Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
File:                     FSdFXqf84Xz9BDGYUljRPga_pzU.mft (raw, json)
Hash identifier:          1QsEebi5EgQpSRmmRXTmko5tkZuydPRZIZiXuufAo7A=
Subject key identifier:   9B:EC:9D:D7:CD:B4:FE:C0:E1:41:EA:3F:2F:6D:86:19:82:65:44:60
Authority key identifier: 15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
Certificate issuer:       /CN=1527455ea7fce17cfd0431985258d13e06bfa735
Certificate serial:       019D9961F59E30B7CBCBF99F04DB393EF215
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
Manifest number:          1187
Signing time:             Fri 17 Apr 2026 03:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:27 +0000
Files and hashes:         1: FSdFXqf84Xz9BDGYUljRPga_pzU.crl (hash: 1fB0M7uBp78rZroCeWwo+M7xw8Ov58cumob4rfoYfWU=)
                          2: jDnrlpzju9hJvaoQu4OXwOXPSyA.roa (hash: 5ssODwVsvynqY+E+xEJbdKWKWIk6XsrizpcJBHs3DN8=)
                          3: uxvdRH3Lx7ZudvJAlNDH4WnIMb8.roa (hash: 7H1SzU9/jyjG63PZcxwjrSZgzIIH3ECkB+OiPPAHQwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:61:f5:9e:30:b7:cb:cb:f9:9f:04:db:39:3e:f2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1527455ea7fce17cfd0431985258d13e06bfa735
        Validity
            Not Before: Apr 17 03:00:27 2026 GMT
            Not After : Apr 18 03:00:27 2026 GMT
        Subject: CN=9bec9dd7cdb4fec0e141ea3f2f6d861982654460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:08:8d:86:05:a4:a4:29:0e:b3:9b:2b:8a:37:
                    ae:56:16:a0:05:50:3e:53:79:6d:7a:6b:d1:d9:01:
                    d6:aa:3a:d8:d4:bf:c2:fd:16:c5:14:93:31:dc:0a:
                    01:95:6d:f4:00:85:ee:ef:3d:92:32:37:11:26:c3:
                    73:6a:c2:93:a5:38:34:4e:15:a9:d6:ea:aa:1b:f2:
                    01:11:05:f9:22:f7:c0:dc:7e:b4:84:1f:51:65:1a:
                    75:52:b4:7d:1f:31:b8:e6:d0:53:65:27:80:26:ae:
                    05:70:14:ce:1b:bc:e2:10:52:08:55:c7:86:95:f0:
                    ec:42:5e:56:97:5e:bc:94:2f:4d:7a:6b:0f:a8:50:
                    e2:da:9c:8f:77:99:b6:c2:57:d4:e5:5d:5f:39:8c:
                    ed:da:89:c4:0f:d7:84:63:0b:4e:db:c0:53:ad:89:
                    f6:46:ae:77:49:21:72:bd:78:80:65:92:31:04:85:
                    83:ee:88:fb:5c:8d:79:86:d5:7c:b6:a6:d8:7b:7c:
                    ad:b4:3a:f7:79:c3:cf:2b:9e:07:4d:7c:ed:60:81:
                    99:c9:7b:b8:df:c3:27:e4:7e:88:bd:84:f0:31:72:
                    f2:87:fb:e7:b8:3c:58:11:c8:f5:4e:1f:5d:53:82:
                    1a:95:84:67:f6:b0:a6:2f:f0:88:9c:05:40:0e:60:
                    0b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:EC:9D:D7:CD:B4:FE:C0:E1:41:EA:3F:2F:6D:86:19:82:65:44:60
            X509v3 Authority Key Identifier:
                keyid:15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d3:3e:6b:67:61:3a:f6:a0:90:49:6e:3c:99:80:09:1c:70:
         d1:5a:fc:dc:c7:c4:5f:f2:83:a8:66:08:9d:a7:d7:0e:5f:b3:
         32:fc:91:97:2f:78:23:e0:68:b7:90:38:38:82:1c:79:09:8c:
         55:c0:67:95:f6:f7:aa:79:79:76:48:6a:a7:10:7b:d1:02:d2:
         b7:53:8e:5a:c1:48:c2:6f:6e:bc:ba:d0:a5:49:b0:27:1d:9f:
         02:53:aa:dc:4a:f7:f3:4b:fc:8d:96:98:e2:d2:43:22:7c:7b:
         0c:1c:f5:c2:96:28:ac:55:27:54:2f:09:3b:81:a0:b7:18:8c:
         21:dc:12:03:31:4e:36:89:52:ba:02:05:d3:67:0b:69:d2:0d:
         67:31:35:7f:6a:41:44:05:6c:4f:c9:59:30:56:2e:75:65:02:
         23:f4:0f:f3:98:3d:50:ed:b9:70:8c:f1:00:6d:1b:38:52:1c:
         28:f0:1e:81:4d:74:28:2a:f3:3f:97:4d:ed:49:e0:b3:49:f2:
         68:d7:70:ab:7f:e3:c8:ad:ca:f6:1a:57:62:f8:72:c5:fd:21:
         43:9d:23:79:71:98:dc:d6:e8:cb:1f:f1:dd:eb:af:57:7c:5d:
         5b:1e:45:33:b2:39:ba:44:a7:26:63:35:cf:4f:5c:c6:ac:53:
         3e:39:97:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:56:54 2026 by rpki-client