Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
File:                     kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json)
Hash identifier:          M8bEWmYSDVZfaXkmsnyUg8mdq2wd9ea3QIydW0E3DHM=
Subject key identifier:   90:82:02:F6:30:93:FC:49:0D:31:14:9A:2E:DC:6F:99:53:C6:07:65
Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
Certificate issuer:       /CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Certificate serial:       019D99D01D10BF5E22008C7E778306D69D13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
Manifest number:          1854
Signing time:             Fri 17 Apr 2026 05:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:46 +0000
Files and hashes:         1: f_NbFcXhsPWXIxa4Q-RL2lQE9H8.roa (hash: r4M7joZLYltcoMhevwH4wLr16D2gCWd/Vhwm8RHpnDM=)
                          2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: WS3RT0DYWl1qhmnTfKgvTUSv+avT6J0kutjquRfEIXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:1d:10:bf:5e:22:00:8c:7e:77:83:06:d6:9d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366
        Validity
            Not Before: Apr 17 05:00:46 2026 GMT
            Not After : Apr 18 05:00:46 2026 GMT
        Subject: CN=908202f63093fc490d31149a2edc6f9953c60765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ac:fd:f7:69:03:63:e3:43:08:31:28:02:e0:
                    ce:08:d0:38:01:a8:53:19:8d:ea:e9:87:b7:98:ed:
                    91:ab:db:82:eb:f5:49:e4:19:52:23:cc:ad:0c:f2:
                    6f:7e:45:6a:f3:73:20:b1:9b:c3:4f:0e:a8:00:73:
                    32:bb:7a:ac:4b:cd:5c:37:ab:8e:64:3a:b8:2c:f8:
                    6f:dd:41:d0:24:51:71:ef:81:45:17:4d:3d:d9:0c:
                    d4:35:db:5d:b2:9f:4f:58:ae:29:46:fa:0e:26:bb:
                    c0:39:84:e9:f2:30:b3:9a:fc:be:ea:e5:90:85:9d:
                    72:91:23:35:80:a1:e4:25:7c:26:a1:a7:57:3e:08:
                    ee:66:6b:ac:43:dd:bf:d7:82:f8:e0:92:01:e4:26:
                    87:52:d9:93:8f:91:58:4a:fc:94:b4:51:d5:50:36:
                    45:47:17:28:78:5f:37:2a:cf:60:0b:8f:96:65:53:
                    be:69:9a:6f:40:1a:da:ed:81:0f:c6:4d:52:b7:73:
                    72:b5:ee:98:2f:e1:2a:d8:cd:08:db:50:1f:2b:8a:
                    8b:b1:16:1b:71:68:cf:48:8d:9f:5f:1e:8a:4a:7a:
                    51:dc:2d:7b:37:fd:0c:04:5f:d5:58:00:94:7b:2b:
                    23:c7:8d:ec:be:d4:58:d5:62:46:c6:f6:4b:b4:8d:
                    c4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:82:02:F6:30:93:FC:49:0D:31:14:9A:2E:DC:6F:99:53:C6:07:65
            X509v3 Authority Key Identifier:
                keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:fd:30:31:83:d9:48:c8:a4:de:ae:36:ef:d3:b4:d9:0d:4a:
         49:3e:80:4f:21:ce:9b:d7:83:a3:77:35:1d:75:2f:d6:df:3e:
         4b:5d:5b:2d:a4:a9:6d:7e:8f:ac:d9:63:61:54:a0:b7:0a:4f:
         e2:a0:70:ba:27:5b:cd:b2:a0:76:ec:00:be:bf:1d:d2:4c:f2:
         93:e4:6d:b8:35:79:7c:19:e4:55:43:0e:07:7c:21:db:f8:b8:
         55:6a:91:47:e3:dc:05:b2:88:0f:16:09:d0:ad:1f:94:e4:71:
         71:b5:7a:c1:da:28:51:fc:fc:06:5b:c4:61:b9:7d:7c:8e:cc:
         a0:57:bb:20:c1:ea:5f:b9:47:1b:f8:d4:b1:04:b4:c6:48:a3:
         6a:54:a9:7e:aa:d5:d6:6d:9f:34:6f:11:4d:b8:1b:62:0e:b0:
         13:ab:78:32:99:d8:b7:ab:d7:07:79:fc:18:81:d0:4e:bc:7f:
         3d:47:db:80:d8:1d:64:46:76:7f:ab:f9:c9:2c:c5:44:06:81:
         3e:e6:46:5b:bb:5a:58:6d:4f:77:17:0c:bc:df:b3:e8:b5:2e:
         da:02:57:9f:8e:6c:89:0c:42:e1:a6:e3:77:fa:7b:53:c3:79:
         5d:39:6c:31:5f:6b:c3:bb:9f:81:a2:5c:40:85:43:6c:14:11:
         1c:ba:5e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:38 2026 by rpki-client