Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
File:                     4uSsYiT-GURCDcOpjdY6uuSvfgA.mft (raw, json)
Hash identifier:          JWZ46XnrpgrQrQtSJajDR7n2X9xp2tqDIwjuc7Ihh4k=
Subject key identifier:   3B:6D:39:75:4B:EF:B0:72:E6:8F:2D:A5:83:0B:0C:F1:19:90:CB:5D
Authority key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
Certificate issuer:       /CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Certificate serial:       019D9818A9614F73B5F3348A17DDFECB1BC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
Manifest number:          14EE
Signing time:             Thu 16 Apr 2026 21:00:46 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:46 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:46 +0000
Files and hashes:         1: 1-TdHN98FGVFEolCtJz5D4Qn8oUU.roa (hash: XtPiDy65/rIGNdB1DOR8MKSXwZBD4oJVNpwQPU3xeNQ=)
                          2: 4uSsYiT-GURCDcOpjdY6uuSvfgA.crl (hash: mMHCyatSbX6LEFK9+rfcKbCx/casVjSOk7Pjt4BE32I=)
                          3: RWwBA-mE5T1DeX90DO491TVULLY.roa (hash: MNPZj/RKM4/KkE55j9h8f2IORoXisvl/h9C3t/o3a6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:a9:61:4f:73:b5:f3:34:8a:17:dd:fe:cb:1b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
        Validity
            Not Before: Apr 16 21:00:46 2026 GMT
            Not After : Apr 17 21:00:46 2026 GMT
        Subject: CN=3b6d39754befb072e68f2da5830b0cf11990cb5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ba:06:a9:f8:fc:16:ba:bb:e0:73:c3:36:14:
                    64:fb:8a:19:46:67:99:a7:2e:ad:23:ec:00:50:20:
                    63:3a:2b:db:2c:76:23:00:d3:41:54:fd:d2:c3:28:
                    c1:aa:af:db:a7:69:4f:c9:d3:41:9c:2d:92:49:42:
                    d2:75:e3:74:a6:b5:f1:95:65:3b:2e:e7:20:27:c2:
                    5b:dc:6b:c4:ec:b5:a0:65:53:3a:48:b8:50:17:4c:
                    6f:ee:7d:4c:70:42:ed:36:5f:e6:2a:e3:5e:de:3b:
                    3d:17:f3:c3:b1:37:75:e3:4b:b9:66:3f:c7:fb:9e:
                    f3:4a:8b:09:e0:b4:5b:3a:3b:14:62:21:e8:ae:52:
                    8d:7b:24:7a:78:76:90:7d:a2:70:89:3e:32:63:7e:
                    ec:db:48:39:ed:a5:87:95:c1:92:86:d7:b8:0b:d4:
                    a8:a5:38:72:51:1e:42:f5:14:d1:5a:7e:0f:c5:f3:
                    f1:5f:8a:71:01:41:97:94:31:b6:18:d0:3b:1b:ba:
                    47:4e:98:72:74:e7:a3:ba:19:06:72:a4:bb:ab:91:
                    78:23:cf:17:9e:6f:e0:6c:68:6a:2c:05:1d:eb:d5:
                    e4:7a:d3:ae:31:12:ae:3f:93:cf:55:6f:a0:2b:ea:
                    94:a9:b5:04:88:7c:5a:a2:67:54:76:5b:c7:35:5a:
                    1d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6D:39:75:4B:EF:B0:72:E6:8F:2D:A5:83:0B:0C:F1:19:90:CB:5D
            X509v3 Authority Key Identifier:
                keyid:E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:99:2f:0c:48:37:d6:49:df:63:9b:05:ba:a8:38:f8:39:c0:
         9c:50:ee:46:f9:43:fc:74:4c:fe:60:5e:be:56:a4:20:d4:0b:
         2a:57:9b:1c:27:bc:d9:af:fd:a0:b2:2c:d8:53:44:5f:07:7b:
         e1:e1:85:bb:59:d3:cb:43:13:f9:d4:8d:73:00:29:10:68:97:
         bd:b8:df:86:51:72:41:35:8c:76:33:a9:99:6a:de:86:71:4a:
         0e:21:0a:b4:1c:0a:2f:e9:d2:3f:b8:66:28:fb:4a:33:4b:d2:
         21:d4:d8:08:5d:d6:0e:e5:5a:77:cb:2a:e7:53:96:63:ff:1d:
         00:d7:7e:30:88:f1:8f:7e:a3:fd:61:29:77:95:70:b6:ad:f2:
         3b:41:f9:16:27:0a:bb:0c:de:04:e5:8a:3d:a9:93:0c:1d:df:
         7b:65:2e:9a:c0:01:ea:92:db:30:44:0c:26:45:ab:99:ec:89:
         dd:5f:87:2c:e8:07:df:87:44:71:51:5a:94:aa:03:7f:19:b5:
         f7:b1:0c:38:ae:0a:1c:77:67:48:9c:dd:c8:42:1f:c9:25:12:
         b4:9e:81:23:4c:10:93:e8:de:31:ec:f2:56:db:45:fc:f4:57:
         ef:11:1b:50:7e:55:74:23:df:46:7f:14:64:33:9b:0f:6f:8f:
         c0:f3:a3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:41 2026 by rpki-client