Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
File:                     n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft (raw, json)
Hash identifier:          Xi7cHUgJXs5Ljbg5MM0Bj5c8ZbRJHDYfzn/zQBTyLeM=
Subject key identifier:   79:6E:B5:60:A5:C9:A1:05:E6:68:01:E9:57:FA:69:42:84:58:07:34
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Certificate issuer:       /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial:       019DA48AC952B6B7BDFA25A58FC9DE3CC9B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
Manifest number:          1383
Signing time:             Sun 19 Apr 2026 07:00:52 +0000
Manifest this update:     Sun 19 Apr 2026 07:00:52 +0000
Manifest next update:     Mon 20 Apr 2026 07:00:52 +0000
Files and hashes:         1: BCsvI1mqtMkrqM1Desz65UxbMeU.roa (hash: oNMs5i3Xy1K3iMANMRawDJNBdjBrE5KXc5y/my453cw=)
                          2: LI0sVfoUzK1z9YOT5-FCjcJGQ0I.roa (hash: L0O8mT469MCzuE1WS6kEM7aYWqcvleiuYLagt0EiSfA=)
                          3: eFneRI8NVirY9FXkrSGjf8r8DIg.roa (hash: eg6+J92P4U7OROkq5yxujy7G7w0DLDuwMs/a/0cX+a0=)
                          4: hd7rQeulDecBxJXUMXx1KtWshog.roa (hash: E7bJmyCV3Xzny9dpUYDbi35SX9UwJAseA3WYq0vr1AA=)
                          5: jKCgpxt1ADjjHAE5Am2jfuifPn8.roa (hash: XeGQ/DX/ECCSWySWuH3BuJMwUzvEFlXF4fBqBfaoS58=)
                          6: n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl (hash: JBd4dEdvXebrDK+8cOoyfQRkedgBc6G023BUlZYynLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8a:c9:52:b6:b7:bd:fa:25:a5:8f:c9:de:3c:c9:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
        Validity
            Not Before: Apr 19 07:00:52 2026 GMT
            Not After : Apr 20 07:00:52 2026 GMT
        Subject: CN=796eb560a5c9a105e66801e957fa694284580734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e4:27:9f:0b:c6:23:0d:25:f2:55:70:82:24:
                    ab:d7:e2:42:06:f8:f1:a8:5b:f9:83:48:23:b5:f4:
                    a1:20:11:7d:4b:7f:5f:9c:fe:72:77:e8:29:ae:98:
                    ed:c9:24:cc:d0:a8:76:24:01:4e:58:fd:ea:8b:72:
                    a8:f1:0f:84:e5:38:eb:cb:f4:28:e4:b8:eb:91:84:
                    0d:aa:7b:92:f1:b4:04:4b:6b:e0:4c:dd:f4:54:cd:
                    fe:ef:f6:db:0a:07:eb:90:c6:e5:d1:b9:ce:ae:d9:
                    6f:08:f0:d2:f6:97:69:9c:cb:77:d0:7f:af:3d:67:
                    b2:6a:29:cc:11:5c:fe:dc:95:3d:f1:61:4d:0d:a6:
                    fb:6e:f2:f8:78:f3:57:13:e2:c2:64:f9:0a:e5:c5:
                    33:75:3e:e2:49:c7:40:f1:bc:0c:2c:c8:5a:83:11:
                    3c:f3:45:8d:fc:eb:00:dd:ab:04:b2:b6:99:ce:d0:
                    ce:72:dc:f6:b6:b9:e4:ff:bb:38:de:a2:7d:18:14:
                    90:b9:2b:7a:42:a0:8c:f6:2d:b0:0c:2e:b0:28:bc:
                    54:85:44:c4:a7:4b:dd:61:28:08:bc:d6:32:9a:02:
                    24:2a:96:bc:a7:68:e3:e9:c6:76:15:98:38:ff:d3:
                    10:60:d3:5b:a0:98:70:01:73:d8:4f:e0:4c:00:af:
                    16:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6E:B5:60:A5:C9:A1:05:E6:68:01:E9:57:FA:69:42:84:58:07:34
            X509v3 Authority Key Identifier:
                keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:97:d2:ab:b6:3d:1a:10:23:03:22:50:80:44:69:8d:70:a4:
         f2:af:dd:63:d7:7c:e5:78:5e:c4:3f:67:c2:38:36:3b:41:1a:
         e2:f8:61:77:6e:63:0b:a3:f0:55:51:26:90:b3:2b:19:c7:34:
         81:b2:4d:da:f9:99:47:5e:0f:39:d2:83:e2:f6:a3:2c:64:b5:
         c2:6f:13:82:98:ae:50:b9:e2:42:4b:7d:89:52:e4:f2:10:c1:
         b3:e1:cd:ea:b3:c0:28:e0:fe:6f:f6:47:62:f4:43:58:9d:2a:
         f0:40:6f:3d:9a:9f:ca:b4:2c:ea:1f:47:ab:83:32:63:53:30:
         8b:6a:8f:4a:01:67:90:c5:41:39:06:45:81:36:4b:03:6b:fd:
         db:bc:09:01:d5:7e:a4:0a:69:48:4c:fa:bd:59:4b:9f:ee:a1:
         52:94:62:b2:97:07:76:63:da:03:29:4c:1c:62:31:18:a3:3b:
         02:90:fb:9a:c9:d6:2b:1b:27:67:42:13:af:a6:39:32:44:26:
         df:a9:20:10:19:e0:f3:c3:de:d4:9f:75:5b:84:5a:43:70:69:
         39:5e:5c:f9:a5:2e:34:8e:1b:05:d3:9d:c2:0a:6f:9a:92:25:
         a6:28:d4:b0:e9:b7:53:e0:e3:fb:d7:b9:7c:42:18:14:cb:f8:
         86:08:1b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:24 2026 by rpki-client