Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
File:                     ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft (raw, json)
Hash identifier:          0IugIB14pnbVb+2HPxdX8gj2qpr8yk88qbgnfnPn4G0=
Subject key identifier:   F1:A2:F1:C7:9E:B8:AD:69:4E:24:12:E9:E3:A8:1C:81:BE:B9:B3:F0
Authority key identifier: 8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
Certificate issuer:       /CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Certificate serial:       019D9C2D4FF90D6A7147C0EF17150F9418CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
Manifest number:          0A07
Signing time:             Fri 17 Apr 2026 16:01:48 +0000
Manifest this update:     Fri 17 Apr 2026 16:01:48 +0000
Manifest next update:     Sat 18 Apr 2026 16:01:48 +0000
Files and hashes:         1: ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl (hash: THEkoUyuezmjIVAdH9oHPnsjz3renLuR53J6xBmi4Es=)
                          2: kMOSZWtiewXuTyw15Rj0qERqvDU.roa (hash: 0sRuOEf/juDtnk/XmtOYHhmqAObydjSuiq84TabvvMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2d:4f:f9:0d:6a:71:47:c0:ef:17:15:0f:94:18:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
        Validity
            Not Before: Apr 17 16:01:48 2026 GMT
            Not After : Apr 18 16:01:48 2026 GMT
        Subject: CN=f1a2f1c79eb8ad694e2412e9e3a81c81beb9b3f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:b1:b6:51:4c:30:db:e9:47:1d:f9:99:22:
                    d1:28:90:2a:da:f1:c6:81:a8:e8:ab:c9:37:f5:65:
                    a4:5a:bf:9b:92:13:01:d4:a9:b7:4b:bd:6f:5b:b3:
                    1b:d7:8c:cd:0e:b6:b6:0c:00:e9:6b:62:9c:c8:8a:
                    e5:d4:5b:e4:56:e4:5d:f8:5a:07:bb:49:df:e8:44:
                    07:ae:79:53:93:b0:f3:52:07:09:67:32:1f:3b:88:
                    c4:46:ec:9a:54:c5:e8:1d:56:32:df:f3:89:e5:aa:
                    e7:14:c2:65:99:4e:13:b8:a3:ad:77:04:a7:85:24:
                    ac:c1:a5:38:5a:a4:c6:59:52:f1:bf:b6:cb:72:a6:
                    39:5c:78:e1:85:3c:cb:5b:dc:96:90:a0:64:09:3b:
                    64:4a:93:e8:1c:89:72:a0:84:29:1d:5b:ef:02:2f:
                    e3:8d:92:d0:f7:0f:ad:d5:93:40:2d:56:aa:5d:ea:
                    3f:6a:c1:63:55:2f:b1:57:06:0d:69:9d:d5:f6:be:
                    7c:ce:e3:8a:d9:9b:f0:7f:f0:63:3f:4f:75:a9:9c:
                    8b:90:58:88:e5:fa:95:4f:9a:e7:82:2a:03:85:89:
                    d7:f2:97:e8:27:a2:ed:24:b9:19:29:59:ec:f3:c1:
                    f9:1c:82:91:7f:e9:56:09:1c:c8:88:ef:28:d5:9e:
                    76:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A2:F1:C7:9E:B8:AD:69:4E:24:12:E9:E3:A8:1C:81:BE:B9:B3:F0
            X509v3 Authority Key Identifier:
                keyid:8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:3e:58:1e:4c:c6:e7:27:e2:9a:7f:2c:fd:a2:f8:3c:15:de:
         d1:0d:4f:0b:1a:2d:d0:4e:5d:98:0a:49:a4:b7:63:74:74:6c:
         2c:68:7e:52:89:c7:9a:59:f8:42:34:82:f9:04:63:70:ec:55:
         48:4a:a5:69:7c:59:ed:f6:22:11:3a:41:77:e9:e7:37:9a:c5:
         e2:27:cc:70:2d:f4:0a:82:bf:68:6a:71:33:23:b6:54:83:75:
         2b:b8:7f:f0:b0:41:7a:42:b5:63:51:ee:2a:ba:2c:a1:f1:8a:
         1d:11:de:1b:db:50:da:82:19:52:de:04:36:b8:6f:70:5d:19:
         65:a3:5c:2b:bd:bb:62:89:31:7f:fa:fd:a2:1e:fc:8d:df:dc:
         b9:f2:78:80:c8:bc:4f:54:74:63:56:ae:d6:96:43:42:d5:83:
         2e:ca:56:f0:f8:01:8a:1a:f6:7a:da:7f:b7:55:cf:0c:4e:25:
         8f:f8:ec:95:3c:ef:e7:68:3b:2c:0d:c0:ee:be:92:79:b6:8c:
         df:81:6a:5a:bb:79:48:7e:ad:41:25:9b:23:77:4b:5c:f2:09:
         f6:a9:48:0d:a1:0d:65:d8:a5:1a:29:12:a0:5d:56:52:8d:5e:
         1e:fd:1c:28:16:cf:8f:67:40:73:00:7c:9c:ad:d8:88:3a:33:
         c4:d4:e2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:14:31 2026 by rpki-client