Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
File:                     A83mT0Foo_OZt3SU2Urqdyksm88.mft (raw, json)
Hash identifier:          VQCaRGqf//XuNKxss2JPbW1DTH1lzoSH9qRGj355Vgo=
Subject key identifier:   41:F9:84:C8:14:CD:73:4B:A9:4B:73:CD:C4:D7:77:15:32:8E:E8:9A
Authority key identifier: 03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
Certificate issuer:       /CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Certificate serial:       019D9BF5A21B0573E145DD9C7A88A402FACD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
Manifest number:          1429
Signing time:             Fri 17 Apr 2026 15:00:59 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:59 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:59 +0000
Files and hashes:         1: A83mT0Foo_OZt3SU2Urqdyksm88.crl (hash: 2iZAVJ0lmTrarwgFlIpyb1xVZ1hl/Akmh+EBaMAL84o=)
                          2: VqbW8hWa6U_90YgDAsOUDVLHuCw.roa (hash: quQX28Hjb85Vem897JezSZ+lGMfYDszka76M0Xq2SLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:a2:1b:05:73:e1:45:dd:9c:7a:88:a4:02:fa:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03cde64f4168a3f399b77494d94aea77292c9bcf
        Validity
            Not Before: Apr 17 15:00:59 2026 GMT
            Not After : Apr 18 15:00:59 2026 GMT
        Subject: CN=41f984c814cd734ba94b73cdc4d77715328ee89a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:82:94:fa:ba:39:ad:0d:33:0f:41:e5:db:0e:
                    97:35:36:89:5b:d4:b0:f3:d9:c0:dc:bb:6c:41:4a:
                    b2:91:a4:37:ff:82:b4:1e:df:aa:11:94:45:c9:b0:
                    48:dc:b1:32:b6:a1:b8:95:a9:c1:b1:59:f8:b9:3c:
                    db:cf:3c:34:14:c9:f6:3d:d4:4f:56:31:7f:70:89:
                    36:8b:ef:72:2f:7b:e6:6d:cd:2c:d5:2d:4a:07:56:
                    f7:cd:6a:1e:82:d8:11:93:eb:a6:5c:74:b7:c8:76:
                    ae:9f:a2:99:46:42:80:47:7a:ab:c5:14:56:ef:2b:
                    36:27:df:ae:0d:bb:0a:bb:23:c1:05:f2:cf:27:2e:
                    3e:c8:6a:99:88:19:2d:82:b0:18:0a:7e:70:4f:c7:
                    17:4e:56:b8:96:ad:29:83:b1:8e:1b:cf:b6:73:d6:
                    ae:16:b0:7e:6c:5e:50:30:f4:ac:6f:bd:7a:4a:2f:
                    35:80:31:c4:ad:6c:24:3b:1d:01:fa:97:34:29:bb:
                    1b:be:e3:69:0d:85:28:d9:f9:30:35:63:cd:ae:16:
                    38:5c:c6:a1:38:7e:40:b4:1e:71:fe:0d:85:a4:ec:
                    4c:95:f4:be:01:41:b4:6b:43:cd:33:4a:83:83:c1:
                    14:11:0a:fe:c5:f8:1c:76:95:de:06:2d:ac:fc:fe:
                    cc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F9:84:C8:14:CD:73:4B:A9:4B:73:CD:C4:D7:77:15:32:8E:E8:9A
            X509v3 Authority Key Identifier:
                keyid:03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:9c:ca:2d:d1:06:f1:21:1c:cd:50:c8:51:b2:95:c8:7f:9d:
         e2:05:d7:46:92:11:51:05:e9:72:ca:b0:b9:de:82:25:ba:1f:
         54:41:b9:96:64:08:cf:db:27:59:b0:80:6b:40:f4:c4:b3:ab:
         7c:de:c7:fd:ec:35:a7:89:5e:ff:c3:7a:95:22:78:44:b0:cc:
         4a:ab:11:bc:b8:b5:ea:08:32:42:f9:61:e2:49:ac:1f:d7:46:
         e2:9c:49:d9:9d:0a:1f:3f:50:cc:8a:39:79:62:83:c3:63:12:
         38:fb:8a:34:b4:d0:b2:2b:1a:cb:b7:6e:6b:98:82:9d:51:9a:
         e8:be:b2:cc:75:b7:97:81:f9:e8:3a:57:d2:a1:24:4f:23:72:
         38:3a:bd:f3:87:53:16:f2:aa:47:70:56:12:4f:98:8a:2e:1f:
         4c:87:99:9c:8e:61:a3:25:ab:6f:dd:5d:38:bb:9c:31:58:17:
         c7:b6:7c:96:8b:18:58:8e:38:8e:b6:a2:97:24:51:c6:5a:7e:
         8d:19:4d:10:b2:16:d2:83:8f:b9:b9:1e:ac:03:11:f2:e7:2b:
         2c:e9:99:bf:9b:0d:4f:82:99:7a:34:65:00:74:29:a2:d4:39:
         0b:dd:18:86:6f:2e:59:89:fb:a7:0c:bf:92:35:71:1b:15:11:
         c7:df:4d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:07:59 2026 by rpki-client