Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
File:                     RlxixrzUz7iTO8tqYc97Pa0vsRg.mft (raw, json)
Hash identifier:          2L7D0g86AZXyZBewqKVnjHnSb6OLjTQvNpx1jiBWx58=
Subject key identifier:   05:A5:0B:97:10:05:66:E3:5F:37:D5:40:CE:8A:5B:A6:18:12:94:B7
Authority key identifier: 46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
Certificate issuer:       /CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Certificate serial:       019D98BE099AFFC5685FFE30ABB9E32E3437
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
Manifest number:          0FB7
Signing time:             Fri 17 Apr 2026 00:01:24 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:24 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:24 +0000
Files and hashes:         1: ENG_c-IJkYRyd704wrJW6p57tLE.roa (hash: aVJt7m5b3gAwKY//U3FCsQzjDpxFgRS6LuQjONM9IoA=)
                          2: LKRFm8Pw00kXQoKIo5cZaR03rQg.roa (hash: ROfiKIWzfySuULtZm3Vy25ggedOkAvvyQXevFfnrv84=)
                          3: RlxixrzUz7iTO8tqYc97Pa0vsRg.crl (hash: TwGQZSCvBXHYxKJLnEcsvH/6FyjL3ikoNX1TTy37JeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 00:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:be:09:9a:ff:c5:68:5f:fe:30:ab:b9:e3:2e:34:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
        Validity
            Not Before: Apr 17 00:01:24 2026 GMT
            Not After : Apr 18 00:01:24 2026 GMT
        Subject: CN=05a50b97100566e35f37d540ce8a5ba6181294b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:42:54:c1:d3:92:70:e6:f2:c9:c8:ef:58:e8:
                    24:60:56:b2:25:cb:7c:bb:fb:6c:75:a6:db:35:8c:
                    bd:c4:b9:0e:c5:5e:5e:9e:3c:2c:a8:e2:76:07:e3:
                    47:b3:52:4c:92:6a:1e:03:3d:db:5a:28:bf:be:81:
                    6b:1f:d3:38:21:4a:5c:af:2f:7d:21:da:65:b2:2e:
                    36:df:d2:52:d2:fc:8d:35:a6:ac:2a:91:3c:2e:1e:
                    fc:bc:b1:8d:2e:8a:cb:a5:d0:3f:da:b1:09:ba:c3:
                    4e:0e:88:12:3e:fb:5b:c5:04:5c:e4:8c:30:88:f7:
                    b7:c4:32:37:4b:9f:c8:e1:da:4c:67:3c:91:4a:07:
                    8a:67:88:de:38:69:cc:45:87:3b:5e:a7:6a:6a:cc:
                    05:4e:7e:3c:14:93:20:4d:3a:74:71:f1:dd:f5:ab:
                    ac:cc:90:c7:7c:30:5a:c9:eb:16:15:e7:0e:59:56:
                    6b:a1:dc:e8:53:e9:bb:7f:10:33:e6:34:e8:fa:72:
                    3b:b1:df:23:ca:6c:b9:d5:ce:23:1b:ac:12:e8:1d:
                    31:8c:a7:ea:e0:b2:50:6b:47:c8:46:fb:48:83:89:
                    e5:ef:41:db:3f:8c:22:ae:c6:3f:66:98:c9:8a:8a:
                    ba:39:76:09:8d:67:13:8f:a1:d1:25:b3:45:24:11:
                    5d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A5:0B:97:10:05:66:E3:5F:37:D5:40:CE:8A:5B:A6:18:12:94:B7
            X509v3 Authority Key Identifier:
                keyid:46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:64:30:3f:8d:80:d9:a2:5e:f0:7a:99:eb:62:fc:56:dc:64:
         f4:bb:d4:47:92:35:4a:8c:86:83:40:38:f1:3c:f8:7f:97:6f:
         3b:d9:45:46:56:bb:19:6e:d1:83:07:20:0b:ae:26:ff:ba:55:
         06:52:72:4a:2d:90:64:29:75:fa:42:d6:8a:06:74:2f:f4:a9:
         9c:f5:8b:2e:b8:d7:fc:73:53:93:aa:4d:10:bd:ad:78:c9:9a:
         b9:99:25:4c:32:03:7f:fb:80:a6:cf:21:1d:07:7d:dd:dc:ba:
         c8:87:93:87:f4:53:5b:f3:02:65:17:00:bd:5d:06:c0:5c:12:
         52:15:69:b5:85:cd:a4:cb:f6:2e:a7:c3:93:f2:f2:05:ea:46:
         5b:15:2c:e8:81:d6:48:5b:23:b6:bf:09:0a:63:e0:75:78:03:
         61:db:45:c8:b0:46:fd:3b:44:98:1b:8c:9e:b1:d2:ba:64:fc:
         16:27:89:af:1b:7b:9a:af:fb:49:bb:65:8a:44:20:7a:68:8a:
         a9:d1:2b:0b:34:20:2d:e8:1f:d3:fe:f0:62:65:37:fb:c2:bb:
         43:fb:35:5f:f0:49:f4:cf:bc:1f:34:43:f5:4c:83:58:85:e6:
         21:14:9f:88:df:bd:0b:36:8f:4f:58:18:f2:a6:07:3d:2d:ae:
         a8:6c:92:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:11:39 2026 by rpki-client