Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
File:                     fVllljYInjIyRpdinCGNo4orZz0.mft (raw, json)
Hash identifier:          WFfTqNrybglGK9SFpuXX0xFfZdqPDHb68+Zqmk0vs5o=
Subject key identifier:   76:04:2D:C1:56:A0:99:1A:DA:B3:F0:5F:A6:42:44:7B:08:96:CB:F2
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Certificate issuer:       /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial:       019DCD18B2C869AC4FEB18B7F0ADE682B58B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
Manifest number:          1718
Signing time:             Mon 27 Apr 2026 04:00:41 +0000
Manifest this update:     Mon 27 Apr 2026 04:00:41 +0000
Manifest next update:     Tue 28 Apr 2026 04:00:41 +0000
Files and hashes:         1: 6rNJQsn9nenf7gQdwKGULkmO48g.roa (hash: 07pBJi7Nc/k7+K1BPHdbPiHNkGiQWcczdjGOzLq8Sbk=)
                          2: 7c37mQO9hber9Y9a4WDKVYTKyGs.roa (hash: h/wnhDSGEGx3npO9CQ/X4FjS1+UA0bB6gXGJME9onWs=)
                          3: B3wonFQq_huZTMz-8wuSey9Fs1I.roa (hash: JnpdkfXYgXXAYDW/V89kghjchKm1vbi2ArxR3XgZ6B0=)
                          4: fVllljYInjIyRpdinCGNo4orZz0.crl (hash: gZtwuPaUuxMHuMTgLQIOr2byhOERD1q2FgsB0++C5us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 04:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:18:b2:c8:69:ac:4f:eb:18:b7:f0:ad:e6:82:b5:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d59659636089e32324697629c218da38a2b673d
        Validity
            Not Before: Apr 27 04:00:41 2026 GMT
            Not After : Apr 28 04:00:41 2026 GMT
        Subject: CN=76042dc156a0991adab3f05fa642447b0896cbf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:52:fa:7b:22:b2:97:10:06:60:f2:79:7a:5f:
                    00:d2:81:fd:a5:0b:d9:0d:04:64:81:b9:c3:a0:fe:
                    f2:ae:b2:d4:b9:a4:96:a2:76:36:e0:2c:36:4a:db:
                    66:2f:9e:72:d4:c1:55:28:2d:48:68:9f:15:29:3f:
                    3e:fa:8b:a8:a3:15:b5:9d:84:9e:a5:eb:29:12:e0:
                    f4:d8:f1:3b:20:36:62:30:30:09:f8:34:5c:75:fb:
                    22:ed:15:49:29:43:19:fd:45:4b:37:90:0d:7a:5a:
                    18:f3:c8:07:28:6e:47:b8:7d:5a:78:db:1b:98:a9:
                    cc:cc:32:6d:11:52:be:fe:4e:04:bf:35:a6:f7:90:
                    f9:9e:5c:a7:bd:cf:42:db:2e:cb:a6:75:24:64:33:
                    cc:ea:17:d1:20:7c:3b:72:c1:4d:17:7f:31:5b:0f:
                    56:bc:42:34:a2:58:7f:82:1c:b9:5b:48:fa:80:f3:
                    91:3f:ab:0f:03:9b:c5:92:be:92:08:cb:6e:d4:48:
                    e0:5f:b3:de:9a:d6:f3:05:c5:60:39:4b:57:8e:a1:
                    57:80:94:cf:d8:60:05:5f:f1:7e:7a:5b:d4:33:f0:
                    b6:aa:db:9b:c4:1a:d5:c0:03:54:dc:d5:9e:d8:d3:
                    0a:ec:0d:7e:84:53:a5:77:cc:19:d5:35:00:5a:3a:
                    c3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:04:2D:C1:56:A0:99:1A:DA:B3:F0:5F:A6:42:44:7B:08:96:CB:F2
            X509v3 Authority Key Identifier:
                keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a3:3c:de:4c:d3:71:a0:4f:6e:0b:bd:b7:6c:cc:0e:2f:62:
         73:07:39:fc:c5:9e:24:f0:1e:b0:ff:49:28:cc:bd:09:27:ff:
         4d:f8:af:ae:f2:ce:db:67:3c:4b:9a:77:82:69:9a:7e:f5:32:
         d7:61:45:7a:83:93:5d:f3:e6:65:f2:ee:0a:1e:6f:11:86:cc:
         28:30:4c:29:02:14:51:94:4e:10:ac:56:e7:ee:e2:3b:28:d9:
         b1:a3:9d:de:94:45:aa:c3:2c:ae:03:df:c6:87:fc:31:00:39:
         24:73:63:b5:1d:79:2c:9a:f0:45:68:3d:2e:e9:da:f4:ae:60:
         82:cd:1c:76:37:e3:65:29:26:d7:23:67:ba:a0:eb:b9:c7:df:
         f5:9d:1b:d1:54:5b:3d:95:0f:a0:bc:d0:03:fe:c0:0f:b9:38:
         91:18:e6:49:65:dc:86:3f:e7:90:8f:ef:62:1f:38:0a:df:30:
         ca:d9:fe:55:ec:50:a7:bf:86:69:aa:c0:4f:68:c3:c6:b9:26:
         ca:2c:6b:f8:43:f6:60:1a:76:b9:79:dc:cc:e0:02:3d:3d:8e:
         6a:fd:1c:74:25:8b:4f:20:fb:87:5c:82:39:19:ec:f2:29:89:
         61:f6:f3:03:32:5e:46:3c:16:26:07:72:38:dc:44:24:45:86:
         f9:c4:34:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:31:10 2026 by rpki-client