Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
File:                     v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft (raw, json)
Hash identifier:          kIZOiwVjj4UpH7+35mNn+TdIKXdBRNeqZcyfk53xWtY=
Subject key identifier:   9E:1E:15:3B:89:37:D3:A0:25:7E:BB:FB:19:09:9C:D7:60:F1:24:90
Authority key identifier: BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3
Certificate issuer:       /CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
Certificate serial:       019D9B50D3C85C73C823AFC33F8FC650A55A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
Manifest number:          101E
Signing time:             Fri 17 Apr 2026 12:00:58 +0000
Manifest this update:     Fri 17 Apr 2026 12:00:58 +0000
Manifest next update:     Sat 18 Apr 2026 12:00:58 +0000
Files and hashes:         1: iBJ31yh-XKNto6qwkr_lk9nm8Ik.roa (hash: YPdFv2hCP/PkOD/9i/Bu7OVfZju2bdOQgcBdgpKIrw0=)
                          2: v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl (hash: znduhJWweTCMvs1wsTnPj/RkwmWnCwzkH9TeYWz5x1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:d3:c8:5c:73:c8:23:af:c3:3f:8f:c6:50:a5:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
        Validity
            Not Before: Apr 17 12:00:58 2026 GMT
            Not After : Apr 18 12:00:58 2026 GMT
        Subject: CN=9e1e153b8937d3a0257ebbfb19099cd760f12490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:46:e2:86:75:1a:37:88:90:a0:03:75:8b:7d:
                    f3:93:ea:ac:35:c2:47:de:71:f8:0f:d5:44:97:c8:
                    db:14:9e:88:b4:0c:a7:76:8f:2e:9d:75:af:ec:75:
                    80:14:2b:d5:21:9d:fd:43:f5:dd:d6:22:09:cb:d3:
                    b0:47:cc:fc:f0:10:16:be:1a:36:fd:86:94:97:81:
                    a2:71:26:72:26:fe:92:bf:a2:4a:a5:e8:08:39:c2:
                    5d:58:da:3e:7e:48:ca:56:27:b6:cb:3a:d5:1e:b8:
                    58:79:f7:df:c6:ba:5e:af:38:08:2e:29:07:3c:20:
                    21:9f:e4:5e:d1:96:0c:e0:a0:b7:e7:cd:a5:f5:4a:
                    78:fa:e2:fc:81:17:5b:ca:47:0b:d2:7e:3d:f4:ff:
                    1a:8d:b6:32:43:0c:e2:6b:3c:0b:6b:d8:d1:28:2e:
                    42:ea:c0:8d:75:30:7f:ac:e4:8b:f0:6e:ec:87:48:
                    af:49:46:8a:b0:b8:38:9c:df:02:b2:34:f2:0b:2b:
                    b0:e7:ae:37:b1:8d:87:46:49:f7:22:1d:73:fa:43:
                    9e:82:60:f4:9a:61:d6:63:24:f9:23:b7:bf:ba:e8:
                    c0:28:86:29:be:f7:c0:a5:55:9f:1a:72:5c:c5:bb:
                    c4:de:47:63:9f:f3:12:a7:02:9a:75:87:b6:a8:3d:
                    c4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1E:15:3B:89:37:D3:A0:25:7E:BB:FB:19:09:9C:D7:60:F1:24:90
            X509v3 Authority Key Identifier:
                keyid:BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:1b:5d:f0:fc:b4:ba:be:42:7f:22:79:70:89:f2:c1:f1:45:
         8d:08:cf:98:d7:09:d2:38:2a:0c:f9:11:46:5b:f9:95:8d:a4:
         d2:73:46:c2:36:47:ab:be:14:3d:77:1a:fd:0e:d8:dc:27:5f:
         f7:bc:2f:6e:fe:c3:44:40:66:8b:06:96:4f:8c:19:3e:c8:6e:
         5c:c8:c0:56:fc:16:b0:0b:2c:63:ac:5c:79:25:11:6c:a2:e0:
         3b:c0:3f:b2:c8:03:a1:23:3e:88:72:19:64:54:7b:ec:67:90:
         af:45:8b:ae:0c:5c:cc:27:b2:56:33:ec:ac:8c:30:6b:4b:5f:
         e8:56:37:24:94:d3:0c:c6:1e:63:f9:32:05:09:55:5c:d7:f0:
         cf:10:0c:28:ca:a2:e0:72:23:db:7e:f2:30:91:ea:80:53:84:
         c0:a0:61:5b:cc:d6:ea:e7:73:f5:97:53:87:5b:6d:33:ce:19:
         05:c2:6c:6e:37:ac:80:c0:ae:58:87:61:74:28:32:af:fc:b3:
         0e:0a:ec:08:10:b2:e1:c5:84:d5:29:22:0a:39:e3:28:11:4d:
         4e:99:a2:2e:fe:85:13:d4:df:4b:15:15:71:fe:3d:f2:d6:a1:
         7c:55:74:6d:32:3c:d0:12:d7:ef:c7:e0:16:32:e2:04:d1:7f:
         f8:39:21:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:49:48 2026 by rpki-client