Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
File:                     1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json)
Hash identifier:          foYEkieHyqlVm2Bxd9hCX+GWtHj9Gij7Ua20QsMWVwY=
Subject key identifier:   A3:F7:A9:E9:EE:87:6B:95:58:FE:B7:3D:57:64:56:59:02:DF:F2:F4
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Certificate issuer:       /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial:       019D9818D51BFE37189D103AE4B7D1FDB1BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
Manifest number:          114F
Signing time:             Thu 16 Apr 2026 21:00:57 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:57 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:57 +0000
Files and hashes:         1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: kxavM9S8y4F1+LzBLVmv+TqJYDt/+AjIZ9XD/Xlh51g=)
                          2: 1qgUA35hbbIGcm-jImU1wJP1uAg.roa (hash: pVjSDhFzGgaJ+xSK7dqGwBjTwMA/n9tQ1SKH0O/Fad0=)
                          3: 6mVE9UvtAfo4Qyo5mfFiFR5CYCE.roa (hash: 7jvO+7DiigtIMsr2CKWo896+gSiIAOMeoyBPHjSRSp0=)
                          4: Bh-T23qknIeIH3OoC5e589rNtKc.asa (hash: fzH1wDHUsYlpNJwrEYlI/LoWVi84gSQemumRr98/KQM=)
                          5: JWV8R4TfRRoO8EKRkWQEhGBYa6w.roa (hash: PEKThMrpJCdPtYK4KnaIvA8wKCSWObeFX4VH05QYfXg=)
                          6: k7K2nGDuPiO7Se_nhxH46pUsKyo.asa (hash: xc6+rKQG4W4vPyLrCUrae4qpuB00CQX79V15oGw6dqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:d5:1b:fe:37:18:9d:10:3a:e4:b7:d1:fd:b1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
        Validity
            Not Before: Apr 16 21:00:57 2026 GMT
            Not After : Apr 17 21:00:57 2026 GMT
        Subject: CN=a3f7a9e9ee876b9558feb73d5764565902dff2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:8a:89:f1:4a:48:25:20:ee:f6:15:28:64:
                    6e:fa:8a:06:07:34:51:5c:e4:8f:f0:e3:11:b5:b3:
                    5f:c5:64:f5:64:77:13:5d:30:e3:ac:b6:06:43:1a:
                    e6:c1:cd:85:a0:2e:eb:3d:5a:f4:44:ca:42:e3:1f:
                    c4:6d:75:b7:b5:75:85:31:d3:57:5a:2a:10:07:04:
                    ce:18:4a:ae:a5:69:9d:09:bb:bf:42:a3:84:55:1a:
                    bb:18:77:3a:c5:c6:53:d2:bd:d7:36:8d:b6:c5:79:
                    ab:7d:4a:07:ba:91:68:48:03:4a:5c:7a:00:fd:5f:
                    48:04:46:f7:7d:b8:87:e4:98:14:d5:33:f4:bb:94:
                    54:60:13:64:16:29:e2:71:95:32:aa:3d:66:c2:3a:
                    fc:d9:b1:f3:10:6e:8c:d6:10:31:a7:5c:c0:85:36:
                    35:89:97:13:a8:54:2a:58:68:41:0b:ce:fb:44:e2:
                    b2:d2:df:77:59:49:a1:68:55:87:79:87:bf:27:ae:
                    c7:37:27:bf:9b:5f:16:c2:b1:aa:83:1b:41:1a:23:
                    55:ce:b1:1d:25:cd:c5:7e:d9:16:01:58:54:35:43:
                    78:c6:04:15:c4:8c:86:fe:b8:9d:ef:1c:00:85:59:
                    5c:ec:91:97:ca:66:78:04:11:d9:62:85:2c:50:a3:
                    fd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F7:A9:E9:EE:87:6B:95:58:FE:B7:3D:57:64:56:59:02:DF:F2:F4
            X509v3 Authority Key Identifier:
                keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:5c:27:d3:96:51:90:f3:c5:7a:06:a8:bc:16:c2:05:0c:9d:
         18:00:e0:34:c4:1d:ac:87:06:72:a7:87:8b:59:ae:8e:4a:b4:
         77:32:64:4c:56:a6:a7:b6:a1:14:84:50:fc:ca:b5:63:ac:16:
         87:75:01:b5:46:0f:6f:f2:0f:0a:c2:7c:a0:51:3f:23:42:31:
         62:b1:71:8d:74:3b:ca:5d:02:8f:18:22:ef:e6:cf:5c:8c:b8:
         6b:29:92:1e:0e:5b:72:83:47:6e:5f:bf:31:f0:26:8d:95:93:
         13:4a:cd:bd:12:aa:6a:eb:95:be:0a:5e:91:bf:29:88:94:90:
         18:0b:aa:0f:7e:0c:29:d2:46:ec:d4:33:dc:26:1d:84:e8:f5:
         64:83:bf:68:68:61:46:ae:ed:96:90:18:7a:68:71:71:73:b0:
         96:91:c5:a4:ae:db:c5:8e:90:6f:56:db:bc:7d:c0:ae:ef:b3:
         29:e2:7b:7e:c4:6e:95:cd:2d:8e:fc:37:7e:dd:4c:28:4f:82:
         55:8b:01:fb:ae:4b:03:30:99:a8:59:bb:46:b2:50:ba:35:24:
         3a:02:9d:ae:d2:f1:25:f9:72:57:02:40:9a:90:7b:c4:2d:30:
         7e:f2:06:0e:54:36:57:54:67:3b:de:e4:60:1d:58:96:96:3c:
         8d:d7:e5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:55:04 2026 by rpki-client