Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
File:                     Fm9ncLp34DLn59HXMtl1AkHhGfk.mft (raw, json)
Hash identifier:          WEkuUHVB5NIBFekx0VR2C8gGiqDIbzQCd2OgDtMjTCM=
Subject key identifier:   4B:27:8E:DB:63:0A:69:8B:5B:64:A2:EA:D3:A1:9D:86:EF:9B:05:71
Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
Certificate issuer:       /CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Certificate serial:       019D99CFD97B6774AE030BBB81CDA9E59806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
Manifest number:          06F4
Signing time:             Fri 17 Apr 2026 05:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:28 +0000
Files and hashes:         1: Bv7qdIynKdZMI-P6-xF9VWllpNs.roa (hash: bLK9TvfWN2sH1qp924dJMpWvZP4Q59J3E6kgUjRdOMk=)
                          2: Fm9ncLp34DLn59HXMtl1AkHhGfk.crl (hash: /kjvtjCM3Dd0zhSbTZhXOeKxoYSb9xgx42emUpr3Ccs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:d9:7b:67:74:ae:03:0b:bb:81:cd:a9:e5:98:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9
        Validity
            Not Before: Apr 17 05:00:28 2026 GMT
            Not After : Apr 18 05:00:28 2026 GMT
        Subject: CN=4b278edb630a698b5b64a2ead3a19d86ef9b0571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:29:f3:7a:89:8a:be:f5:4f:bf:9d:c4:27:c0:
                    e7:ee:9d:d2:1d:4f:50:c0:52:79:0a:ed:9b:8e:d8:
                    0c:f3:46:5d:5c:61:e3:22:40:68:16:96:28:ba:5a:
                    9f:eb:74:76:b5:33:74:b4:60:63:4c:fb:b6:6c:8c:
                    34:e6:f5:ef:3a:64:d7:4d:0e:70:9d:a7:31:61:5e:
                    a8:c9:e0:0e:cd:06:36:8b:90:5e:b9:97:6a:9e:d5:
                    67:fd:03:96:58:d4:c9:3d:f8:59:28:f7:e0:84:7a:
                    2c:ed:f6:8a:3e:b9:31:32:79:4a:19:58:4b:a5:13:
                    b1:ff:d8:31:b1:ce:fa:0f:c4:a7:00:51:f7:63:07:
                    a8:a9:20:4b:ba:4d:26:61:42:78:76:07:c6:e2:74:
                    a2:0e:02:59:98:30:2d:4d:e6:17:3f:10:07:c4:76:
                    40:0b:4b:04:87:f9:65:c1:1d:5a:bb:f7:5f:6e:30:
                    ce:68:66:bf:29:66:0d:2f:ff:68:f4:3b:1e:17:80:
                    88:64:2b:14:ba:33:59:00:29:86:bf:39:9e:a7:a2:
                    50:25:ba:7d:df:e2:73:77:23:f2:4a:43:90:ec:26:
                    28:12:4a:86:92:12:a2:fe:ca:31:0e:ac:75:3c:4f:
                    cb:de:d0:89:02:1c:7e:55:91:fc:44:d8:9d:68:36:
                    d4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:27:8E:DB:63:0A:69:8B:5B:64:A2:EA:D3:A1:9D:86:EF:9B:05:71
            X509v3 Authority Key Identifier:
                keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:6a:b2:fe:bc:61:f1:a9:bd:b7:e6:92:f4:a6:b7:73:ff:3d:
         cb:be:f4:0c:24:31:48:d4:0a:ed:55:18:28:20:99:75:e4:2c:
         0c:5d:47:96:5a:91:fd:08:4e:51:56:fd:ee:b9:66:5e:fd:77:
         0c:1e:f7:59:77:27:c3:81:d7:65:30:a8:f1:47:5e:2b:e4:39:
         9f:69:6d:e5:4f:e4:eb:2f:19:e5:cb:c8:f0:7c:d3:2e:98:b0:
         4d:b6:6a:0a:13:84:ee:98:e3:f2:5e:4f:17:41:fd:82:57:fb:
         ec:28:fc:32:5c:e2:85:50:ee:ae:43:25:95:3d:b4:68:73:b5:
         0c:a9:d9:49:fa:6e:c8:3e:da:c9:12:06:79:f3:89:95:fd:de:
         cb:80:de:bc:97:87:88:b0:61:b8:3f:48:82:7f:0f:06:c4:2f:
         d0:6f:db:4a:63:a8:4e:96:a0:3a:2e:53:80:70:84:0b:ae:cc:
         ec:8c:db:b6:eb:f2:17:db:3f:29:8a:45:50:42:f1:75:1d:4b:
         47:58:b5:18:e6:68:ca:33:b7:3d:de:d9:0d:57:b9:41:b8:1b:
         6d:2d:8b:d1:d9:88:9e:39:85:46:f0:8f:7d:26:da:8a:85:8f:
         fb:ec:b9:2e:a6:6e:c3:48:82:18:bf:df:78:23:f2:2f:94:c6:
         ed:5b:98:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:12 2026 by rpki-client