Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
File:                     0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft (raw, json)
Hash identifier:          KUFLmdNl9HcmsCMdXip8hrxXEc6pFqjkoB5nNFKkhwI=
Subject key identifier:   01:43:40:1A:3A:96:A8:9F:E5:20:C1:0C:84:39:BF:8B:7F:FB:4D:5D
Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
Certificate issuer:       /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Certificate serial:       019D9A74C840FCCEA423CEE847FC97892D06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
Manifest number:          1299
Signing time:             Fri 17 Apr 2026 08:00:37 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:37 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:37 +0000
Files and hashes:         1: 0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl (hash: T7uZhE5uGnSgoZrAPLGP1jmAXIUFjBj1708ZJD9C7V8=)
                          2: 1-crrXO-fETfpfCuOfq_V8AAtFcU.roa (hash: tdCum/fabFsLr9FpxBtUaox/ikhPTJgRBISx07CTGFc=)
                          3: m6ptgFXprSst72B7DcWjacefpu0.roa (hash: MUx4NpBh49q7kC7uF4y0p7+rMSycmRDpaX5i1+bhvgk=)
                          4: nRGVIh5sE05xD692H24Cxlq7V8o.roa (hash: Tc2ZVvug9tFo5lvN6aBVNCGxx5GKA6dz+Rua6DfVBe8=)
                          5: qW_xRDyYFTJ1pnImR0U2Y6u9sv8.roa (hash: lYESXNxjJKf8HpJy1cENZI84AstuQ+Y1hlO3VCh5QhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:c8:40:fc:ce:a4:23:ce:e8:47:fc:97:89:2d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
        Validity
            Not Before: Apr 17 08:00:37 2026 GMT
            Not After : Apr 18 08:00:37 2026 GMT
        Subject: CN=0143401a3a96a89fe520c10c8439bf8b7ffb4d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2e:23:b8:f5:51:1f:9d:77:e4:8f:e8:1b:6c:
                    c4:be:c2:78:18:89:ae:6a:f4:5e:60:7f:08:d9:72:
                    8e:17:ec:f2:76:64:b0:61:19:02:7e:3e:cf:c5:1a:
                    fa:36:0c:2c:8c:9c:45:70:5a:b9:74:09:b8:b0:03:
                    26:9c:e8:7e:e8:18:51:5f:ef:93:24:c6:b4:8b:75:
                    50:44:f6:25:f2:28:33:4f:40:d4:4a:f4:19:a9:28:
                    93:07:30:01:fc:63:5b:73:8e:f3:bc:32:bc:f5:83:
                    f5:f3:8e:a6:e0:18:b0:07:c8:02:b1:fb:21:0b:20:
                    0e:62:4f:7e:9b:27:8e:e1:c2:f5:92:3c:a4:fa:30:
                    6e:c2:3e:b7:0f:73:4f:9a:1e:01:5c:dc:c3:91:3a:
                    2b:84:2b:cd:db:3a:1d:e6:f7:eb:60:b6:84:c0:5e:
                    29:d2:78:2b:ca:46:ee:50:94:b0:00:75:68:7e:36:
                    aa:78:16:ba:f9:f4:80:43:57:39:3f:89:38:f4:e9:
                    95:ce:da:34:96:82:46:aa:df:0b:5e:ae:a3:80:88:
                    8d:3e:52:6c:0e:19:05:43:16:64:3f:6d:d1:b0:b0:
                    3c:dc:6c:7d:8f:c5:6a:5a:d0:60:17:63:6a:03:f8:
                    95:73:31:8f:18:e7:01:42:06:0e:47:dc:15:52:11:
                    a6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:43:40:1A:3A:96:A8:9F:E5:20:C1:0C:84:39:BF:8B:7F:FB:4D:5D
            X509v3 Authority Key Identifier:
                keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a2:58:06:63:de:85:1b:3d:0b:8b:2e:8d:18:22:7c:3d:dc:
         8a:38:a8:dc:5d:25:2c:7e:61:9a:d2:09:36:11:c6:eb:0d:ce:
         b4:1b:cf:83:20:d1:bb:e1:62:db:e3:44:e6:a1:5b:77:2c:ae:
         09:80:d3:a8:20:b2:2a:77:49:60:17:64:29:0c:de:95:32:9e:
         81:5a:d4:4b:90:fb:1d:6f:05:56:ca:62:4a:a7:83:f1:f7:13:
         aa:b5:cd:9a:16:a9:ea:9b:84:40:6a:30:95:b9:34:c5:84:86:
         ae:19:6f:63:c9:1a:b2:e3:c1:23:b9:83:76:36:24:43:4f:87:
         7f:b1:d3:e9:db:42:ba:67:d3:3a:e8:fe:96:37:c2:ce:fc:76:
         40:34:1e:e2:7b:34:a1:df:7f:10:b4:1a:8b:c7:c0:81:98:ba:
         69:bc:27:e0:57:48:cb:c3:e6:ae:b9:de:ec:7e:29:4b:01:59:
         d3:1d:b0:08:78:d1:a2:26:90:bb:06:41:8b:b0:80:39:c4:66:
         34:7a:af:f3:10:a8:7b:65:ee:67:9d:0d:90:7b:a4:b4:66:98:
         9d:d8:eb:56:ba:d0:23:eb:85:f8:2e:d8:73:e1:47:ee:98:4b:
         6d:08:f4:cd:c7:c3:85:a3:48:64:18:b0:85:69:fa:1e:c2:86:
         a1:d1:a0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:05 2026 by rpki-client