Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
File:                     m1hBsHzPY5l5mzWGobIohZI9-L8.mft (raw, json)
Hash identifier:          VkE0YP5Y4M7xlsgoclGuq8vdrdF95D1VWzKpa1hFxBw=
Subject key identifier:   1C:AA:30:E5:32:12:8F:08:D8:06:87:68:86:D4:0C:B5:E3:B2:3A:4F
Authority key identifier: 9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF
Certificate issuer:       /CN=9b5841b07ccf6399799b3586a1b22885923df8bf
Certificate serial:       019D9BBEC61032EB14589977356CA4CEEB65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
Manifest number:          153F
Signing time:             Fri 17 Apr 2026 14:01:04 +0000
Manifest this update:     Fri 17 Apr 2026 14:01:04 +0000
Manifest next update:     Sat 18 Apr 2026 14:01:04 +0000
Files and hashes:         1: IFQ-id79kHlDKPQ9PpUhMxfR5F8.roa (hash: 8hN9YwJ+324f32TBhUPA/FbIWI7pWULirPqO3HhSjN8=)
                          2: m1hBsHzPY5l5mzWGobIohZI9-L8.crl (hash: ux2MLqXQ1aQsoiOk6uM6ctD7IshhD5uT/d8pAphJ1EU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:c6:10:32:eb:14:58:99:77:35:6c:a4:ce:eb:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b5841b07ccf6399799b3586a1b22885923df8bf
        Validity
            Not Before: Apr 17 14:01:04 2026 GMT
            Not After : Apr 18 14:01:04 2026 GMT
        Subject: CN=1caa30e532128f08d806876886d40cb5e3b23a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:be:9e:4f:99:f2:2e:d3:24:1a:af:82:7e:0b:
                    af:c7:81:04:19:9c:65:f0:b2:f8:0f:f2:e7:d0:a1:
                    7c:93:90:7c:d9:e0:81:67:08:37:87:43:8b:ea:6b:
                    89:25:78:78:dd:de:ff:d3:31:79:dc:eb:8c:6d:d8:
                    72:c8:82:ec:18:7c:8c:5b:7a:14:f5:75:90:b7:29:
                    07:3a:72:0b:bf:e4:af:17:1c:97:3c:b7:cc:d7:2b:
                    86:4e:f2:9a:d9:e8:3c:41:8a:5c:59:9c:d5:42:f3:
                    b5:37:96:e8:4d:b2:4c:06:6f:d6:c5:31:1c:0b:b6:
                    e0:e6:f7:ae:f0:5a:d3:94:7c:db:1c:4b:59:cd:11:
                    0c:59:7c:84:75:5e:89:0f:3b:b9:13:88:25:aa:6e:
                    9d:e2:06:2a:cc:5f:10:10:1c:10:ed:d0:0c:f3:e9:
                    a2:53:80:03:42:ab:71:a6:d2:a3:82:70:14:5e:a5:
                    c3:88:63:86:a6:de:c5:2f:29:d6:e1:0f:3a:0a:df:
                    35:22:ad:07:86:d1:f0:ce:0a:6a:75:01:25:70:af:
                    8a:fa:6b:4c:d0:5d:80:67:da:2f:cd:94:46:5c:33:
                    ab:42:76:8c:a8:2c:c8:38:ca:6b:65:32:e0:70:56:
                    6f:9a:34:bc:24:c1:73:c2:27:09:bc:1c:a2:bd:21:
                    1f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AA:30:E5:32:12:8F:08:D8:06:87:68:86:D4:0C:B5:E3:B2:3A:4F
            X509v3 Authority Key Identifier:
                keyid:9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:12:88:7f:ee:ec:9c:89:69:d1:c0:27:4d:97:3f:b2:02:79:
         12:8f:39:db:88:26:6c:25:d6:77:1b:8e:39:c5:5b:f6:00:ad:
         dc:59:29:68:92:54:9d:ff:ad:0a:27:b4:12:da:8f:d8:d5:d3:
         74:a7:2c:94:d1:e2:33:a5:9b:84:ef:df:c2:03:d5:e2:35:6e:
         53:33:01:a7:d7:51:85:d8:30:dd:65:24:e4:90:d6:31:ac:55:
         f2:b1:6a:82:f7:d3:58:b5:e1:90:56:f3:18:f9:fe:8d:22:5b:
         dd:01:fe:1c:9b:5b:64:35:40:8d:2b:74:2c:7c:60:c2:6f:6a:
         51:52:2c:c4:85:41:c0:61:c4:c6:4f:cc:31:21:e2:1c:4c:b7:
         9a:3f:ed:c4:79:a3:e3:b7:f9:a1:49:4c:f3:2e:20:f3:66:9e:
         73:19:74:b4:b8:ce:d5:bb:70:82:02:08:ff:37:2d:b8:df:6c:
         03:93:d2:76:0f:5d:6d:a5:e2:b3:3e:a0:50:2d:98:03:5e:90:
         83:e1:6f:af:6a:3f:0e:1d:45:48:c0:8a:8f:5c:d9:6d:f6:28:
         83:f7:7e:be:c9:98:e9:56:77:55:cc:f0:d4:e4:98:39:35:cb:
         b9:f2:be:b6:18:9b:25:2d:b4:dd:7c:47:8e:ef:c4:31:9f:97:
         92:79:f2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:01:44 2026 by rpki-client