Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
File:                     TblS7RzXo4A89Nv9NA6nSWMmi6A.mft (raw, json)
Hash identifier:          3n3YxANrrzQ8+cBWMkuYuW6p+358AEZxy2mpio77U+I=
Subject key identifier:   62:B7:C8:FD:0A:3C:5D:B7:A5:AF:EB:2A:18:F6:C6:00:28:15:02:6A
Authority key identifier: 4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
Certificate issuer:       /CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Certificate serial:       019D9A3E6773BCFF5C3F0D090316A35BEF67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
Manifest number:          160D
Signing time:             Fri 17 Apr 2026 07:01:14 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:14 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:14 +0000
Files and hashes:         1: TblS7RzXo4A89Nv9NA6nSWMmi6A.crl (hash: TxpBztEYxZnBVcXuf2k3+zUPy5Eca/1dMgaLsJt6loE=)
                          2: VrOdFAUKX1ouwmCsQ9_XlNyNq1s.roa (hash: n2RF1UdtGKXTdxJvkP7iUrdA4Ve98kwr+cqIiG+JbSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:67:73:bc:ff:5c:3f:0d:09:03:16:a3:5b:ef:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
        Validity
            Not Before: Apr 17 07:01:14 2026 GMT
            Not After : Apr 18 07:01:14 2026 GMT
        Subject: CN=62b7c8fd0a3c5db7a5afeb2a18f6c6002815026a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b7:73:21:78:88:69:62:a2:95:48:93:7e:f0:
                    1c:0a:25:73:a8:c3:fe:c3:52:58:96:e1:1c:b7:bf:
                    2a:1d:03:8f:0c:33:fc:5f:24:cc:50:4e:0c:bf:ae:
                    9a:89:f5:0c:13:fb:af:04:5e:4e:b5:15:dd:9c:2a:
                    20:2a:80:1a:cc:a5:a3:74:92:30:01:c4:cf:3a:35:
                    f5:d7:10:50:5f:05:63:02:9b:d1:4e:f7:3e:c4:3e:
                    0e:1a:34:79:bf:3c:25:3a:80:80:4f:51:c1:b0:9b:
                    88:6b:9f:77:c2:3b:5c:6d:d6:34:9f:fd:ba:f5:bd:
                    c1:ed:e3:8c:5c:1b:1f:45:38:19:0a:23:d4:52:ce:
                    c0:ac:8f:74:bd:33:95:a9:c1:06:b0:37:b7:db:a3:
                    56:10:76:e2:23:6d:3a:d6:af:f2:05:a3:25:43:1c:
                    e6:48:a7:fa:39:cc:1b:02:60:3e:28:d8:b8:63:09:
                    c7:19:08:90:f2:c8:c9:be:c7:aa:27:2f:06:5e:9f:
                    9a:58:27:a0:69:29:c3:91:2a:63:b2:13:5f:35:8f:
                    2c:37:18:eb:a6:1d:e3:9b:ab:bd:94:2a:d1:fc:6b:
                    8c:26:1c:cd:e3:7a:9f:41:40:bc:a0:37:bc:f5:23:
                    ae:15:66:1f:5e:8d:a6:8f:fa:98:f4:81:6c:73:f8:
                    6d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B7:C8:FD:0A:3C:5D:B7:A5:AF:EB:2A:18:F6:C6:00:28:15:02:6A
            X509v3 Authority Key Identifier:
                keyid:4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:36:f8:aa:e7:e7:f1:bc:d7:f8:27:30:6c:53:6a:5b:1f:23:
         0d:a2:37:75:e1:21:72:3f:1a:01:fa:37:50:76:f0:b0:ed:2e:
         13:0c:93:a8:5c:cc:8a:77:53:ef:d2:c5:58:1a:05:e7:c7:f1:
         65:9c:cc:28:25:77:8c:1c:ab:e0:50:44:89:95:99:de:21:f2:
         c2:9d:16:4e:70:37:9c:f1:9f:ec:cb:a2:66:46:24:6f:e4:58:
         61:bf:6c:14:cc:64:b1:a9:84:b9:5d:79:2f:fb:0a:aa:7a:88:
         f1:e0:53:e9:e2:e3:08:63:2f:28:ed:61:85:dd:4d:ac:7b:43:
         93:59:34:74:bd:03:90:cb:55:ba:9c:e2:4a:89:d9:1b:34:cc:
         7b:4a:aa:e9:7f:43:2f:58:70:1c:d5:d2:5c:2c:c0:43:cd:83:
         36:a4:db:10:ef:a1:07:37:1e:7e:00:de:4c:8c:6d:9c:b6:9d:
         20:e5:ea:e7:d6:ce:33:83:77:31:f8:5c:3d:8e:1e:9b:73:30:
         2a:cc:ab:68:af:d9:d6:76:10:64:3a:74:f8:69:24:60:f5:f3:
         92:ae:66:cc:9e:8c:68:ea:1a:b4:ff:c6:6c:12:ae:14:2d:0f:
         13:cb:8f:88:a1:cc:47:6a:a9:cf:bb:b4:8d:e3:e8:8b:e6:11:
         80:17:22:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:21:37 2026 by rpki-client