Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
File:                     S-iWpBlThdS5S3KVmIzPv6ismcU.mft (raw, json)
Hash identifier:          6b0W/DrEaY+8xnlsld/Xx6UH02uFzjqi6JQZbPzEVSA=
Subject key identifier:   DD:E3:77:BC:33:23:BE:58:F7:FD:28:CA:6C:48:47:DE:60:7A:BA:27
Authority key identifier: 4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
Certificate issuer:       /CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Certificate serial:       019D97E18AEDA74731657B3DEE8E8CBEB2A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
Manifest number:          0F55
Signing time:             Thu 16 Apr 2026 20:00:33 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:33 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:33 +0000
Files and hashes:         1: FSFyylYZoJ__LJ0VFZP-2aItmuE.roa (hash: 4TUbcjRKjpEozpWO2rDakc6T9yJDVcy+nvZz/pOEz9A=)
                          2: S-iWpBlThdS5S3KVmIzPv6ismcU.crl (hash: C/6QWR7T9W8gDbUx3M9i56Rd6IyEFXg5+LtpmOAPBM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:8a:ed:a7:47:31:65:7b:3d:ee:8e:8c:be:b2:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
        Validity
            Not Before: Apr 16 20:00:33 2026 GMT
            Not After : Apr 17 20:00:33 2026 GMT
        Subject: CN=dde377bc3323be58f7fd28ca6c4847de607aba27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:27:22:f6:50:65:c5:c2:91:5d:63:55:33:68:
                    e0:ae:a3:a9:c0:e0:22:b0:a2:c7:76:ba:70:0f:ac:
                    04:c1:1e:ac:15:8a:46:8b:d0:3f:e0:ed:89:64:63:
                    1c:b1:f5:a2:89:93:c8:8a:ab:0a:66:68:0e:49:74:
                    a0:fb:8a:a8:8b:e9:37:7d:c7:b4:ca:96:9d:47:2d:
                    5e:89:bd:9b:c4:2b:d6:48:bf:5c:8a:5b:a0:cb:f0:
                    bc:41:83:6e:f1:cf:6f:0a:f8:6e:85:fd:67:ad:e9:
                    2c:03:01:43:0f:31:17:81:ed:95:90:97:d3:d7:dd:
                    34:bc:32:99:85:18:d6:4b:36:4b:b8:73:18:2e:01:
                    07:8f:cc:e2:b9:ed:2b:5d:0b:d7:b5:46:74:f6:a9:
                    10:95:ce:cf:34:65:a2:d3:3e:4a:2a:91:26:0d:66:
                    2e:77:1f:07:46:ad:fc:f5:90:81:a7:b2:09:83:d4:
                    23:96:d5:6c:60:d2:7f:e7:12:9b:94:f2:29:71:d9:
                    a1:74:77:08:f3:a7:59:e4:e9:45:93:9d:ce:c1:1e:
                    d9:dc:de:b0:60:06:2f:b9:15:2c:b4:c1:bd:fe:30:
                    82:7e:b1:05:22:f8:45:5f:93:c7:72:b3:d2:22:8a:
                    96:3e:1e:10:b5:3c:97:ee:d5:a5:a7:cb:ce:2d:db:
                    84:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E3:77:BC:33:23:BE:58:F7:FD:28:CA:6C:48:47:DE:60:7A:BA:27
            X509v3 Authority Key Identifier:
                keyid:4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:8a:ab:df:e7:5b:ab:91:e6:8e:dd:6a:7d:da:e7:62:9f:10:
         b4:6c:b9:d9:4a:36:81:0b:1b:ea:89:8d:78:02:90:b3:f0:8f:
         3c:29:1e:5d:69:5d:46:14:13:4e:fa:4f:8d:2a:be:8c:ec:58:
         43:27:6b:27:f9:b2:12:f0:33:99:51:84:a1:4d:f3:9d:4c:32:
         b0:60:47:f2:b4:cc:5f:7e:66:5c:7a:98:b7:e8:3b:c6:79:03:
         38:e1:c0:f9:fc:71:73:1e:f8:f0:c8:3f:af:70:f8:fc:fc:f5:
         38:5a:2a:fa:a3:b6:0b:ef:6b:24:28:f4:21:16:0d:30:2e:4e:
         49:38:f9:48:50:d8:27:fc:27:c0:48:f0:41:c4:27:b1:19:ac:
         be:7d:ae:4f:74:af:31:f3:69:34:d3:dd:67:0f:b5:bb:46:9d:
         05:5f:e8:ae:15:65:43:32:c9:e0:a6:31:3a:c1:97:ec:94:54:
         c8:3a:1d:16:f5:f6:ff:fc:90:61:8f:96:ef:2c:86:0f:c5:77:
         90:9f:d0:1f:12:04:7a:b9:a8:3c:98:f5:89:c7:81:c4:3e:da:
         b1:ae:3d:18:b2:50:dc:f9:23:b9:a8:2d:75:44:2f:76:d7:57:
         43:3e:b3:92:96:00:45:25:09:ac:b5:8d:8a:58:b2:ca:b5:5d:
         b9:d2:10:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:40 2026 by rpki-client