Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
File:                     7UZMdsAZSPh-BOL8X1FnArOQdFY.mft (raw, json)
Hash identifier:          a1xojeBFOWO0cUZ5WnC/FUV9Tk/k4CO1pQ8H5HW8+ZU=
Subject key identifier:   CD:91:78:53:85:5B:EF:37:CF:48:AE:0D:A7:F6:9C:A0:19:65:9C:B0
Authority key identifier: ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
Certificate issuer:       /CN=ed464c76c01948f87e04e2fc5f516702b3907456
Certificate serial:       019DCF74C63D839E48E9239B59E0146F9F29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
Manifest number:          03E3
Signing time:             Mon 27 Apr 2026 15:00:29 +0000
Manifest this update:     Mon 27 Apr 2026 15:00:29 +0000
Manifest next update:     Tue 28 Apr 2026 15:00:29 +0000
Files and hashes:         1: 7UZMdsAZSPh-BOL8X1FnArOQdFY.crl (hash: f4CXKLuNGYnq6AJsbaL6M+axdWM3bj+ESR5pDU8iAKM=)
                          2: P92JZHPtYY3-_599bc_yBXOAyLA.roa (hash: zEkTEvnJRapseTP0KdSkFQigSFFq86JRm4Kqw9lBy+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:74:c6:3d:83:9e:48:e9:23:9b:59:e0:14:6f:9f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed464c76c01948f87e04e2fc5f516702b3907456
        Validity
            Not Before: Apr 27 15:00:29 2026 GMT
            Not After : Apr 28 15:00:29 2026 GMT
        Subject: CN=cd917853855bef37cf48ae0da7f69ca019659cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:65:5c:d1:ba:77:ac:42:b4:00:2b:77:dc:06:
                    cd:fe:ca:01:98:53:ee:07:e1:5a:63:b6:26:dd:24:
                    8b:db:d8:ac:b9:0d:18:e5:f2:5d:18:8b:c4:fb:23:
                    02:26:d5:06:e0:57:fe:55:57:10:93:52:78:29:fb:
                    6d:8c:c5:7c:25:7b:2d:26:3e:89:f6:55:c9:1e:3f:
                    bc:04:58:19:27:cd:30:09:f2:fa:0d:93:72:22:58:
                    e2:13:3d:52:84:e2:30:14:2a:19:ec:74:b3:0e:1c:
                    5d:04:9d:7f:70:31:e6:e3:92:b8:bf:64:f8:64:6a:
                    86:4a:6a:9a:ba:53:d4:bc:b9:cd:65:e3:25:11:67:
                    70:7f:82:22:13:b7:3f:5a:26:21:82:b1:60:56:79:
                    e5:68:c0:86:d5:54:dd:72:e2:18:78:23:b4:6b:e0:
                    28:dc:64:c9:33:2b:91:63:9c:08:01:c7:96:f0:31:
                    97:ea:eb:46:68:58:2e:6f:81:f3:85:e8:eb:a1:ad:
                    7c:30:ff:db:39:e4:51:eb:5e:bf:9a:0f:09:35:ab:
                    23:1c:15:ed:ef:66:04:f0:62:81:d0:70:62:38:29:
                    f5:97:ec:6b:3e:e0:42:29:16:29:c3:ff:b4:b5:de:
                    cf:04:f2:78:df:b9:d1:7a:4e:99:5a:ee:58:24:7e:
                    1f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:91:78:53:85:5B:EF:37:CF:48:AE:0D:A7:F6:9C:A0:19:65:9C:B0
            X509v3 Authority Key Identifier:
                keyid:ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:89:75:09:5b:f7:1f:d3:36:ec:cc:54:03:e4:d6:b1:e3:80:
         10:34:51:9d:89:e2:d1:3e:94:05:2e:d7:9a:dd:be:2b:f2:89:
         19:83:b3:00:cc:5a:f8:f7:3d:47:ea:3c:f8:b1:77:64:62:a8:
         bf:74:c4:41:0c:83:f6:cd:43:1f:2a:15:82:4a:f4:c7:6a:b5:
         b5:90:fc:f7:df:93:2a:f0:20:96:5c:a2:25:bb:99:16:c9:37:
         1a:6c:ec:69:20:ab:3d:74:9f:9c:c8:9c:97:ea:18:79:85:a6:
         bd:cc:90:4f:e0:30:d3:ab:f4:9b:59:5d:42:40:5f:a3:b5:1b:
         9b:61:96:a6:c2:9a:96:de:e6:40:14:e8:ef:80:24:c9:7c:19:
         80:24:37:ca:a3:b5:61:36:5e:12:91:a0:c1:3e:28:ae:45:26:
         ba:ad:60:4f:35:e2:e3:a1:23:48:47:2f:91:dd:91:d6:b9:9d:
         5b:36:40:bc:8d:cf:d0:ad:84:8f:c6:ac:94:2f:bf:20:ca:2f:
         aa:30:bd:6d:95:15:a9:fc:a6:fd:6f:36:dc:6d:50:03:05:15:
         b4:b1:76:d7:77:30:94:86:9c:3e:0e:26:66:95:b3:af:11:4b:
         6f:11:70:33:64:91:04:33:77:55:5b:82:16:25:5f:50:fd:e6:
         d4:78:d5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:20:50 2026 by rpki-client