Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
File:                     pPEx4-FQWNk__dtgrHCDvvidLoY.mft (raw, json)
Hash identifier:          53BKSLJ0+hhwWR00lfGtsWkEa73epPO2P3UYC2pQQfI=
Subject key identifier:   F5:91:66:BA:4A:3F:FA:1D:2C:71:E6:BA:F8:8B:49:6E:7C:EF:29:F4
Authority key identifier: A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
Certificate issuer:       /CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Certificate serial:       019D981857460A902A56FA63A5C1F378E2DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
Manifest number:          0B4B
Signing time:             Thu 16 Apr 2026 21:00:25 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:25 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:25 +0000
Files and hashes:         1: 1-Ea5LT1K8F6WUZhY_U_lKnZaXcY.roa (hash: x7c/Qt2ZfBYPaYf0LxG+u+LvENTrFJB+iJAEDKpvDxM=)
                          2: LC9OsZPmFyHE-17gPISnP-rIekM.roa (hash: aLAimHcWzq8XoGgwDQKHrZcmH3h9ns5QyipqRfZdJDQ=)
                          3: pPEx4-FQWNk__dtgrHCDvvidLoY.crl (hash: lIoERgagkoAFaoqI39LA+oHgVR6wHFM2HIVSzyzrODw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:57:46:0a:90:2a:56:fa:63:a5:c1:f3:78:e2:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
        Validity
            Not Before: Apr 16 21:00:25 2026 GMT
            Not After : Apr 17 21:00:25 2026 GMT
        Subject: CN=f59166ba4a3ffa1d2c71e6baf88b496e7cef29f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0a:f1:03:ae:76:28:1c:a1:fc:71:86:7e:e5:
                    21:b8:d0:b5:18:83:26:8c:38:d8:cb:f9:61:63:c9:
                    e5:6d:05:1e:72:75:f3:dc:25:ea:13:c0:4b:ae:2b:
                    90:a1:0c:94:30:85:4b:2d:8b:30:72:8c:f1:67:c9:
                    b0:d5:60:18:77:ae:4b:c1:89:25:85:aa:fe:4b:52:
                    43:c1:98:8c:22:0d:8d:d2:a6:73:12:3b:13:05:be:
                    0b:91:75:a4:7e:f4:a3:00:5c:e1:cf:e3:02:f6:ca:
                    d2:52:d7:d6:91:81:fb:16:67:da:52:db:5c:3d:dd:
                    80:e1:41:54:19:aa:c8:26:8e:f8:43:8e:e6:e2:d6:
                    6b:ab:a8:fe:5f:a2:b2:05:53:1b:d7:0d:4c:40:0e:
                    36:1c:e1:06:5b:37:4a:c3:4b:86:a0:22:7c:36:fe:
                    b2:f9:2f:0c:f9:87:c7:02:de:0c:53:93:41:cb:6d:
                    0e:3f:f4:f3:05:83:af:97:44:2d:a7:7a:bb:9f:71:
                    4a:20:57:c7:06:71:77:10:79:bd:55:db:fd:d3:7e:
                    d1:0a:03:05:69:ff:2b:8b:81:b6:27:83:3d:8b:3a:
                    99:8d:99:3f:ed:1c:94:58:a0:22:df:a1:27:ec:20:
                    27:cc:3d:1d:4e:d2:e4:3a:2a:d4:1c:a4:e9:c5:8b:
                    f3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:91:66:BA:4A:3F:FA:1D:2C:71:E6:BA:F8:8B:49:6E:7C:EF:29:F4
            X509v3 Authority Key Identifier:
                keyid:A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:8c:85:07:eb:e8:75:a6:b6:3b:4a:5e:45:2e:cb:5c:7c:e1:
         16:7e:8f:f3:f0:07:90:d2:cd:c5:a5:48:9e:6d:52:ca:36:f7:
         b3:da:44:ac:cf:6e:4e:09:06:94:22:02:17:9c:85:97:cb:d5:
         65:b4:85:e6:0a:71:9f:31:98:81:2b:f5:9a:27:87:e0:16:3e:
         e9:e1:c1:6a:59:e7:8e:19:87:f5:fc:ca:1d:4c:83:07:33:1b:
         2d:a8:99:7b:43:47:27:9b:41:f2:81:32:be:cf:cf:fb:a6:9d:
         48:dc:fe:9a:3c:e7:58:27:93:bc:bf:af:54:fe:73:09:56:3d:
         6f:c8:a0:d8:9a:a0:66:9c:53:1a:c3:4c:6e:cf:12:06:32:8a:
         78:7d:d9:c2:52:0b:97:a6:6e:af:9f:36:89:4f:7f:26:b7:00:
         b2:59:a9:5c:c4:0f:42:d4:05:33:12:64:03:e2:0f:1a:b7:c9:
         96:14:cc:c1:14:b0:dd:b4:fa:34:b0:be:db:24:e2:39:1e:fd:
         64:4d:b5:35:6e:ea:3e:5f:70:e7:4c:a0:a0:88:8f:a7:f6:bf:
         3b:ae:49:3b:2c:c3:f1:94:60:28:50:d8:ea:f2:5c:f3:c7:3d:
         3e:72:04:50:9f:b8:7e:93:82:18:a0:2b:5d:cb:d5:fb:da:12:
         5e:03:40:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:42:53 2026 by rpki-client