Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
File:                     Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft (raw, json)
Hash identifier:          VHT9WIPpapzMupU7iIk4Lpad9GUUp7brHIuxQMw4qoQ=
Subject key identifier:   8E:67:D3:35:01:17:DA:D8:48:52:54:9A:5D:0A:32:19:67:1D:2E:2B
Authority key identifier: 16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98
Certificate issuer:       /CN=1627b80681f5b48e126898295983e0df29971b98
Certificate serial:       019DA340CFF95A7AF7CBD88AC232AF6C3DD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
Manifest number:          12C1
Signing time:             Sun 19 Apr 2026 01:00:26 +0000
Manifest this update:     Sun 19 Apr 2026 01:00:26 +0000
Manifest next update:     Mon 20 Apr 2026 01:00:26 +0000
Files and hashes:         1: Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl (hash: CY2gDyXzWet3mtmHFGARqYE8MLkHPOzlmAZI/ChWGuU=)
                          2: WrFi9wM8-MBxaZss80dQCIHVjIA.roa (hash: T4A9s6KUh5deKQT7uVYVm6QXd45Uqa2wbOgRg/X9a94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 01:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:40:cf:f9:5a:7a:f7:cb:d8:8a:c2:32:af:6c:3d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1627b80681f5b48e126898295983e0df29971b98
        Validity
            Not Before: Apr 19 01:00:26 2026 GMT
            Not After : Apr 20 01:00:26 2026 GMT
        Subject: CN=8e67d3350117dad84852549a5d0a3219671d2e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:be:34:e3:cb:4a:c0:b0:38:a0:bf:a8:2b:
                    6d:11:f0:7b:cf:36:d2:45:a3:47:0b:56:43:f9:8d:
                    84:ce:68:f0:de:1a:d5:d4:d6:15:61:52:23:46:ec:
                    fc:2b:e4:b1:92:62:aa:fd:38:a0:0e:41:68:be:7a:
                    d0:e7:77:01:c9:01:cc:5e:56:5e:74:e8:ec:ba:1f:
                    52:34:2a:7e:7a:12:ef:be:1e:ba:b6:cb:5b:93:93:
                    af:c4:2c:51:b2:47:08:32:45:e8:2e:b0:37:b0:a1:
                    8b:fb:bd:21:1f:d1:04:0f:ba:ec:57:19:4a:30:03:
                    a7:b3:c8:4c:34:f0:44:13:aa:87:85:91:33:ab:36:
                    29:95:7b:6c:d6:30:3f:b2:6a:d2:86:67:d8:89:d3:
                    25:8c:32:19:77:06:e7:3d:fa:78:36:49:45:76:95:
                    05:56:38:1d:2d:0d:98:11:de:c9:66:a3:fb:31:3b:
                    73:40:9e:bf:89:9d:ed:69:62:6d:4e:ad:dd:7d:e6:
                    d0:5b:44:21:5b:f5:fc:26:a8:39:75:c4:f8:40:f1:
                    78:ff:16:f1:e1:81:7a:41:17:35:06:c0:ce:b7:5d:
                    2e:5f:29:63:97:2c:07:59:83:d1:21:07:f6:ef:27:
                    c2:60:0f:b2:67:a5:a5:fd:c5:68:7e:c1:bf:f3:dd:
                    7a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:67:D3:35:01:17:DA:D8:48:52:54:9A:5D:0A:32:19:67:1D:2E:2B
            X509v3 Authority Key Identifier:
                keyid:16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:30:04:c0:b2:33:a2:dd:80:e1:0b:6c:c0:29:df:5c:f1:e2:
         5d:d6:b6:e3:68:fe:b9:05:3f:30:93:b0:a0:c6:29:f7:d8:60:
         fc:0c:65:a2:2e:4b:0b:7a:35:51:45:37:a4:67:9a:8b:91:fa:
         f8:98:bb:a3:0e:20:82:b3:bc:a9:28:cc:fb:ac:9d:39:84:fc:
         99:f6:44:bf:db:29:ba:13:4b:13:83:f8:17:76:2a:48:42:eb:
         23:15:a6:f8:74:67:ac:c4:90:f4:be:89:b9:af:6b:e3:fd:f8:
         9c:86:87:ca:50:c1:68:34:37:17:9e:32:f9:7b:25:bd:7a:f0:
         0c:09:81:6d:3a:bc:95:d6:f6:dd:12:ae:42:e9:c8:8e:65:b9:
         4a:35:b9:4e:76:fa:9f:9a:4f:82:14:a2:2d:a3:09:7f:23:6c:
         5c:71:f2:29:e1:40:97:f7:01:2f:c9:bb:e4:ee:9e:bb:0c:e7:
         78:ee:0a:55:ea:f8:01:4c:e3:64:98:6f:88:d4:2d:3f:f2:73:
         8d:dd:7d:a7:32:af:90:ce:5f:86:eb:2f:70:ff:e7:eb:28:24:
         47:6c:bb:10:94:f0:86:80:56:1f:88:92:91:23:4f:8d:fb:6f:
         c7:8e:e0:83:32:6f:eb:86:cb:3a:70:70:61:39:f3:c4:28:70:
         6f:a9:dc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:33 2026 by rpki-client