63:e9:f4:
                    66:f3:9e:60:e2:9b:49:6e:0c:a6:9e:79:58:36:46:
                    5c:d8:e3:d8:8f:cb:07:24:cb:f8:88:c1:c5:1d:62:
                    95:72:4d:7e:47:37:1b:e4:19:4e:aa:75:94:46:05:
                    a3:40:b4:cb:d7:01:11:35:c1:7a:fa:e4:c4:b9:b0:
                    e9:91:ba:65:b6:36:28:6e:ce:89:ee:c9:76:a3:9c:
                    8b:af:12:f0:44:bc:eb:3c:00:7c:86:ec:60:38:37:
                    ee:d9:2b:a7:43:57:ab:4e:9f:8c:84:c7:06:ee:40:
                    f8:68:f4:84:37:ef:b1:49:31:25:f1:c1:49:cd:e3:
                    10:ad:91:dc:de:c9:3c:58:b6:68:12:d9:2d:88:21:
                    5c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B2:A6:D8:E0:F9:64:0B:DC:17:8B:02:E7:EA:A2:8F:A4:EC:7F:79
            X509v3 Authority Key Identifier:
                keyid:77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:1c:fd:73:55:48:89:61:60:e6:33:92:44:fe:1c:50:6f:2c:
         33:fe:ff:ea:3c:46:e3:1c:75:52:ba:ad:b7:2e:f0:98:66:2e:
         4a:29:15:9d:8d:c1:cc:94:0d:b4:1c:e6:00:63:05:49:fa:9c:
         17:ed:ad:7f:d4:24:58:55:84:c1:7e:d9:cd:d7:d4:77:68:c9:
         8c:e0:15:f9:18:87:74:28:ad:63:1a:1a:87:72:7b:a3:cf:9c:
         96:a5:96:d1:d9:bb:18:4f:2c:48:7d:a3:05:d8:cb:2b:51:1b:
         26:00:d4:23:d8:e7:3c:05:34:1e:78:15:41:8b:c4:93:be:6b:
         eb:83:9c:1a:f1:a9:a0:75:28:15:f8:a1:58:b7:49:1f:85:7c:
         85:24:60:10:0d:8a:60:a4:fc:b1:5e:c9:9a:ff:36:a0:b5:01:
         cf:41:4d:2c:ab:d6:33:af:e8:aa:35:90:e5:98:6d:74:6c:ff:
         e2:5b:d5:fe:64:0e:a5:13:df:a8:8d:81:15:aa:d0:54:f7:63:
         4b:c1:a0:6b:aa:01:7d:31:42:40:c8:48:2a:a5:c1:1e:02:2e:
         3b:f2:3c:25:da:9b:8a:7d:39:d3:e0:40:c1:72:f7:b6:3e:40:
         31:4a:21:c8:5a:e3:55:a4:d1:40:9a:c7:9c:bb:3d:da:39:39:
         e3:da:ad:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:30:24 2026 by rpki-client