Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft
File:                     V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft (raw, json)
Hash identifier:          Q3Wkd/QzkPd3bGWzifJFq3r+0tLLuWYMAyu9JonNSeA=
Subject key identifier:   BC:B8:80:66:3D:C8:4A:9A:2C:AC:D9:52:F0:B4:CF:34:48:06:E7:EF
Authority key identifier: 57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17
Certificate issuer:       /CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17
Certificate serial:       019D9B1963D1D967F3DBE9A1F5D936B8C065
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft
Manifest number:          0A21
Signing time:             Fri 17 Apr 2026 11:00:25 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:25 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:25 +0000
Files and hashes:         1: Cvexc6n_uaJqIFgYm7_CN9EvFWs.roa (hash: V6TWQDQCL4p57Dn11RRTnLLY4bcDgYRYhxlGQOOXZvA=)
                          2: Ru7va_Vz6UDjrCvvmLqxDtAmWbg.asa (hash: uCH0S7Bi6XhkmZ/UGcodBS+tgfj5oqX7aHyO8FrDHcU=)
                          3: V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl (hash: nwMryG3uDeGRzEKCPcqKRkfDH6UbqiA8VVToTx/nyIU=)
                          4: f7kvzs2-zb2KOzlFjVCuZ2HegcA.roa (hash: TQasGYVjwG88rEbuO7YJL0ynVBS+O5FZb9ZMc3XfwoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:63:d1:d9:67:f3:db:e9:a1:f5:d9:36:b8:c0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17
        Validity
            Not Before: Apr 17 11:00:25 2026 GMT
            Not After : Apr 18 11:00:25 2026 GMT
        Subject: CN=bcb880663dc84a9a2cacd952f0b4cf344806e7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2b:9a:66:a2:f4:f3:c8:b7:85:cf:e8:3c:39:
                    99:b8:d9:79:d8:f4:e3:1e:93:15:6b:b1:1d:58:8a:
                    ff:4d:40:58:40:bc:de:e8:10:64:65:f7:0d:c7:cf:
                    e0:c0:31:63:91:11:46:75:66:90:8b:45:e8:b5:2c:
                    f6:3c:41:38:5e:40:53:8f:27:78:9a:20:38:81:b6:
                    1b:01:fd:3c:56:45:cd:04:30:23:43:de:7d:dc:44:
                    69:c1:d9:79:11:b1:f3:df:a9:ed:d2:59:a7:26:d7:
                    30:72:c8:c8:b4:c8:1f:a4:91:5c:4f:c0:88:ea:e0:
                    f5:89:84:c7:1e:cc:e4:0d:6f:13:d3:17:36:37:1b:
                    45:8b:ac:c2:a6:bd:ce:31:3c:a1:98:be:13:ac:cd:
                    74:f6:2a:42:d4:e6:e1:68:3a:64:aa:72:08:28:af:
                    4f:89:26:6d:8e:fd:46:73:af:b9:c6:41:b5:4d:4c:
                    49:ec:a9:1d:d6:22:7c:3d:6e:4c:05:0e:f1:e7:b8:
                    de:66:a3:f4:e1:c7:51:e7:69:48:85:1a:c5:d8:26:
                    80:60:aa:2c:3a:6b:a8:0f:fe:f7:b5:5c:8c:c5:f6:
                    0d:45:58:50:d9:64:46:57:96:ea:98:17:07:cb:bb:
                    a7:e8:6f:86:3a:4f:1b:e9:35:50:41:a2:4f:e1:96:
                    6c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B8:80:66:3D:C8:4A:9A:2C:AC:D9:52:F0:B4:CF:34:48:06:E7:EF
            X509v3 Authority Key Identifier:
                keyid:57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:37:7d:4d:8d:61:23:d1:bf:b7:85:74:39:24:91:5e:a4:18:
         95:da:90:6d:bc:eb:16:98:37:59:98:ce:2a:de:f2:61:8d:f8:
         cc:f7:5c:57:09:3a:a0:c0:d9:77:80:f9:6b:5b:6e:01:13:19:
         8f:8f:76:e1:04:e0:31:12:05:c7:af:aa:10:5a:74:18:38:8c:
         50:0b:26:ca:ae:d0:13:cc:a3:2a:d2:01:0c:63:1c:85:d0:e2:
         5f:08:fa:cc:0f:a8:92:14:28:96:17:0e:79:0e:06:d4:c7:12:
         8b:4d:4d:10:80:ad:48:17:48:91:2a:1c:c2:60:68:b1:45:1d:
         6a:9e:a1:08:35:f0:e9:2c:d3:33:56:a4:cb:56:14:e4:e8:a9:
         d5:29:be:a6:93:63:d9:c3:a7:55:4c:85:0d:62:a8:f2:33:d6:
         5a:48:e4:9d:f9:ba:5f:cc:ff:3f:60:7b:4e:07:12:85:99:c9:
         55:b3:de:dc:ec:bf:24:e6:4a:29:ee:4b:35:3c:02:81:46:d9:
         e7:e7:94:f1:84:7b:ec:23:13:6c:a0:71:59:b1:1a:e2:8b:61:
         2b:2d:94:b5:c1:95:3a:c4:25:e9:da:61:99:32:ea:7d:48:73:
         38:ac:1c:88:e4:bb:e7:b5:7d:cb:3b:dc:59:70:8f:5b:60:a8:
         e2:1e:fe:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:03:19 2026 by rpki-client