Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
File:                     Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft (raw, json)
Hash identifier:          Q3V/myB7da4+BoFXvp81rBSb6cGn6+8QUlGNQi5SzWE=
Subject key identifier:   01:82:CD:EF:BF:30:C6:C3:FB:3B:B9:41:99:78:A5:27:C0:C0:CE:2F
Authority key identifier: 32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56
Certificate issuer:       /CN=3238786e9f70e6db74230d72675a483bd24ef256
Certificate serial:       019D9A06DE9B59F4FA358F1E86B3FA36F523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
Manifest number:          177B
Signing time:             Fri 17 Apr 2026 06:00:34 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:34 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:34 +0000
Files and hashes:         1: 6y-m_Tv-2HoY3JwEXM2VnrUnxqw.roa (hash: E8R/wgypDJ4w/RMOeLSWRMfPnr8DkZ+AnD4la/0OefA=)
                          2: Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl (hash: BClHNm8nLpSSccJqY5w6+fgy8kzQV65k+L5D4HRB9bg=)
                          3: g6_rqmKpsS185RvKdmzQuRpD6EA.roa (hash: 8MQ+OY82cMO0+coHMBrDE3ACEbDQROHmItcidzbIiKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:de:9b:59:f4:fa:35:8f:1e:86:b3:fa:36:f5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3238786e9f70e6db74230d72675a483bd24ef256
        Validity
            Not Before: Apr 17 06:00:34 2026 GMT
            Not After : Apr 18 06:00:34 2026 GMT
        Subject: CN=0182cdefbf30c6c3fb3bb9419978a527c0c0ce2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:aa:42:09:ed:57:a5:af:56:fc:7b:af:ee:
                    a7:ca:54:25:67:12:00:44:3c:96:ea:54:b0:ee:93:
                    bf:07:af:e1:ac:7a:ce:8a:7d:51:e5:87:e2:11:fe:
                    b9:6b:c2:50:9c:ec:53:30:18:f4:b6:ed:48:7d:c7:
                    0f:1d:d1:fa:d1:be:09:7f:5d:64:d5:9a:e5:c0:7c:
                    a3:df:a1:b4:47:f0:89:db:76:59:78:90:09:46:31:
                    2b:ce:39:6b:6c:2c:f4:06:28:c7:39:9e:e4:a1:ac:
                    b0:00:c0:ff:8c:ea:57:bb:f8:56:59:e3:94:cb:c5:
                    5f:b1:0a:90:72:44:08:91:e2:5f:82:2a:2c:7b:93:
                    57:53:12:ea:b6:58:27:94:23:2b:5e:75:68:69:22:
                    25:cb:3d:10:0e:40:55:4f:80:74:c6:60:1b:b6:32:
                    3f:f1:6f:67:d7:d8:a2:d9:3d:de:2c:70:95:fb:44:
                    a6:08:13:70:7b:b6:75:21:44:9e:48:aa:d0:34:cf:
                    28:9b:fe:35:b2:53:1c:e1:71:3c:ea:53:77:69:bc:
                    42:2f:2a:3a:f7:67:26:ad:99:71:35:d0:32:bd:bc:
                    ab:0b:aa:8c:75:93:91:5f:8e:09:c7:4b:3c:ff:90:
                    e5:c7:79:0d:b9:45:0c:bd:51:72:30:ae:bb:29:7c:
                    40:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:82:CD:EF:BF:30:C6:C3:FB:3B:B9:41:99:78:A5:27:C0:C0:CE:2F
            X509v3 Authority Key Identifier:
                keyid:32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:13:ba:47:7d:5f:bb:8a:0f:93:5a:52:99:20:a1:6c:f9:f8:
         6d:36:7d:97:4a:43:b6:d4:bd:2f:5b:b5:89:4a:c6:d2:32:64:
         e9:d1:cf:91:cc:e9:1a:64:6d:42:75:c4:04:2d:0a:ca:65:81:
         62:b7:80:c4:5d:ce:88:1a:bd:e6:df:11:72:f7:2f:77:01:fb:
         53:68:18:11:a8:33:c9:35:82:14:6f:36:a3:c4:40:db:9f:ee:
         79:81:1d:fd:86:40:c3:76:89:c1:76:97:37:fa:58:84:7f:d1:
         82:7d:6f:0b:1b:6e:f7:8c:3e:77:42:67:b7:f3:73:11:d6:b6:
         30:de:d7:01:bc:fc:5a:5b:80:c7:35:4c:be:b0:43:55:2a:99:
         29:e8:35:5b:fe:70:4e:9b:2d:ee:96:a3:76:32:10:ab:ae:cc:
         a8:50:1d:1f:d8:9f:a8:43:56:80:10:08:57:4b:b0:6d:92:c3:
         95:18:8b:25:c0:66:04:81:85:89:71:cc:ec:01:b6:43:41:93:
         68:48:ba:1e:f1:9b:6e:90:33:6a:b4:fe:cb:bd:18:55:33:3f:
         37:31:1d:16:71:1a:96:c7:5f:dd:1a:5c:2b:9c:66:f9:e8:d6:
         d9:b4:62:3d:07:7c:fa:d8:c3:f7:c0:ae:e7:65:e4:d4:af:02:
         b6:c5:99:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:49 2026 by rpki-client