Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft
File:                     b58jpjrWJaftMNptos3J6LW7gD4.mft (raw, json)
Hash identifier:          Fdu4z1HvLXgp+IamWd5em6OQ5k+CJNaDGqebYrrzLvs=
Subject key identifier:   CE:3F:8E:43:2D:6A:96:7C:BD:5B:53:FB:F2:27:F0:7C:7A:0D:75:2D
Authority key identifier: 6F:9F:23:A6:3A:D6:25:A7:ED:30:DA:6D:A2:CD:C9:E8:B5:BB:80:3E
Certificate issuer:       /CN=6f9f23a63ad625a7ed30da6da2cdc9e8b5bb803e
Certificate serial:       019D9BBF453EB86819988EF3582B3E451CD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft
Manifest number:          01A4
Signing time:             Fri 17 Apr 2026 14:01:36 +0000
Manifest this update:     Fri 17 Apr 2026 14:01:36 +0000
Manifest next update:     Sat 18 Apr 2026 14:01:36 +0000
Files and hashes:         1: 7aMZ7Tnhqpd3dO5kGH-ltVT-Edk.roa (hash: F+aXagJfpXFb1BZvz603l6LLwlIqiSdjWHeDYjDB1Bs=)
                          2: b58jpjrWJaftMNptos3J6LW7gD4.crl (hash: fH/oFyLYGidbDI928AWegGYa2vf1hwajafzK6d9BFfk=)
                          3: f7oJ5S7QhjbF7Hv3vAYtSNv0X-8.roa (hash: f3H5djjlFovDR3gNvScOu/4dBbS3OgO3hekLoTa++Qg=)
                          4: uOpNXNqtHI5fhaitzbdVAYNd-lI.roa (hash: rovI3vjkbKEi6l+iPvXBuVPVhZOqOPsoOuCNHyVt+3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:bf:45:3e:b8:68:19:98:8e:f3:58:2b:3e:45:1c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9f23a63ad625a7ed30da6da2cdc9e8b5bb803e
        Validity
            Not Before: Apr 17 14:01:36 2026 GMT
            Not After : Apr 18 14:01:36 2026 GMT
        Subject: CN=ce3f8e432d6a967cbd5b53fbf227f07c7a0d752d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:64:c3:ba:6d:1f:e5:ca:99:1a:06:7f:0a:2b:
                    2b:0b:ff:fa:6a:df:2c:d3:79:55:6b:b1:56:93:0c:
                    47:f5:a4:12:69:7c:05:e1:84:0e:fd:1a:e8:41:20:
                    31:f7:ea:50:f1:52:99:71:a4:50:b9:cd:eb:81:8c:
                    c0:eb:3f:04:b1:3d:6e:bd:f3:84:22:89:41:35:b1:
                    cd:f4:7b:c9:48:38:e3:e3:91:cd:bb:4e:b3:b5:fd:
                    5b:25:2f:7b:77:74:b2:5f:59:6b:99:ac:34:95:32:
                    03:d4:3c:06:a5:68:bb:3a:df:ac:41:86:34:58:0e:
                    65:4c:cc:5c:61:d0:da:76:a9:46:36:fe:15:8b:b6:
                    51:c4:8e:2b:71:f3:8d:df:ad:c5:12:eb:de:f8:8a:
                    fa:3d:0d:49:d5:5d:af:2c:9d:fe:e1:89:a3:bc:bf:
                    94:0c:17:e0:d7:e9:90:e6:51:b2:e4:4c:bd:85:6f:
                    bf:7a:03:cf:70:1c:10:1c:fb:77:6d:68:e8:34:81:
                    b0:2c:2d:25:d6:23:3a:b0:cf:df:bd:dd:42:55:6c:
                    cc:c4:90:e0:f9:95:bd:01:90:20:61:c1:5f:72:a4:
                    81:f4:5a:0c:6e:27:ba:c8:6e:4f:90:40:2a:00:0a:
                    49:ba:29:c1:c8:7e:c6:ed:11:aa:cd:e2:69:d3:1f:
                    4f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3F:8E:43:2D:6A:96:7C:BD:5B:53:FB:F2:27:F0:7C:7A:0D:75:2D
            X509v3 Authority Key Identifier:
                keyid:6F:9F:23:A6:3A:D6:25:A7:ED:30:DA:6D:A2:CD:C9:E8:B5:BB:80:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:13:1d:6c:87:11:54:a8:06:ad:18:3f:1d:b1:4e:ee:0b:dd:
         0a:3d:ec:c8:36:12:f2:2d:ce:71:39:48:42:6d:64:19:84:2d:
         cc:9f:aa:e6:12:ba:33:b6:eb:d5:62:e2:57:80:78:1a:40:b8:
         6a:59:07:7f:ad:9e:20:7a:49:e6:f6:8a:f2:9e:bd:e3:5a:61:
         2f:8b:54:da:36:11:fb:08:94:ba:61:4e:3a:82:21:c9:95:ce:
         a5:25:03:21:a2:63:ed:0f:61:8d:88:00:ba:bb:c6:56:91:6c:
         9a:86:cd:64:cc:a1:02:c3:2f:f1:b4:cb:2b:68:1a:b8:a2:7f:
         a8:80:da:9a:bb:85:d6:79:8e:e3:4e:56:88:12:46:0c:3e:e6:
         ac:c6:50:5c:da:1c:db:09:07:12:53:42:fe:15:a8:eb:16:b4:
         11:03:c7:68:56:ae:83:b5:cd:39:82:f6:ee:b2:43:79:1c:aa:
         31:51:36:0b:c9:54:1f:4a:7b:58:5f:4b:52:15:39:d0:04:ad:
         66:3b:80:6c:9e:04:a7:f1:20:24:c1:52:b9:4b:f6:67:8e:fc:
         67:1e:0d:98:ed:e1:0f:bf:9a:64:8e:e7:45:6e:eb:09:6f:f5:
         26:93:9f:d7:12:57:a0:1a:8f:65:a9:9b:2b:5f:28:69:00:8d:
         79:2c:fb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:17:12 2026 by rpki-client