Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File:                     RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier:          wBqMI1u71m8gdpxmagBocdmLZi9lu0uGqEjBlYWzfxQ=
Subject key identifier:   ED:D9:0E:C2:43:2F:2E:79:F8:F1:40:B1:F4:66:3F:89:DD:EC:3D:23
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer:       /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial:       019D9AAB840A59A9BACAE609AC742A755DB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number:          13C5
Signing time:             Fri 17 Apr 2026 09:00:24 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:24 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:24 +0000
Files and hashes:         1: 2SIXUZTGLSsuNmHnmH_XZgRCYVY.roa (hash: kuoWaUJI+dAA7ih84KRN5TqDkuF9bUAxQjQzkKOCjIc=)
                          2: 3xhOROtsWU6kcbRg-0eVsWv_Cf4.roa (hash: 5LTgCgWwER8eaf33nSzOpEaP32v0UF0hdAvBDa8TC70=)
                          3: KRctRzsS6WkYFQeNR_1yTG9YjP0.roa (hash: oB1FvlbACGWEHyhDswCez14XuSiwC0mCrxW2Q45DLmU=)
                          4: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: XmbwUO3Vcxu5RQCeBpbXWLUGr/KKsZsGDnrTo2P+KW0=)
                          5: nayB3_rE3RntOJEk4e7i16Y7R3M.roa (hash: YijDZOJxEI25MjJmJqVvk74PVNuOr37g49vUulKscOg=)
                          6: oI0gNsAnUZaiiR1_JxvhZXrdyvc.roa (hash: PZhUlF96CrIiZt17nWZPHRO35kGXkmt9vTJKXgGorHc=)
                          7: qT0dlLpzpHG-UMlryrlwiaMMxcY.roa (hash: 9waKgS4/9SGo8HvqSDRZz0wIFy4U+cc/1Ys4XOOzmjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:84:0a:59:a9:ba:ca:e6:09:ac:74:2a:75:5d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
        Validity
            Not Before: Apr 17 09:00:24 2026 GMT
            Not After : Apr 18 09:00:24 2026 GMT
        Subject: CN=edd90ec2432f2e79f8f140b1f4663f89ddec3d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:91:a7:1c:38:d1:83:82:e0:0e:a8:fd:c1:d5:
                    e6:73:3d:cd:9b:8e:ee:fc:17:10:0a:39:5d:70:a8:
                    b3:77:eb:b3:71:71:1f:21:07:82:d0:02:8b:15:ba:
                    a0:fc:cc:99:b0:92:58:e3:91:ff:84:f8:7c:ae:74:
                    69:f0:4a:97:0a:59:0b:a4:a4:04:b8:20:bd:71:a8:
                    a4:33:0e:2b:d8:1a:7b:0b:8e:73:0f:27:1f:81:fc:
                    2b:16:0b:8d:66:26:86:e2:b1:a4:cf:f7:b8:2f:61:
                    0f:ff:31:93:18:d4:63:2a:36:41:84:a5:9e:fd:82:
                    12:95:5e:62:9e:fa:22:12:09:b0:40:73:2b:ab:b7:
                    04:00:43:b3:13:c4:03:d3:7d:68:3a:e2:e0:4d:f6:
                    75:50:fa:de:1c:3b:96:73:61:bd:da:bc:7c:da:97:
                    7e:91:dc:e4:6c:94:b2:06:7f:0c:da:c6:bd:ff:2b:
                    ee:df:4c:0f:c6:b5:9b:a1:7c:04:cb:05:b3:ed:cb:
                    b3:bb:46:38:d2:f2:0c:48:e1:71:83:45:61:d5:03:
                    25:6f:7c:ef:0b:54:f6:b3:fb:d5:d8:cc:6a:ae:99:
                    db:af:8c:c2:3e:49:ef:52:5d:4a:60:c9:6f:40:93:
                    85:f4:08:2e:d6:9a:f2:50:98:bf:d8:91:53:e0:9d:
                    d3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D9:0E:C2:43:2F:2E:79:F8:F1:40:B1:F4:66:3F:89:DD:EC:3D:23
            X509v3 Authority Key Identifier:
                keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:1d:6b:35:8f:86:f4:0a:6b:e1:60:d2:a4:cb:e7:93:c2:0e:
         53:e1:7b:dd:ae:66:84:da:94:27:b7:d5:69:0e:91:3a:cc:cb:
         2c:56:5a:bb:23:92:09:be:a6:8a:8d:94:7a:f0:9e:b4:b3:95:
         7c:9f:d8:68:e1:69:c6:fa:cb:3f:37:15:d1:33:f6:c2:b3:4f:
         f2:05:f9:1e:e5:87:1b:3c:54:05:e6:ab:bd:29:87:50:c2:b9:
         d8:39:9f:b8:d8:8f:c6:26:09:17:a9:b3:0d:e7:1e:af:4d:d7:
         bf:43:d2:23:10:36:b5:78:2b:d1:c4:61:62:29:62:cd:a3:c9:
         4f:a1:d9:b1:31:7c:75:ab:69:fb:83:2f:59:39:23:76:17:06:
         6b:f0:97:b9:80:76:d0:1c:e6:28:61:ac:23:ac:9a:87:55:80:
         4c:1f:be:8e:df:03:05:1d:e3:60:b6:10:48:1c:a4:f4:0c:d3:
         81:b3:23:fc:27:be:94:8b:c1:fe:7f:1e:ee:70:92:c4:3c:ef:
         16:c9:50:35:a6:bf:ec:03:b6:f3:c5:13:a2:fb:27:52:1d:3a:
         7c:f5:90:fa:1f:43:42:db:9a:6b:7a:48:ea:6d:14:61:98:66:
         a3:1e:a3:e9:3e:6f:67:31:a5:50:c2:22:9a:42:43:bd:76:1d:
         35:92:0e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:20:31 2026 by rpki-client