Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
File:                     54O2KriupSB3DFdAS-d3H2eewLU.mft (raw, json)
Hash identifier:          WtX8+SS0Wb/cBYAPtQ+dW9U0jClxxMkXCvrF4iNSlPM=
Subject key identifier:   6F:43:6D:28:FE:9E:ED:A2:1F:E9:57:ED:48:51:86:57:19:37:55:15
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Certificate issuer:       /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial:       019D99996C6CEFFBC8C1932807F7E300A9EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
Manifest number:          1857
Signing time:             Fri 17 Apr 2026 04:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:01 +0000
Files and hashes:         1: 54O2KriupSB3DFdAS-d3H2eewLU.crl (hash: R80UgQJkxtIIET6x73yqGDjXK4MVcJQxjKOuUqBswwI=)
                          2: 8ZwMCE0GKxtxHvWw4iCZk5ccrLQ.roa (hash: ihfIEbqwEULTE/OLIE3mqsVCssWQ6XBCkAGO8OC7UiQ=)
                          3: KM-isetfFQ48jT5UlKY2Mm7Ax0Y.asa (hash: 8i1NfCOqJ0Jq8VqPBEJyQbTSUD60u+xKuWbGsqyrU/A=)
                          4: P7qWrs2V2AQezp3eeUtgLDcatjI.roa (hash: 24DT/UvLaMHn12NZyYMSEhf55ywjNyUpSkfYVKDW1As=)
                          5: m9ne4AYiPOSdzaOHma0RPMHFIXo.roa (hash: CcdNSaFI+Idh1vG8DNWCzWCXN6GNcifanXez8Ab1HsA=)
                          6: slPUQzpAJ12Ih9Jzqnj5F0SKAxg.roa (hash: Nu5TAyzLPZcJp+J4t6JX8dbl8sGpnXq2tX6BxvM07Oo=)
                          7: yd0VNlAOh1ENu0y1pBAFD8ujbvw.roa (hash: bFUcyJVn75mPPcVkoj5xBq3tVwT0rV177XBSyfgCsxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:6c:6c:ef:fb:c8:c1:93:28:07:f7:e3:00:a9:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
        Validity
            Not Before: Apr 17 04:01:01 2026 GMT
            Not After : Apr 18 04:01:01 2026 GMT
        Subject: CN=6f436d28fe9eeda21fe957ed4851865719375515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:59:0c:79:2f:32:fd:ed:ef:df:cb:0f:04:29:
                    c1:a9:00:0e:99:ce:8f:3a:a3:76:5f:fa:e0:25:17:
                    b9:61:fc:4d:2a:b7:78:4d:59:a9:69:24:82:14:b0:
                    b3:b7:08:8a:ff:fa:c0:4f:3e:bd:3d:ab:08:a0:7b:
                    71:26:f9:bb:63:31:1f:46:ba:da:7e:a3:53:6e:34:
                    2e:94:f2:ea:48:4b:02:de:c2:66:fa:d4:14:2e:de:
                    5e:35:a1:40:36:90:a9:56:e7:0b:41:24:df:0b:fb:
                    1d:db:ef:8f:a5:e1:32:03:49:b2:51:7c:33:af:16:
                    50:b7:9c:c1:0b:ab:3a:84:73:b0:3c:f1:3f:3d:94:
                    0e:2b:a7:b9:85:86:66:8f:7e:a0:81:e2:f1:fd:ec:
                    76:78:0e:38:ed:03:b3:f4:82:8f:07:67:4c:a4:27:
                    41:fc:d6:c6:0a:25:12:46:c0:58:61:08:55:aa:1d:
                    be:1b:05:10:79:98:9c:f2:f1:b8:17:66:1f:ea:8b:
                    40:23:24:f5:c6:b3:17:2b:be:f4:57:9d:b1:de:41:
                    fb:8d:88:e8:66:2c:e2:4b:04:14:7d:72:0c:1a:92:
                    68:f8:07:f6:4b:76:b4:30:20:f0:7a:d9:50:51:13:
                    f5:82:ce:36:ea:4d:db:22:99:db:24:a2:8e:04:39:
                    42:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:43:6D:28:FE:9E:ED:A2:1F:E9:57:ED:48:51:86:57:19:37:55:15
            X509v3 Authority Key Identifier:
                keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e8:a6:64:03:e8:17:24:41:86:76:4d:64:66:47:93:c0:20:
         c9:0c:4d:5d:4d:75:6e:73:c9:72:cc:40:d0:55:00:98:68:bd:
         9c:da:e1:40:d9:42:69:95:b5:32:2e:f7:2b:a7:ca:d1:e5:20:
         dc:16:de:d2:0c:8a:0a:9a:53:b3:90:dc:8d:12:69:1a:81:1d:
         72:24:37:3f:c4:cf:4c:36:1e:7c:8c:9a:19:91:45:c7:01:77:
         16:9c:e6:d0:9e:46:c5:3f:02:05:08:09:7f:17:78:2e:4d:82:
         59:33:f6:e0:78:6a:16:0f:3f:24:c0:a6:ac:19:60:5e:86:42:
         35:8c:0d:c0:9f:93:59:20:6f:98:71:6c:04:b7:95:5e:bd:90:
         88:24:6d:13:dd:bd:62:f4:7d:e8:5f:c1:5a:0f:48:e0:21:d2:
         67:9b:05:03:3c:db:55:a7:10:d6:9c:56:11:93:02:4a:02:8c:
         0b:28:8c:13:a8:11:20:29:83:a4:ea:91:f5:e6:46:c7:0b:2e:
         0e:00:e9:c0:26:df:35:04:cf:50:60:8c:b4:2c:a4:e4:22:e3:
         08:8a:33:2b:14:d9:ab:da:9e:2a:7a:1c:fe:f5:95:19:5d:54:
         3e:ed:33:19:61:78:d6:59:fe:91:bd:5c:4e:ec:dc:a0:5a:01:
         fa:82:ff:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:25 2026 by rpki-client