Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
File:                     RK1W7mAdrD36Yd_lLL9bALe3opA.mft (raw, json)
Hash identifier:          DFlFSWOwl7577ID3lnbPdISTMLIG18QYt2WyhWFtqIY=
Subject key identifier:   53:64:0E:58:A1:DE:54:D7:15:8C:3D:72:BF:5B:59:94:02:74:57:67
Authority key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
Certificate issuer:       /CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Certificate serial:       019D99CFF655F3681EB6BA7FDDBE6AC178F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
Manifest number:          0CB2
Signing time:             Fri 17 Apr 2026 05:00:36 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:36 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:36 +0000
Files and hashes:         1: KYrFJEDEjhc9HhmYSiPT-yYtVPQ.roa (hash: /AaiErA0b5IK+9x0vkOcwB+KnCvGEkMNKJApI/jbN6I=)
                          2: RK1W7mAdrD36Yd_lLL9bALe3opA.crl (hash: JjMxthgSjX+tYkRBPdO5vrYcf4T9byPsAzNbQoyfCCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:f6:55:f3:68:1e:b6:ba:7f:dd:be:6a:c1:78:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
        Validity
            Not Before: Apr 17 05:00:36 2026 GMT
            Not After : Apr 18 05:00:36 2026 GMT
        Subject: CN=53640e58a1de54d7158c3d72bf5b599402745767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3a:b3:80:20:fd:0f:1f:8a:3d:96:94:8d:97:
                    0b:28:98:27:12:71:90:b0:a8:dc:a7:06:3a:47:f0:
                    05:6f:37:97:a5:3b:e0:47:71:12:b8:5b:d1:24:14:
                    d9:b4:ea:f7:88:6a:33:70:52:75:b8:f5:d6:7c:d6:
                    3c:3d:c4:8f:3f:1d:82:7e:76:ec:74:d1:df:15:05:
                    e4:28:2c:8d:38:af:07:df:5f:ea:60:23:c0:c5:53:
                    4d:c0:e9:f3:d2:fe:51:7e:d8:29:49:7f:ff:65:e4:
                    8a:d0:b0:9c:4b:62:91:d6:9a:b7:62:31:0a:cb:d0:
                    06:08:3d:6d:56:6d:d9:05:dc:41:54:31:60:e7:ad:
                    29:c8:27:8c:54:4d:12:4c:32:a7:de:ba:be:dc:73:
                    3e:d9:7c:e7:d9:b0:5b:a7:b4:19:93:ae:7b:75:ae:
                    36:16:36:bd:12:dd:0c:d3:98:6a:b3:a0:03:23:4d:
                    1b:d7:4c:43:4e:45:4d:a8:b9:1d:10:ac:b7:23:2d:
                    98:31:2a:78:1e:f0:dc:cf:7b:2b:93:d8:09:a5:64:
                    9f:5a:33:e2:d9:c4:15:17:68:0d:84:f0:ff:3b:ac:
                    0f:c8:f6:e0:ee:5c:fb:0e:46:e7:c9:de:b2:d6:2a:
                    a2:70:c0:0a:90:e1:22:59:46:0b:bc:f1:13:32:e4:
                    61:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:64:0E:58:A1:DE:54:D7:15:8C:3D:72:BF:5B:59:94:02:74:57:67
            X509v3 Authority Key Identifier:
                keyid:44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5e:5a:68:8d:6f:46:f7:b7:82:d6:e8:ba:ad:11:3f:63:0b:
         68:c3:f4:5b:c0:18:0a:75:8f:20:31:d6:fe:18:fb:c6:41:9e:
         eb:90:33:fd:18:69:14:24:e9:26:9c:eb:53:91:ab:5d:83:8a:
         0c:3d:19:39:4b:64:96:91:b1:06:6f:78:42:bd:e2:8a:6c:03:
         40:17:70:d4:29:7f:6b:bb:b9:6c:d6:dd:f8:a6:d8:75:5d:5b:
         aa:ba:3c:ad:2e:b6:ad:fc:f4:83:71:0f:1d:9e:6d:e2:c3:54:
         23:57:29:8f:8f:84:01:01:e2:a8:de:5c:38:e4:5e:c9:7b:ce:
         83:39:b3:68:96:3c:41:e6:05:e3:11:3d:9f:5a:30:d5:85:2a:
         4f:56:39:c0:0c:27:b4:14:8b:3c:22:38:5b:83:fc:de:15:7a:
         55:3e:9f:66:f2:36:44:93:db:34:04:27:4e:54:08:fd:27:01:
         07:be:18:cb:39:0b:2e:dc:c5:e5:96:fd:81:2c:28:57:3a:2d:
         7b:e0:33:71:f4:60:cf:b3:9f:cc:8f:5a:74:27:64:cc:c5:a5:
         4a:3d:17:1d:b8:d0:1f:44:bb:25:bf:e5:bc:df:db:08:44:ca:
         27:ee:c3:3d:c0:1b:80:6e:a6:d6:60:40:d2:63:c1:d9:2f:a0:
         d3:22:c1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:49 2026 by rpki-client