Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          BhYC9kmTPG5Q0jm7MDs6LNftFGycJ1qa09dnGLfaLTE=
Subject key identifier:   79:26:40:7D:92:4D:74:FE:F6:22:71:20:35:02:E7:A8:A9:B8:CE:0F
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       019D804749854A08A417AA45F3F9E2CD9C62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          0F78
Signing time:             Sun 12 Apr 2026 06:00:48 +0000
Manifest this update:     Sun 12 Apr 2026 06:00:48 +0000
Manifest next update:     Mon 13 Apr 2026 06:00:48 +0000
Files and hashes:         1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=)
                          2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=)
                          3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=)
                          4: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=)
                          5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
                          6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=)
                          7: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=)
                          8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: FFlpx7mTZa6tXIsnHEdFE8a+BBdpCIZEbZ4Ei54rEQ4=)
                          9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
                          10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=)
                          11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
                          12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 Apr 2026 05:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:80:47:49:85:4a:08:a4:17:aa:45:f3:f9:e2:cd:9c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Apr 12 06:00:48 2026 GMT
            Not After : Apr 13 06:00:48 2026 GMT
        Subject: CN=7926407d924d74fef62271203502e7a8a9b8ce0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dd:99:3d:1b:1a:a4:c6:69:76:26:55:22:2e:
                    72:ae:2b:d8:53:a6:f1:2f:a2:12:33:78:be:e1:85:
                    6b:c7:79:09:be:f1:0f:f1:e6:90:80:ca:54:bc:b2:
                    6e:e7:37:2a:8a:1d:46:35:f9:f7:af:11:c7:4c:eb:
                    f5:a5:38:20:7e:f7:12:f3:30:e2:c6:c9:70:e4:92:
                    c3:b3:38:cd:c1:08:4e:fc:06:25:72:0e:6c:19:59:
                    bd:ef:dd:59:0c:67:3a:d5:dc:57:46:df:15:7c:3e:
                    14:24:2d:97:a6:81:04:fa:b4:07:0e:2c:c0:03:f3:
                    4c:d4:b3:8c:0a:98:10:0c:51:44:f2:31:54:f8:f0:
                    87:4a:43:0d:c9:ad:78:b3:60:5b:86:b8:6c:46:7a:
                    23:6f:13:59:cf:bc:c8:3b:c6:af:de:34:a1:98:f3:
                    dc:67:5c:4c:6a:a5:c9:29:20:97:a2:7a:2d:ff:15:
                    31:66:5c:28:ba:35:6c:62:8c:91:d2:8c:59:ac:6a:
                    c9:70:20:0d:2b:32:06:a6:f0:bc:1f:9b:3d:df:e9:
                    bc:e3:22:3b:be:bc:84:99:a0:1e:2a:42:e4:34:ba:
                    4d:fc:67:ac:1a:7e:b8:5d:05:ff:f8:a0:ec:ad:16:
                    78:1e:aa:f4:67:12:97:1a:8b:8d:1c:28:df:99:09:
                    69:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:26:40:7D:92:4D:74:FE:F6:22:71:20:35:02:E7:A8:A9:B8:CE:0F
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:66:38:95:93:51:16:7a:b5:3a:23:60:c5:ae:e0:7f:c9:7f:
         3a:47:94:10:a6:69:fc:7a:31:aa:9e:5b:18:e2:82:13:6c:99:
         8d:b6:83:d8:be:d1:3f:25:ac:93:92:10:d7:16:6c:68:fc:3a:
         4c:db:92:72:36:f7:55:86:70:46:23:7d:d3:a3:fb:bc:6f:60:
         dc:43:69:43:9f:5a:ed:1f:95:a1:d3:b0:88:3d:a5:53:c0:ce:
         04:69:4e:e4:a5:fb:4c:f3:22:66:dd:aa:cd:85:55:42:50:be:
         b2:09:5c:78:c8:0d:90:bf:98:14:cf:dd:cf:07:41:1f:5d:b1:
         cb:81:79:f3:91:c1:cd:c2:70:b4:85:77:c0:29:4c:42:b4:e2:
         77:26:46:c0:aa:24:77:d7:ff:dc:6c:65:0e:bc:74:a1:28:79:
         14:e4:a8:55:d9:bb:fd:06:df:2b:83:95:b5:eb:63:4d:54:7c:
         02:5a:7f:cb:09:e8:5c:a2:03:58:f2:25:da:7c:3e:3a:41:81:
         2b:f7:17:5f:88:37:a8:d7:ab:91:f0:30:18:1c:bb:f5:2c:58:
         56:3c:00:b5:a0:a0:86:ba:63:15:5a:50:df:9f:93:0f:f1:e4:
         03:a8:e6:d1:43:91:b5:aa:e8:05:62:1e:02:87:70:95:dc:77:
         b0:26:2a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 15:04:18 2026 by rpki-client