Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
File:                     7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft (raw, json)
Hash identifier:          J9if/5shDrDS40Yb2jJerNdcUJ/i+9RT9ES4I+XF4YU=
Subject key identifier:   ED:48:3C:4B:B6:27:7A:3A:2C:F4:F9:60:B0:2B:1C:0B:2A:17:8F:0B
Authority key identifier: EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
Certificate issuer:       /CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Certificate serial:       019DCED00F1918AF04BE7FF892B480237018
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
Manifest number:          1747
Signing time:             Mon 27 Apr 2026 12:00:34 +0000
Manifest this update:     Mon 27 Apr 2026 12:00:34 +0000
Manifest next update:     Tue 28 Apr 2026 12:00:34 +0000
Files and hashes:         1: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl (hash: XzlvX5muwEj2lDP4zT6Jymq/eTdb7lxRRL0oKNUQU3E=)
                          2: JKtuYAZj6V_iBv09WZvX1K5boYU.roa (hash: cKfPg8sNS79bgJa5PrvUDPTVTEFYtl+oJ3wNQ/Dq8wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:d0:0f:19:18:af:04:be:7f:f8:92:b4:80:23:70:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
        Validity
            Not Before: Apr 27 12:00:34 2026 GMT
            Not After : Apr 28 12:00:34 2026 GMT
        Subject: CN=ed483c4bb6277a3a2cf4f960b02b1c0b2a178f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:43:59:7d:6b:46:4a:63:f0:4a:55:8e:c0:
                    88:9e:23:f6:9d:2a:b8:c4:74:df:af:79:48:ec:92:
                    12:16:fb:21:7d:7a:ba:c8:83:c9:df:a6:d5:26:ff:
                    a6:59:84:07:5f:a9:ec:05:bf:f1:e9:18:e6:67:53:
                    15:fe:bf:56:d0:d6:9e:b7:7b:a4:10:01:c6:2c:8a:
                    99:b1:74:b6:80:c2:ba:d7:36:28:2d:9e:3e:98:90:
                    ed:dc:42:b3:bf:8b:c8:aa:1d:08:81:1e:16:9b:bd:
                    ee:2b:5f:75:99:a3:d1:67:7a:ad:a0:3f:9d:e9:e9:
                    14:9e:0f:7a:33:6e:21:c8:7d:4f:84:a0:44:dd:46:
                    92:6e:09:76:c5:85:bc:9f:c1:29:d6:87:fe:d7:98:
                    a6:cc:08:27:64:68:de:d2:39:54:58:35:f1:5b:ab:
                    24:e5:2f:93:5d:8d:4a:99:8f:30:11:8f:f8:7a:4b:
                    d9:0a:63:7d:3a:24:c6:73:10:ad:30:84:26:06:4b:
                    02:be:1b:17:bf:00:1f:32:3c:c9:0d:b4:55:c0:5b:
                    75:b0:d8:43:a6:d0:99:2a:82:68:5b:48:0e:c4:da:
                    5e:e8:40:6c:a4:a9:29:cb:67:2e:9a:4a:6b:c6:37:
                    e2:75:2e:63:20:60:46:48:2f:8c:a6:f9:89:05:6c:
                    1c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:48:3C:4B:B6:27:7A:3A:2C:F4:F9:60:B0:2B:1C:0B:2A:17:8F:0B
            X509v3 Authority Key Identifier:
                keyid:EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ff:e4:90:bc:6e:d3:e3:8a:00:ac:e7:de:7b:45:e2:d1:db:
         3c:0e:e8:89:7b:67:95:79:33:d0:7e:04:10:1a:1e:e2:1d:75:
         34:1c:2f:cb:1f:22:80:f1:17:6b:ce:53:c0:fc:fa:6a:04:1c:
         4a:a6:72:ae:22:9c:9d:ae:b5:50:bf:b3:45:9c:c9:1a:46:a3:
         81:64:7f:de:ba:88:28:59:28:22:61:b5:77:10:ec:d6:fe:54:
         ce:75:53:0d:67:b6:31:df:2a:0b:34:79:2f:d9:c4:90:e2:12:
         5b:d9:55:32:99:36:d0:c5:6c:27:ef:a4:1f:08:44:8d:13:48:
         6f:2c:7c:c1:12:d0:41:ad:b6:a8:97:69:a2:0e:24:30:d6:13:
         5e:08:e3:3d:5a:0f:57:77:9b:e6:2c:32:cb:7c:c5:c8:cf:95:
         fe:6d:d9:6e:39:cb:47:f8:80:b9:eb:e6:bf:b4:f4:c5:cd:0b:
         a0:1d:47:ff:3a:92:0f:66:dc:d6:82:c9:05:04:3f:85:8f:c5:
         62:49:0d:35:fc:83:4a:c2:fb:0e:ec:91:fb:e0:5b:b9:50:ef:
         02:fb:d4:07:ea:59:22:f8:4e:aa:60:b6:d4:4d:a7:53:99:b3:
         83:ed:e2:09:11:a4:d1:36:e9:43:73:56:41:e6:16:07:3b:ac:
         d5:17:36:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:31:44 2026 by rpki-client