Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
File:                     G1NNR62NtYlKX8k0LkVY-U5PF_E.mft (raw, json)
Hash identifier:          Lj0DdxE2BdHdRB4y7OBRYTc3hvVnEL11gstnm7jmx2Y=
Subject key identifier:   35:94:28:3B:1C:C5:05:6A:76:D8:FE:DA:69:DA:88:56:0B:E2:30:61
Authority key identifier: 1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1
Certificate issuer:       /CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
Certificate serial:       019DCE992DE694CFA41B91F0FBD5C1B3050B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
Manifest number:          1833
Signing time:             Mon 27 Apr 2026 11:00:38 +0000
Manifest this update:     Mon 27 Apr 2026 11:00:38 +0000
Manifest next update:     Tue 28 Apr 2026 11:00:38 +0000
Files and hashes:         1: AovjLMzZvMdo98oRLMX3UQFhYGU.roa (hash: Pirq+8jQHRZFAz4jyR41JVpLGoXjS83ipQMbfBRQoac=)
                          2: G1NNR62NtYlKX8k0LkVY-U5PF_E.crl (hash: n81SRGWGsBOLn6yyIzQnS0kdqpsrPGgOFqEkM1ztA54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:99:2d:e6:94:cf:a4:1b:91:f0:fb:d5:c1:b3:05:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
        Validity
            Not Before: Apr 27 11:00:38 2026 GMT
            Not After : Apr 28 11:00:38 2026 GMT
        Subject: CN=3594283b1cc5056a76d8feda69da88560be23061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ad:cd:c3:d2:7d:2a:08:9f:48:42:74:d1:6a:
                    a7:71:2f:4c:23:36:7f:57:42:e5:bf:c5:4d:1e:02:
                    bc:3f:6c:3e:12:4d:e1:77:b9:61:5b:ce:2e:b7:c9:
                    05:3d:27:b2:db:0b:59:48:1e:d2:40:96:96:b5:9b:
                    37:18:4a:60:8b:42:4c:8a:f1:ee:cd:4b:1a:b6:ae:
                    87:33:bb:3a:99:ef:dd:52:7e:8f:1e:6a:ed:0d:f8:
                    37:ec:6e:88:18:f6:01:4e:38:33:3b:54:d6:e7:b1:
                    d1:94:b2:3e:4d:75:11:b9:fc:bd:c5:2c:98:c5:47:
                    b9:17:d8:e8:0d:25:ec:24:6e:57:9d:30:b5:2c:50:
                    32:1c:95:9a:cd:73:51:5e:a6:b5:e5:e0:f5:2d:bc:
                    25:bf:de:13:a1:38:62:b9:5c:f6:6a:e0:8c:30:c3:
                    13:c1:e5:e9:31:cc:b9:99:b8:be:dc:c8:55:e2:90:
                    9f:08:a8:e3:7a:5c:1a:bb:1c:ae:52:2c:76:a2:67:
                    47:77:8f:a2:25:a7:9a:2e:ce:79:e9:56:74:c8:1c:
                    da:d6:e5:e1:99:33:fc:d2:22:f0:82:ad:50:7a:0a:
                    88:b2:fb:66:fe:07:9a:12:f4:6d:98:d1:9d:7a:00:
                    27:bb:21:06:d1:63:82:0c:0d:3f:37:30:48:c3:9c:
                    bd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:94:28:3B:1C:C5:05:6A:76:D8:FE:DA:69:DA:88:56:0B:E2:30:61
            X509v3 Authority Key Identifier:
                keyid:1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:6e:29:39:f9:b9:82:5a:bf:6b:fd:6a:3d:a3:80:a1:ed:4e:
         77:5a:c6:07:01:60:dc:a5:99:ea:3c:22:54:76:cd:12:2d:3a:
         e4:8d:a1:f0:69:28:56:2b:29:86:8c:c3:49:eb:64:7e:8c:66:
         4a:60:a7:4c:e7:4d:41:36:a2:1b:bf:2d:07:de:29:1d:61:ab:
         ba:22:ba:62:fc:a3:1c:f1:17:5f:23:d3:9a:0b:72:cf:8f:d1:
         d1:1a:ed:40:ad:18:1f:32:7a:cc:03:18:ea:f4:9c:3e:c2:aa:
         04:d6:9d:16:b6:2b:1d:3f:22:2f:85:57:8d:7e:8b:1f:2d:7c:
         23:ad:26:92:4b:9a:05:35:bc:a3:16:ec:a2:63:6d:63:d9:73:
         85:a4:09:7f:68:26:63:8e:51:5d:f5:4d:59:a7:d2:b2:2d:f5:
         4c:31:81:07:51:c4:44:04:22:55:b4:a9:fd:f9:67:59:66:fe:
         11:03:f8:ae:52:79:6b:2b:1e:1a:4f:b5:37:33:f2:fe:32:7f:
         3e:81:53:13:70:1e:09:91:12:14:50:a6:ee:02:f5:65:22:86:
         fc:a7:4d:ec:7f:61:4a:df:9c:b2:0d:5d:ba:5c:6c:79:8a:0f:
         db:a2:b3:44:dc:79:7a:0f:87:fc:0d:a7:08:df:b4:bd:5f:31:
         b0:fb:22:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:43:44 2026 by rpki-client