Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File:                     RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier:          MT5g8kOPHoCSVKFrvdi+E6704M1UBRbb9JhjRtEauxw=
Subject key identifier:   27:B6:67:A3:48:76:DF:0B:98:90:AC:39:37:99:13:53:08:68:51:ED
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer:       /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial:       019D84FFAF22EF662C0B2DBB74AB0A9A3644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number:          18E3
Signing time:             Mon 13 Apr 2026 04:00:42 +0000
Manifest this update:     Mon 13 Apr 2026 04:00:42 +0000
Manifest next update:     Tue 14 Apr 2026 04:00:42 +0000
Files and hashes:         1: 8Tje-qV6QLUefgoToblFnjxFOug.roa (hash: RaGHLexPAGlKd+1GFvQT68V+7VmWYOnxyCrKQ89UTuM=)
                          2: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
                          3: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: HgIgB4Qe6dtvksku+a1fdNpq3qUL1M/yIgtIrW3INqE=)
                          4: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
                          5: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
                          6: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
                          7: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 Apr 2026 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:84:ff:af:22:ef:66:2c:0b:2d:bb:74:ab:0a:9a:36:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
        Validity
            Not Before: Apr 13 04:00:42 2026 GMT
            Not After : Apr 14 04:00:42 2026 GMT
        Subject: CN=27b667a34876df0b9890ac3937991353086851ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:51:03:a1:37:16:71:2e:4a:be:a3:63:01:a2:
                    92:a0:d0:86:e3:46:49:bd:20:e1:c9:2a:3f:6e:67:
                    31:3e:21:30:be:7f:20:0f:46:33:b2:9c:1e:b6:e8:
                    7d:c1:d6:b6:71:01:4a:b7:c1:4c:f5:5b:75:9a:a8:
                    b3:51:75:db:a8:98:4f:98:65:4a:54:11:88:1d:d4:
                    ca:65:09:5c:5d:c5:24:b1:e9:cd:3f:75:e7:a3:aa:
                    7f:06:8c:01:0f:e8:2e:e5:da:1f:b8:70:86:ab:2b:
                    77:db:f0:07:70:19:fb:1b:f9:04:c0:1d:ed:39:8f:
                    f6:69:c6:a9:9b:40:94:32:ba:0f:8e:fa:c0:2f:e9:
                    81:49:38:35:de:26:ee:7f:c9:46:04:8c:18:1d:0d:
                    c4:0d:ad:0a:05:da:50:91:39:db:59:1c:fc:74:bc:
                    a1:61:92:a5:10:93:81:17:f6:2f:7d:e6:86:b6:53:
                    2a:88:30:f4:e1:2c:a7:53:57:00:fa:d6:54:b0:9f:
                    18:6f:e0:1b:7e:dd:97:aa:fe:61:8b:50:76:64:27:
                    bf:04:de:f6:67:27:4f:4e:c7:aa:e6:18:1f:f1:f5:
                    eb:32:e0:df:5b:71:2a:d5:94:19:82:bd:ca:d2:57:
                    9e:0b:6b:8e:f5:62:54:9a:3b:77:14:6d:c2:1a:5d:
                    aa:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B6:67:A3:48:76:DF:0B:98:90:AC:39:37:99:13:53:08:68:51:ED
            X509v3 Authority Key Identifier:
                keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:2a:3b:bb:bd:b5:03:44:c3:ee:bd:2c:3c:9c:28:f3:dc:f5:
         0e:08:33:7f:fd:a5:94:73:02:23:8b:8e:9e:e0:b4:39:e0:71:
         d6:c4:4f:7a:f8:97:70:d5:0e:1b:7d:da:df:03:7a:c8:2b:f8:
         91:f2:c4:1b:4b:0e:3c:cc:ed:44:fc:10:51:eb:26:6b:89:ae:
         3c:dd:af:1e:f9:d0:aa:44:a0:ef:a2:64:0b:e1:e8:8c:55:ba:
         f1:9e:09:2b:a3:a7:01:e6:25:8e:38:b2:2a:b7:77:9b:44:a6:
         4c:5a:3a:ca:2f:fb:2b:d8:90:4e:57:b5:f1:43:b8:a9:cf:ab:
         79:c7:0c:15:b7:ab:75:36:e1:1a:33:39:d8:35:92:2f:ca:f8:
         36:e4:2b:32:51:ad:4d:b9:f9:51:eb:42:5a:db:40:a7:cf:3c:
         74:66:33:72:69:2c:a5:29:be:fa:9f:da:c7:8e:ca:73:cf:1d:
         68:dd:f7:e0:f9:bb:a0:b1:c9:45:fc:b6:8c:62:86:26:1d:97:
         fc:22:41:f3:67:f1:61:dd:46:f6:df:5f:8e:ab:29:df:d3:fd:
         0c:d8:d1:27:de:45:6b:40:e9:be:e9:a2:28:5a:28:9a:8e:c8:
         7e:11:99:f7:4f:55:14:9c:8b:83:fb:bd:37:df:da:f4:3d:bd:
         af:29:e8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:57:30 2026 by rpki-client