Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
File:                     FSdFXqf84Xz9BDGYUljRPga_pzU.mft (raw, json)
Hash identifier:          hvqFCtAbU4aw/dNUvmutdibJ+Gev0SWnO6HDfi+OjGQ=
Subject key identifier:   19:F3:67:B4:E3:C6:8C:73:70:7C:2A:1B:F7:A8:30:08:3F:6C:2D:41
Authority key identifier: 15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
Certificate issuer:       /CN=1527455ea7fce17cfd0431985258d13e06bfa735
Certificate serial:       019DA309D205694D374A9539E87386E774A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
Manifest number:          118C
Signing time:             Sun 19 Apr 2026 00:00:22 +0000
Manifest this update:     Sun 19 Apr 2026 00:00:22 +0000
Manifest next update:     Mon 20 Apr 2026 00:00:22 +0000
Files and hashes:         1: FSdFXqf84Xz9BDGYUljRPga_pzU.crl (hash: U9Y3CcQzz4GCquYvAMij2Yz0OeKSnxA7YcP68vms/mA=)
                          2: jDnrlpzju9hJvaoQu4OXwOXPSyA.roa (hash: 5ssODwVsvynqY+E+xEJbdKWKWIk6XsrizpcJBHs3DN8=)
                          3: uxvdRH3Lx7ZudvJAlNDH4WnIMb8.roa (hash: 7H1SzU9/jyjG63PZcxwjrSZgzIIH3ECkB+OiPPAHQwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 00:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:09:d2:05:69:4d:37:4a:95:39:e8:73:86:e7:74:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1527455ea7fce17cfd0431985258d13e06bfa735
        Validity
            Not Before: Apr 19 00:00:22 2026 GMT
            Not After : Apr 20 00:00:22 2026 GMT
        Subject: CN=19f367b4e3c68c73707c2a1bf7a830083f6c2d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:44:58:e8:b0:7b:54:0d:dd:cd:c6:a1:1f:f4:
                    64:0b:bc:7b:52:7c:70:57:c4:b0:7a:40:e6:e9:ca:
                    61:b6:31:15:a2:f4:ee:d6:bf:53:e2:2e:77:c9:31:
                    e0:03:bc:68:63:40:75:4c:12:21:52:28:1f:56:5a:
                    59:38:b9:88:c2:70:94:b8:5d:95:0b:29:64:d5:17:
                    30:7d:c7:c3:87:7a:1e:f8:04:14:9a:11:e9:29:b0:
                    fb:a6:bb:b8:c9:03:fe:b2:e1:1c:87:ff:f9:39:cc:
                    ec:7d:bc:49:12:90:cc:34:d0:c2:e0:e4:fc:1f:94:
                    b2:12:7b:14:e3:2a:4e:07:c5:91:00:77:44:2c:4e:
                    c8:18:12:2b:01:6e:c5:2f:eb:ba:a7:dc:25:87:fc:
                    45:7b:f7:9d:c9:4a:d5:f0:f2:3c:29:3f:10:c7:c4:
                    9b:2d:cd:e5:7b:38:b8:2c:7a:86:ec:6b:50:34:07:
                    c2:07:11:fa:7d:73:62:3b:61:f3:60:0e:f5:74:d4:
                    3a:b9:d0:55:7a:c4:7b:c2:f8:86:b9:6b:3e:a1:76:
                    d6:28:2c:c1:d8:22:62:50:68:47:ca:ce:d1:87:ad:
                    49:36:42:57:c2:e6:5a:a7:22:97:23:7d:f7:8c:5c:
                    cc:a1:d8:0f:f9:f4:87:0f:99:30:f0:83:68:64:70:
                    15:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F3:67:B4:E3:C6:8C:73:70:7C:2A:1B:F7:A8:30:08:3F:6C:2D:41
            X509v3 Authority Key Identifier:
                keyid:15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:17:ab:a7:24:f4:7d:48:f0:f6:92:d5:28:86:ab:1a:91:4a:
         80:1d:cd:1d:a2:63:55:6d:4e:77:8a:fc:32:ae:85:3c:82:36:
         31:81:9a:f9:3b:2c:9e:c1:27:a7:5a:08:79:5e:93:f2:be:73:
         5c:c9:74:1d:f8:34:ac:77:96:e6:72:bc:84:64:32:2c:e5:f0:
         af:a5:7b:d1:1f:b5:f4:79:5a:b8:6e:09:1f:c6:53:27:e0:b6:
         d7:22:60:1c:df:8f:e1:d6:8d:af:b7:6c:cf:2d:db:73:a2:a5:
         fa:62:a9:1e:96:ac:83:ab:82:c7:e4:ef:36:c0:10:44:0f:21:
         13:a5:da:15:03:aa:d3:33:1e:f5:7d:fd:8e:8b:cd:03:2a:b4:
         c4:6a:ee:28:2b:5e:1d:f2:ab:ad:06:98:7e:11:88:50:b6:f4:
         27:a8:c3:a2:ec:88:63:18:f5:11:bb:f6:6b:fa:3d:f9:f0:b7:
         ed:56:1b:17:5b:cc:c1:19:e1:23:65:2f:34:96:82:b8:f1:6c:
         2c:f0:25:4f:31:35:f9:0f:9a:bf:6a:4b:b4:4f:ba:a2:fa:c6:
         1d:e9:34:c1:fb:f5:3e:fd:09:e4:1a:81:08:f7:1e:ba:e9:0e:
         19:c8:db:ee:d2:6f:9b:90:72:d6:3f:da:18:69:8d:52:69:e2:
         0c:47:15:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:45 2026 by rpki-client