Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
File:                     4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json)
Hash identifier:          yn4RakR/rSYVrxHFUnVlap5BeaDJlb9yTMHgwe2Duyk=
Subject key identifier:   C2:FA:2A:55:D7:48:23:3A:E0:51:60:B8:62:78:F0:99:E8:DC:C3:F4
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Certificate issuer:       /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial:       019D9A0774BB9934808A781BAB9C7706CDAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
Manifest number:          192A
Signing time:             Fri 17 Apr 2026 06:01:12 +0000
Manifest this update:     Fri 17 Apr 2026 06:01:12 +0000
Manifest next update:     Sat 18 Apr 2026 06:01:12 +0000
Files and hashes:         1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: HmFqwKupAeT+zpu4OgqDw8Aem+fWIyQrOmgLHevXhWE=)
                          2: 6GUIWwZxGI0_11LUAF2nyD6ApTM.asa (hash: o9hRLFlhcdetNherJ5nziP+ejI2p5Hk/AOSB3fzCgR8=)
                          3: H1UZSacEO7d9gjFi2CGHiwhdpgU.roa (hash: GQXyeX/p8cD4+ifor6lONtOvB+jbAzlVuGNIHuP4FZs=)
                          4: JMUe3al0pklathcu47XaPUqkjyY.roa (hash: WrIFwPH2vXkQmPfNJ4EO/lLH8xEpJfsA80i818mNAGc=)
                          5: MtgYxwbBOtLba6Wx-C4vNDgRBQ8.roa (hash: 0p22EPcUlrbZ/XQd/L2Yz+06mVzq0rpNkXwnhd7vOv8=)
                          6: QPupw3rP2f5Jivi4SxaBbGE6eqM.roa (hash: KP++DGfsZGB7GL9ySK3Y6Xgm2FRgB01XieKkXEEpykk=)
                          7: lIx0KubEd0NAwKbnWvfavDgfMLw.roa (hash: Z1acY8ho4rEFuqnBBBvS7eEzd1qsRchpuvE7DncwSZE=)
                          8: ql3vqr1zYIaiPZLR54AHsL7ukAE.roa (hash: NYzCia9uixmAZoiKyWTL4nuIIf69H+HSXVKOLeUMj5c=)
                          9: yIoTvJJYIR2DNvrmk-NbH6cPask.roa (hash: oUH0ut41s6oEH273QOq+dzXsq0k279TftL1vgV4Jygw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:74:bb:99:34:80:8a:78:1b:ab:9c:77:06:cd:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
        Validity
            Not Before: Apr 17 06:01:12 2026 GMT
            Not After : Apr 18 06:01:12 2026 GMT
        Subject: CN=c2fa2a55d748233ae05160b86278f099e8dcc3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e4:97:6f:9e:ba:5d:66:1d:0c:22:d7:9f:1c:
                    9c:da:cb:11:e8:99:60:81:ee:1c:7a:b4:8f:61:71:
                    5a:b4:7d:81:4f:74:03:b3:f4:8f:26:b7:ec:fe:b3:
                    d0:f4:f6:7a:f9:5c:29:b1:84:15:3e:55:5c:af:c2:
                    5c:05:54:e3:83:01:d4:d5:e4:71:1b:73:1b:ed:7f:
                    db:1c:12:33:aa:da:aa:90:c8:77:5c:f3:03:a3:e9:
                    87:57:85:7f:52:89:15:38:fa:1b:1b:b6:47:84:08:
                    55:6a:41:ca:41:7d:5f:21:e6:e9:39:4c:c5:eb:15:
                    1b:69:e9:e9:8a:df:fd:a1:4e:90:5f:94:82:f6:3f:
                    21:20:f9:3c:99:eb:e0:95:18:30:ac:d3:5c:74:41:
                    27:19:23:01:19:50:59:0a:c7:f1:9b:4d:5a:27:19:
                    24:56:a9:8a:ed:1d:de:e9:26:9b:8d:51:f4:7d:c2:
                    3f:bf:01:b4:f2:3e:45:bc:bb:ac:8f:78:cc:c8:5f:
                    4b:5b:6c:c1:73:61:c0:52:90:4e:6b:f6:91:e5:2e:
                    99:44:50:a7:fb:b4:6f:4a:ed:c7:9d:fb:80:58:88:
                    a2:14:47:19:a6:e5:79:29:88:6c:c6:30:6e:46:69:
                    10:7c:a1:b4:70:dc:c5:46:47:f8:f1:ec:d3:2e:93:
                    22:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FA:2A:55:D7:48:23:3A:E0:51:60:B8:62:78:F0:99:E8:DC:C3:F4
            X509v3 Authority Key Identifier:
                keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:4d:04:fc:8e:14:d5:7a:36:01:19:eb:a8:de:7a:07:c4:38:
         17:14:e2:b4:1a:f6:ea:1e:7c:73:96:2f:f0:6a:6c:ca:17:42:
         92:79:91:ac:2a:23:01:36:e5:65:27:32:23:86:de:2d:73:fa:
         54:35:dd:7d:bb:83:5b:73:64:8f:e7:0e:5e:43:30:dc:3e:8d:
         7b:04:7e:5e:34:e7:0f:96:0a:39:d0:fd:f1:00:c2:00:c1:ad:
         8a:59:84:3b:00:a7:4c:78:69:55:f5:14:30:a9:72:be:54:e6:
         cf:9f:b7:57:f2:06:b3:1c:90:0d:a3:43:50:81:97:0e:15:4a:
         9f:3f:34:d1:cf:a3:0e:1a:91:0e:b1:2f:16:c6:07:22:23:c2:
         4d:15:34:17:54:ff:1b:a7:81:3b:89:87:ae:99:3c:37:98:8b:
         da:9b:4d:db:64:93:b5:05:e3:16:77:58:f0:1a:0d:61:04:f9:
         33:84:f4:54:b9:e2:26:a2:95:3d:55:25:41:64:8b:08:19:87:
         61:aa:d7:7f:f2:01:1f:a4:57:20:cf:52:24:5e:c6:22:66:28:
         3c:dd:92:3f:dd:db:d2:21:e0:be:b3:d1:bc:9e:ad:9d:62:f7:
         da:84:67:23:d3:4f:bc:e7:73:a1:e5:6a:3c:5b:f6:a4:04:20:
         3f:fe:21:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:00:57 2026 by rpki-client