Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
File:                     FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json)
Hash identifier:          JRgIaGOEWbPdo20b53AfCedsThL6cz0KzjCfc0gfJXU=
Subject key identifier:   80:8B:60:D5:2F:38:C0:3C:E9:D9:AF:4B:52:23:56:B1:70:72:5E:BF
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Certificate issuer:       /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial:       019D9962F58EB8BEE7DEF5ABE326CD0E2767
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
Manifest number:          09E1
Signing time:             Fri 17 Apr 2026 03:01:32 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:32 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:32 +0000
Files and hashes:         1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: yls6O2Ufn+GmejPn8wMd4dwWZTdWgkvDtljiw76NHvE=)
                          2: MBwPXOKM_iWsdzlsSXqDs7ZTH3I.roa (hash: 6X+PmBDPGX3JlUhHkCIG/oJUZITMm91IUs89tz0dREE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:f5:8e:b8:be:e7:de:f5:ab:e3:26:cd:0e:27:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
        Validity
            Not Before: Apr 17 03:01:32 2026 GMT
            Not After : Apr 18 03:01:32 2026 GMT
        Subject: CN=808b60d52f38c03ce9d9af4b522356b170725ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4b:15:a6:11:ba:c6:8b:87:46:d9:df:93:4d:
                    d0:c2:e6:22:b8:c2:cb:13:ee:d8:a3:1a:ab:09:90:
                    c7:20:f7:19:a8:1f:db:cc:54:d3:1b:d7:24:d4:f6:
                    44:19:78:50:2c:d2:40:df:7d:22:7c:26:d9:5b:ca:
                    1b:dd:83:23:eb:7f:97:70:a2:ae:88:8a:e4:b5:8d:
                    be:96:56:cb:3c:f0:4c:b6:4f:b4:cf:35:bc:a2:6f:
                    8d:9f:6e:39:3b:2c:cf:c1:71:d8:79:e4:1c:86:4f:
                    de:bc:a2:59:d6:c2:dd:7a:49:74:52:56:92:6f:c9:
                    1a:67:b7:41:3e:81:95:1a:c1:6e:7a:a4:8c:06:fd:
                    19:c7:69:c5:14:dd:4c:2a:10:e0:11:92:4d:cc:31:
                    e8:9e:0d:e2:1c:ea:72:ef:c9:ee:90:b3:40:d1:d7:
                    28:2a:b0:08:2d:b7:ae:44:c2:9b:54:05:21:51:e5:
                    28:d1:d1:19:a4:17:8b:02:6c:fa:28:f7:ad:52:ee:
                    ef:d4:1c:cf:39:87:5b:48:76:21:09:c9:df:7e:cf:
                    ef:cb:d1:eb:95:c3:df:9a:65:03:13:f9:f2:5c:9d:
                    f2:00:3b:76:42:46:e2:f7:93:07:12:f9:aa:34:90:
                    e6:ec:4e:ca:90:62:02:21:be:e8:6d:77:1a:b3:e1:
                    66:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8B:60:D5:2F:38:C0:3C:E9:D9:AF:4B:52:23:56:B1:70:72:5E:BF
            X509v3 Authority Key Identifier:
                keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:83:17:01:c5:00:66:75:02:9d:fd:50:f5:71:16:58:50:c7:
         68:a5:5b:38:06:d6:39:43:b8:5e:40:f5:5b:c9:f9:5c:50:bc:
         cc:dc:44:da:8f:c5:21:7a:a5:c2:c8:d7:46:23:92:8e:7c:79:
         98:7f:27:ce:ea:ac:fd:d8:8f:96:91:70:8f:d4:e4:6f:58:a9:
         eb:90:4e:4b:83:6d:56:69:fe:94:fc:20:ef:52:58:4e:e0:b1:
         89:3f:80:fb:1c:1d:c7:9f:af:f3:14:b3:e1:d9:de:75:29:7e:
         a8:19:45:39:fd:4e:2a:5f:cf:f6:c5:de:f7:02:9b:05:52:0f:
         bb:02:8b:86:ea:e4:6f:90:41:04:0c:d0:53:c6:78:be:5f:d3:
         62:5e:5a:56:2d:39:c3:df:28:07:82:36:c1:0f:10:f6:bc:25:
         14:80:54:8c:93:1e:44:79:cb:cd:2f:1b:6e:25:01:c6:fd:67:
         d5:d7:9b:1a:77:13:3d:5a:bf:8b:3e:24:57:78:84:4a:79:39:
         88:3b:62:09:fc:45:a6:d4:e2:b0:7c:6d:88:39:be:05:27:8f:
         47:f1:6f:18:13:42:29:58:85:e3:16:23:dd:f8:8b:02:37:5f:
         c0:03:f1:6e:9f:10:81:a5:8f:63:d9:7b:c0:28:d7:cc:79:3e:
         b9:2c:5f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:01 2026 by rpki-client