Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
File:                     V27gKsYF8LuYu81jeprfrkg6boQ.mft (raw, json)
Hash identifier:          cVwTvtJXEByZYoJPt4sdaZ3ZCXXgCNuU5l9feZvlRqs=
Subject key identifier:   AE:FF:1D:92:FC:E3:39:83:26:2F:14:CF:AE:76:6E:FD:59:1A:19:41
Authority key identifier: 57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84
Certificate issuer:       /CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
Certificate serial:       019D9A3ED55F6B62091C5FFDD3E95EC0BFC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
Manifest number:          12B7
Signing time:             Fri 17 Apr 2026 07:01:42 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:42 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:42 +0000
Files and hashes:         1: 0i0XuDvoPgs1nd1NeD83B2IScVA.roa (hash: YNJF/olVt/Dil/zKrwDDUgcE/N5peyDf18kFIpNKPX8=)
                          2: V27gKsYF8LuYu81jeprfrkg6boQ.crl (hash: XjSQUN7G91yVG9SFRMfYAL+noBEyLCbY1zjbEcpA7A0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:d5:5f:6b:62:09:1c:5f:fd:d3:e9:5e:c0:bf:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
        Validity
            Not Before: Apr 17 07:01:42 2026 GMT
            Not After : Apr 18 07:01:42 2026 GMT
        Subject: CN=aeff1d92fce33983262f14cfae766efd591a1941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4e:92:84:53:14:04:37:92:04:4d:db:c5:f5:
                    41:e6:da:2f:1a:6d:9f:b4:3d:2b:9e:71:9f:ba:da:
                    43:85:b4:89:2b:04:41:07:c6:57:b1:8c:e4:13:94:
                    8c:99:c3:6b:37:c5:96:be:6d:1d:dd:c6:e7:85:26:
                    ad:7a:e2:b1:d7:71:af:db:0a:36:35:4f:ac:ff:99:
                    a8:80:32:2d:68:bc:8c:80:dc:58:c5:bf:48:5a:a1:
                    87:3b:a4:34:79:bc:54:12:87:c1:06:30:ac:70:c0:
                    8f:35:f3:ea:48:a3:bb:42:76:39:5b:f0:14:c1:49:
                    f6:28:a8:f5:a2:76:3c:f7:2a:8a:37:98:0d:75:02:
                    da:04:e2:f2:11:04:49:66:52:fa:d2:5c:57:9c:1e:
                    8e:f5:9f:a4:16:f7:1a:16:4a:cc:dd:90:77:59:6b:
                    a4:e3:69:c9:e8:0b:d9:ee:26:6d:de:97:92:bb:bc:
                    ab:24:43:5d:e7:58:aa:55:a2:60:d9:b3:dc:88:57:
                    80:fb:ab:eb:e3:e2:d2:f6:b1:d6:9d:52:67:73:f1:
                    a2:0b:72:a0:bf:76:cd:aa:30:df:3b:6e:5d:46:03:
                    5a:86:bc:07:5a:35:55:19:1a:cb:7d:9b:fc:4e:05:
                    98:61:a5:08:e1:b0:9b:82:86:32:29:29:a6:db:c0:
                    0e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FF:1D:92:FC:E3:39:83:26:2F:14:CF:AE:76:6E:FD:59:1A:19:41
            X509v3 Authority Key Identifier:
                keyid:57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:14:05:1f:9b:13:6b:d1:07:c6:47:67:a5:0d:26:48:2f:ea:
         1b:af:ff:84:89:6b:ac:48:2b:27:0a:cd:49:71:9a:0e:6d:be:
         54:35:34:97:94:d1:31:8a:82:43:06:37:09:bc:ba:86:d0:45:
         3e:48:76:cc:f9:1a:01:c5:82:a9:39:f4:94:42:11:6d:71:2f:
         12:b2:9e:ac:2c:76:5f:7a:b5:ce:c2:95:a2:93:d2:0b:8f:c7:
         75:8f:1f:3d:47:e5:7c:c1:8a:6d:ba:dd:1c:45:11:e7:70:a2:
         6a:a4:8c:14:b9:49:44:75:52:60:bf:c6:5f:5f:d2:ee:5a:1c:
         1f:61:df:3d:fb:b9:49:05:0d:fe:0d:c6:a6:a4:71:1b:20:24:
         55:89:d0:83:e3:6c:d3:92:73:bc:9c:cd:ca:aa:d8:f0:87:91:
         75:ce:f8:69:89:15:41:99:92:40:49:72:f0:0e:fb:94:4c:b0:
         5e:b1:f2:35:70:9e:10:d1:de:21:96:53:d6:42:ed:f5:78:19:
         5a:97:d0:99:c2:65:75:7f:cf:5f:0e:ed:b4:2a:ce:7f:25:a9:
         00:43:09:b9:f3:c5:1b:8f:4c:67:ea:6e:18:6b:0b:91:d8:1f:
         74:a9:38:7a:af:d2:bf:13:b0:22:6e:e5:06:f0:a0:85:18:02:
         7b:23:59:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:43:29 2026 by rpki-client