Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
File:                     Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft (raw, json)
Hash identifier:          R0JHjV+EXme26Mvvb6eH6dILo7M8yAHsI7SzihpR1Go=
Subject key identifier:   10:14:0C:5E:7B:C7:C0:D4:9E:DF:6F:1A:6C:7B:8B:6B:8F:7B:48:F1
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Certificate issuer:       /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial:       019D9999A9B53DA27FD912438E5C5E74B9D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
Manifest number:          1047
Signing time:             Fri 17 Apr 2026 04:01:17 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:17 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:17 +0000
Files and hashes:         1: 1jOzSXBij5_0E-f2suF9FA2ns6E.roa (hash: Nc0F7T+rokFZEGPWl4wCwZ72VzEoKQta+d5LVxuMNuk=)
                          2: Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl (hash: G3Vke1QFbVu120643naPitMUcPLhsgX6i0aQnAKxnPo=)
                          3: VJzsM7xLy0BvWv62rRogwgx0xmY.roa (hash: r5eVuV7raUZo7rWfONsinf2tvmGiQxP2qwK0CFC96cA=)
                          4: Y1T4r7Fs3xLnU467yBjXxVxADek.roa (hash: 2REreg0NGysFv7m8SRA6AFjBorpvVS4eSFiK4h3b/NE=)
                          5: axPxdnGXgCRwQaSqTXZuNt_ZeRQ.roa (hash: 19+634b7ERlCmGPvTLiIQL850moJR3rSQ5I/u031cHQ=)
                          6: bQ8c-7koeiWAMWWzaWJffyBBvZc.roa (hash: hLJwj4Ja3tdG52rHBUCVD/JD4mLF045qQKob1dFnaXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:a9:b5:3d:a2:7f:d9:12:43:8e:5c:5e:74:b9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
        Validity
            Not Before: Apr 17 04:01:17 2026 GMT
            Not After : Apr 18 04:01:17 2026 GMT
        Subject: CN=10140c5e7bc7c0d49edf6f1a6c7b8b6b8f7b48f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:25:f5:a0:c8:9e:54:1d:19:3a:a4:6b:c8:5f:
                    ef:4b:a4:8a:c3:14:de:fd:f9:dd:d3:d3:46:e6:5d:
                    37:98:12:92:ea:95:3e:5a:d3:34:c2:ac:66:2d:f1:
                    53:f4:50:17:3f:2a:7b:a2:03:f1:54:bf:bd:b4:65:
                    ff:26:85:ac:b5:3d:61:ee:26:ac:a2:8e:33:04:3d:
                    7f:a4:9c:82:47:c8:6d:1a:1d:6e:ae:f1:7a:e6:85:
                    56:ae:b6:0e:19:64:7e:8d:3c:f4:c9:43:9b:d5:c3:
                    7c:b8:76:54:ad:a3:f2:fc:bf:71:98:48:3e:fe:91:
                    bf:55:e5:56:d5:cb:82:fb:27:eb:7b:59:3c:94:d5:
                    69:ac:c3:27:fe:b9:00:f5:44:6a:7a:13:a9:44:e9:
                    57:70:53:4e:7d:51:f9:bf:f6:3b:ee:8c:93:55:97:
                    3e:ea:32:cf:32:b5:15:27:60:70:3a:f4:23:82:9b:
                    6d:19:6c:e8:78:37:8f:8d:56:65:59:30:41:d8:d6:
                    2e:01:f8:aa:0d:6b:dd:d0:59:72:0d:21:98:ff:26:
                    2a:2e:d0:75:67:f6:8c:3b:af:6e:ac:50:6a:76:38:
                    06:a4:4d:ae:ce:51:d7:85:b0:ab:49:5d:d0:e4:09:
                    f9:d1:75:f5:9e:d5:b7:01:fe:30:3f:71:4d:1d:8b:
                    38:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:14:0C:5E:7B:C7:C0:D4:9E:DF:6F:1A:6C:7B:8B:6B:8F:7B:48:F1
            X509v3 Authority Key Identifier:
                keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:3e:a3:7d:29:dd:e7:e7:4d:02:d9:1f:0f:63:1b:ec:73:80:
         d9:4f:42:f1:f8:9f:af:d0:a3:42:53:33:a5:f5:d3:ac:f1:c9:
         9d:10:4c:de:08:b1:78:57:d9:f9:24:c2:ba:15:d0:66:10:30:
         4a:7c:46:34:96:5e:2a:30:93:1b:89:37:28:4e:95:1a:c6:92:
         43:0e:2e:ea:87:c4:00:98:d6:bf:27:6a:2b:48:48:79:be:8c:
         d6:b7:9e:cd:2d:64:b1:67:0b:c7:be:a9:2f:cb:93:79:ce:57:
         5b:bb:7a:ca:0f:c3:3a:6b:46:84:0c:19:b0:79:32:62:d0:20:
         cd:cd:2b:60:47:78:2d:d9:46:09:ba:c0:8d:22:4c:a4:9b:57:
         13:14:af:30:68:85:51:2b:c9:1b:61:eb:43:30:df:62:53:70:
         2f:d2:b4:5a:b3:b0:02:2d:10:cf:e1:0f:d4:19:5e:c0:ce:f1:
         a8:6d:13:7d:8f:e4:bf:7f:62:0e:43:05:08:70:7d:5f:76:d4:
         cf:eb:1f:45:90:00:5d:52:50:da:f7:15:f9:0a:85:f6:81:cb:
         fa:56:fb:e8:a3:49:de:b4:48:c1:dc:8c:26:ac:b1:a9:66:77:
         52:4d:a8:8e:57:21:bb:8f:fa:a1:c4:6d:6a:25:cf:41:b9:5a:
         09:bf:c2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:38 2026 by rpki-client