Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
File:                     Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft (raw, json)
Hash identifier:          zxtRLa5ukrGWQLjte8Bgiyn3LK/O131btieOEuG/wP0=
Subject key identifier:   68:F9:22:98:3F:EC:B3:8C:C6:80:04:B8:AA:A4:63:DA:D6:FA:D9:F6
Authority key identifier: 16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
Certificate issuer:       /CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Certificate serial:       019D9A3DF4AC370F0A8399030E5F1DE07582
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
Manifest number:          047E
Signing time:             Fri 17 Apr 2026 07:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 07:00:44 +0000
Files and hashes:         1: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl (hash: O5JIB/CkY5Y6XrBkzBQoRVTK4H6yKm83jWuwfDFerrc=)
                          2: OytMoAZMK8wtoSzZvtAHJ9Md1Mo.roa (hash: H/07CVFn18uiXemUf+RsWUhgJ/GpamvFqfgXdnjOQDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3d:f4:ac:37:0f:0a:83:99:03:0e:5f:1d:e0:75:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
        Validity
            Not Before: Apr 17 07:00:44 2026 GMT
            Not After : Apr 18 07:00:44 2026 GMT
        Subject: CN=68f922983fecb38cc68004b8aaa463dad6fad9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f3:97:1f:bb:87:05:f4:ec:08:22:98:ce:81:
                    2e:af:1e:68:5e:aa:b0:9a:05:aa:7c:16:aa:de:48:
                    ed:25:57:24:92:77:7d:0a:80:b0:93:1f:f7:46:ad:
                    eb:f7:53:09:2b:ab:f1:4c:f3:fc:ff:5e:70:ad:fd:
                    b9:e4:95:2d:11:a5:9b:42:6c:3c:7b:18:dc:a9:7c:
                    3c:1f:20:b2:8a:94:1f:41:78:7c:1b:4e:ae:5c:c7:
                    48:2a:1b:88:4a:3f:34:f8:69:59:91:16:05:e2:2c:
                    15:09:5c:a2:29:45:7e:f4:48:b5:d8:77:ae:74:16:
                    b7:c2:a8:c6:b6:65:90:4c:96:76:f9:51:1f:18:4d:
                    e7:1a:c5:02:e3:f4:b4:d3:78:ea:c9:13:55:de:90:
                    95:03:76:79:50:06:39:f0:0b:67:67:58:9a:26:df:
                    22:ae:4c:8e:bf:76:84:57:03:cd:e6:16:88:a1:b1:
                    5a:7b:88:34:79:1e:f1:b3:e4:1e:f5:4b:ac:31:30:
                    42:56:bd:c9:10:8b:bc:67:cb:fd:71:60:20:cb:1d:
                    c6:0a:a1:0f:61:8e:74:ce:b0:d0:ad:0d:8e:78:92:
                    53:48:7d:ca:49:1a:d8:43:69:1e:c3:28:de:52:57:
                    fb:8d:38:f5:1f:7b:e6:cc:55:81:3e:0a:ef:82:24:
                    7f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F9:22:98:3F:EC:B3:8C:C6:80:04:B8:AA:A4:63:DA:D6:FA:D9:F6
            X509v3 Authority Key Identifier:
                keyid:16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:58:5e:44:e0:23:be:93:55:49:21:1e:ce:03:40:09:2d:38:
         3a:0e:f9:66:6a:2a:89:63:48:87:e7:03:a6:95:75:c5:7c:74:
         5a:e9:9d:ea:2d:5b:f8:73:fd:f5:fb:cc:13:ea:5e:b8:5a:5d:
         97:c7:f9:3f:b0:99:e0:c9:61:9b:b6:e7:07:f6:26:90:24:ea:
         58:2c:ac:e6:40:62:c9:7b:1c:4d:e6:26:b8:0d:f5:dd:a2:4a:
         d2:ff:25:ed:47:0a:fd:5a:b7:48:11:ab:fb:31:91:b8:33:47:
         de:c8:2e:02:5b:80:a3:b2:36:f0:16:78:6c:1d:65:7e:38:b4:
         3e:c8:9a:e1:8f:aa:6e:32:14:82:06:e9:88:ce:de:f8:51:01:
         a1:cf:46:7e:5c:04:e2:6a:7c:d6:27:06:93:58:6d:99:e8:6d:
         c3:33:3f:4b:be:5e:02:1d:ad:5f:5e:f2:5d:23:ce:ba:8c:d6:
         27:cc:67:c2:be:c9:11:ac:81:27:9b:92:04:34:6c:0b:65:ef:
         ef:ea:40:97:6f:5d:81:c2:3a:df:19:03:fe:6f:2c:f4:bf:6c:
         61:93:c1:56:0d:4f:4b:36:e7:ed:4c:a1:d6:14:ee:2f:9c:4c:
         72:80:f8:20:4a:d2:97:20:01:00:09:79:88:a3:f4:1b:56:01:
         05:e9:b7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:13:14 2026 by rpki-client