Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
File:                     KYOEG8CfH9T-PemRAWwLcSb7pS4.mft (raw, json)
Hash identifier:          4t1P7t7TlrNvBWHkRtmq2P7pSZkWS7O4LAGrf7WE9uk=
Subject key identifier:   78:27:F2:28:DF:9E:39:81:75:F4:49:EA:7A:0F:E9:F3:CC:AA:CF:66
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Certificate issuer:       /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial:       019DA0ADCC500833BD35D5CBC0E5583BD54D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
Manifest number:          10F6
Signing time:             Sat 18 Apr 2026 13:00:37 +0000
Manifest this update:     Sat 18 Apr 2026 13:00:37 +0000
Manifest next update:     Sun 19 Apr 2026 13:00:37 +0000
Files and hashes:         1: GW786ZAo9o6aG6R8or6IyYUM610.roa (hash: 5S3yILVPVQsvYnYYATkA7sNaoSvTWdIxhm26IIo2wDM=)
                          2: KYOEG8CfH9T-PemRAWwLcSb7pS4.crl (hash: WFAtLj/YieEkE7kwNveJUWzKDCJ3xTYUXAbUj4hj8J4=)
                          3: cC0R0U3yLfyeHy34sQf62c4Yd5I.roa (hash: Ftp3hYIhod4N2TGi5f485eZqNTbbJ0tpe9F/qj+8t1w=)
                          4: oidyzZNtucuXDORhUnc_enodjqc.roa (hash: DRv8W7PqvucKqgRhrWT7C5z20IqpO4qn8uXxa3BmMhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 09:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a0:ad:cc:50:08:33:bd:35:d5:cb:c0:e5:58:3b:d5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
        Validity
            Not Before: Apr 18 13:00:37 2026 GMT
            Not After : Apr 19 13:00:37 2026 GMT
        Subject: CN=7827f228df9e398175f449ea7a0fe9f3ccaacf66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:1a:3a:b6:78:33:d3:18:68:68:34:b4:df:
                    db:34:94:b1:b7:40:bf:29:24:07:5f:a1:57:49:06:
                    51:33:01:36:5c:8a:5e:94:1a:1a:49:16:41:57:0b:
                    40:24:ed:ec:79:08:0a:5a:76:d5:ad:06:d9:bf:22:
                    20:f7:ef:ef:d0:a9:fe:5b:92:a0:48:c4:3f:bd:43:
                    66:9b:39:c6:aa:a3:fb:25:de:41:38:a4:70:9a:95:
                    33:b7:a3:86:e5:ab:06:75:2f:e1:21:6c:98:cd:e1:
                    5b:d9:1e:51:9f:a8:bb:61:bf:06:45:ba:51:8f:c9:
                    e7:03:99:68:49:59:17:be:b0:46:a1:82:80:3b:ad:
                    fa:a5:5c:ae:fa:52:78:0a:9d:98:14:f9:68:fa:7e:
                    3f:85:a5:c8:3b:41:85:a2:c6:68:48:b5:10:c4:18:
                    4b:b7:a4:77:d4:98:43:94:66:92:47:da:41:e4:e5:
                    4a:0e:23:c4:74:a1:86:2d:c6:95:f4:0c:45:5e:bb:
                    11:d3:82:68:d4:26:d9:76:be:86:96:19:9c:20:7c:
                    d4:3a:c7:8d:e2:d3:81:f5:5e:0e:c8:14:64:59:75:
                    8c:87:e6:bf:2c:49:fc:bb:0e:da:0c:45:48:03:9a:
                    24:25:e8:24:48:65:ab:d0:91:8b:f8:38:67:2c:c8:
                    f6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:27:F2:28:DF:9E:39:81:75:F4:49:EA:7A:0F:E9:F3:CC:AA:CF:66
            X509v3 Authority Key Identifier:
                keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:8b:8d:72:0e:f3:87:33:3e:b3:2d:bd:4f:29:d8:ed:7d:f7:
         64:f1:2c:88:a9:c5:93:da:9f:7a:36:13:61:4f:ec:f7:ec:96:
         f8:a1:89:fe:6e:0b:64:69:0e:44:f0:88:9b:2c:63:16:50:40:
         a1:f7:ec:26:6b:b3:8f:06:b3:c1:a3:d3:0a:24:d1:c4:c8:86:
         67:23:79:81:9d:b7:4f:ec:57:87:70:71:9c:bc:26:6c:e6:2a:
         28:1d:68:09:22:e7:71:d4:2a:c2:b8:0f:a2:c4:94:8b:52:45:
         d9:78:31:04:3a:c0:a8:70:4a:4a:50:7d:72:34:06:b7:78:af:
         eb:df:4f:da:9c:dc:f1:50:0b:b2:3d:cb:bf:b4:49:bf:54:9d:
         d4:4c:64:75:09:fe:71:c4:62:dc:a1:d6:38:71:33:b7:2d:85:
         50:07:38:5b:a7:9f:e8:a5:75:48:66:ed:50:7d:08:c3:33:d7:
         f8:4e:42:5f:85:76:83:11:09:74:fe:69:4a:1b:34:00:8b:8a:
         64:8f:e8:4d:17:61:89:23:cd:46:be:ce:fe:94:fa:2a:36:3c:
         10:17:c4:c0:3a:52:a4:45:8b:e5:63:c2:74:94:f4:54:90:25:
         bd:65:a2:38:ba:ca:b5:5e:3e:75:32:cb:87:85:b2:70:5a:47:
         b4:bd:aa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 18:26:12 2026 by rpki-client