Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
File:                     Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json)
Hash identifier:          ufEa+qB55mnYKuuKfdt01HDRxYjSWR+FKxuGC2oO57E=
Subject key identifier:   30:02:38:E2:E9:31:A4:21:01:02:0E:70:59:01:21:C9:F7:83:34:B5
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Certificate issuer:       /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial:       019D99D056A54DA9A9748A614EC7BA8FC845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
Manifest number:          0B38
Signing time:             Fri 17 Apr 2026 05:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:00 +0000
Files and hashes:         1: 5q372ZYutsCUz8Adh42BDHyk-Q4.roa (hash: BchsU4eLHUNLVQAhgzCwXDrK//3ZZPqmg8lTLv3tS4U=)
                          2: Adqf-0ME2YqN8H_6B4asgnToAUY.roa (hash: 0SCvbw5p8yy5uNnDdQjN/UMJ84WMVAkKE92NJKO0GTk=)
                          3: I2Umub_SU4NDlntrD-fNKlSfw2A.roa (hash: +WIWYqc1qAYKSxLwYH4qBjDRq+jDT6j8Mg3i7GXbP1w=)
                          4: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: xagd0Fx5zaUC12wxS5T5sKgvPuOqroya5UUqsPvO+5Q=)
                          5: _7dkRJNdgno_GD2ibO_640can6k.roa (hash: HOjekM8lbibDsKXgP8G+mm2S14ox7PoL8Qm4nXTQM8A=)
                          6: f87NuGp7A6DaRUC_zwqT_7O3tS4.roa (hash: c2ACPzTSYNtKwiyoMpx3Rg168yL6C/jP/BnBOYSTTR4=)
                          7: hrbEjs63rlg9CXl4g7G5mgv-RqA.roa (hash: Vn4Q2C74wZsb2HWkUQIo9qyiOlvy2sNf/LHIwsqyFPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:56:a5:4d:a9:a9:74:8a:61:4e:c7:ba:8f:c8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
        Validity
            Not Before: Apr 17 05:01:00 2026 GMT
            Not After : Apr 18 05:01:00 2026 GMT
        Subject: CN=300238e2e931a42101020e70590121c9f78334b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:77:40:6e:09:32:79:da:e6:12:98:4b:d7:8b:
                    36:92:4d:f3:85:ad:a1:c0:ba:6b:75:88:39:0b:c7:
                    25:2a:7b:b5:4b:bf:b9:9a:08:8f:bb:79:02:de:19:
                    56:21:dc:07:7b:9a:84:cf:77:a5:d0:ba:68:6a:7d:
                    8a:3c:55:57:70:32:79:68:4d:c5:64:71:53:09:12:
                    84:b0:58:49:39:09:08:87:6e:30:41:82:d9:d2:55:
                    ef:84:8c:d5:a8:62:89:82:7f:73:32:6e:30:ad:75:
                    ce:78:95:0a:da:32:ad:ed:48:bc:2e:17:60:24:18:
                    d9:e6:6d:70:80:05:09:76:4f:73:f8:49:7c:db:3d:
                    7f:29:f9:77:82:d3:97:40:87:f7:98:95:26:f8:cc:
                    f3:34:b1:fc:19:76:2e:03:ac:f5:e0:30:f6:0b:42:
                    97:be:23:95:7d:97:3c:2d:77:fb:46:a7:6b:67:a1:
                    40:91:b2:3b:f7:db:40:c5:89:40:86:96:36:0d:3c:
                    a5:c5:28:d9:b9:e6:6d:57:90:a6:f2:3e:76:de:7b:
                    45:d4:5b:1a:08:c7:77:a2:0f:51:af:f8:26:1e:5e:
                    61:30:dc:89:c7:8f:df:24:43:7e:c6:99:af:f0:69:
                    04:7f:c8:4d:91:78:a4:45:76:fc:37:65:7e:b0:9f:
                    96:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:02:38:E2:E9:31:A4:21:01:02:0E:70:59:01:21:C9:F7:83:34:B5
            X509v3 Authority Key Identifier:
                keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:af:4d:d3:a5:c7:4d:b3:91:bc:9b:bd:45:04:33:8d:59:5d:
         26:90:cc:64:01:2c:c1:75:0d:90:5b:8e:a7:88:fc:72:c6:a0:
         ea:7d:48:72:20:c7:79:28:d1:ab:cf:74:3c:6a:c9:6a:e1:95:
         20:f2:c5:24:84:fd:3f:e4:21:ae:4c:6d:4e:9b:8b:03:11:e0:
         37:16:1d:98:ed:80:69:56:72:bf:a1:7c:62:fd:a6:de:87:0f:
         07:8b:a1:0c:eb:51:8d:d5:78:07:c5:58:fe:51:65:59:50:a6:
         b4:ec:33:da:67:26:69:2c:67:13:f3:24:46:60:6c:59:bc:51:
         19:32:b4:c6:5a:52:0e:c4:c6:42:48:06:eb:89:e6:81:11:63:
         38:17:9e:03:6c:fb:20:6e:fb:e6:76:fe:e9:17:f4:ca:c1:56:
         01:20:e5:e2:d4:37:37:79:77:cb:b1:22:7b:02:fa:c2:4c:f8:
         52:17:9c:03:b4:34:60:c1:88:83:08:f9:25:17:59:e9:93:a1:
         43:34:97:1c:1f:63:ac:8b:3a:60:30:49:6e:bd:f1:d0:ca:82:
         ec:36:2f:90:c0:08:18:ee:7f:be:2f:bd:3e:f4:9d:07:d5:71:
         7e:cc:ff:50:c4:dc:3f:6d:6f:66:e7:7f:e1:03:9a:95:ff:5e:
         e5:5d:b0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:06:54 2026 by rpki-client