Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
File:                     0deIJuFxfsmT62TdEYeHawZej1g.mft (raw, json)
Hash identifier:          Q/FfBn6z/+h4Kxx2EM3zS3TkAinfGSuwzGGoRw19Rr4=
Subject key identifier:   8D:72:C8:F0:82:F1:E2:9B:6C:79:62:2B:29:A5:4C:DE:0B:F9:F8:97
Authority key identifier: D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
Certificate issuer:       /CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Certificate serial:       019D98184AEB0460136555FD84BF098D3D3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
Manifest number:          1085
Signing time:             Thu 16 Apr 2026 21:00:21 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:21 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:21 +0000
Files and hashes:         1: 0deIJuFxfsmT62TdEYeHawZej1g.crl (hash: 9QFMJRhYYS5DfaagZlJ248muR7TTC+tUR1HnRybQ79c=)
                          2: 8zWkLs5MayVp3_SzYbBPRAvFDTs.roa (hash: UellUSwtPKZmjJ1D+Fmg+BloHauGtQEDG+FE5/v9Mm8=)
                          3: OaKg-lG-pzNmRpP7SDCitTlZaNo.roa (hash: 5+9V4WRdjlkj5ldl1qKFN9pvoMnzM+PUFUtZ5jME0PE=)
                          4: wA-hfRcLQDeGt5CtIuqae7_R8vk.roa (hash: /Y6WA6ClXm7DeMMUhB/vYFyvxO+T8Bk+qE5LtkXuWg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:4a:eb:04:60:13:65:55:fd:84:bf:09:8d:3d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1d78826e1717ec993eb64dd1187876b065e8f58
        Validity
            Not Before: Apr 16 21:00:21 2026 GMT
            Not After : Apr 17 21:00:21 2026 GMT
        Subject: CN=8d72c8f082f1e29b6c79622b29a54cde0bf9f897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6a:d8:0b:c1:f7:f1:02:e0:01:c5:80:b3:5a:
                    bf:f0:e2:59:2a:3c:7e:0a:b9:1c:d8:64:8f:24:b9:
                    a6:30:08:d7:27:ba:a1:9d:97:92:af:2e:f4:4e:c6:
                    08:2e:31:f5:3d:48:e2:5a:33:7a:5f:7e:17:fa:ff:
                    db:cc:a4:92:99:40:c1:b6:f1:68:ae:44:aa:1e:8c:
                    73:b2:f4:4e:02:41:c2:c3:22:21:d3:ae:ff:1d:3d:
                    fb:c4:36:46:ac:a5:32:a1:ed:6a:c7:15:2c:a6:be:
                    7a:f5:54:b7:c8:27:ea:09:05:e2:7c:c3:52:84:08:
                    77:37:6e:bf:fa:d8:e2:49:8a:9f:f0:e4:4d:12:a8:
                    1c:7e:03:14:41:55:6a:05:1e:f8:c8:3b:b3:06:20:
                    ac:43:08:ba:67:8e:cb:1a:f2:80:fe:f3:a1:b7:4f:
                    6e:54:ee:c5:cf:8d:c6:c1:e0:92:ca:08:2f:ee:91:
                    6d:01:a8:0a:f6:66:4a:5f:4a:35:4c:33:9b:b0:95:
                    8a:b6:0b:58:3d:f9:10:5e:f8:99:ef:12:37:a8:f6:
                    02:6a:6d:0f:5c:fb:31:3c:46:e4:01:2c:a0:34:01:
                    8d:9d:ae:cc:50:11:01:45:18:6e:b7:96:e7:53:cd:
                    99:98:01:f3:e7:e1:0b:1b:20:04:58:e5:22:fa:63:
                    51:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:72:C8:F0:82:F1:E2:9B:6C:79:62:2B:29:A5:4C:DE:0B:F9:F8:97
            X509v3 Authority Key Identifier:
                keyid:D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:db:4b:49:6b:f9:d6:d6:fc:c9:47:99:0b:e9:b8:13:ff:20:
         94:35:29:6a:f8:59:79:0c:66:7f:c7:f7:34:b6:53:9c:f8:8a:
         24:a7:09:44:86:50:7f:9b:e8:72:26:25:07:26:7a:94:35:51:
         8d:03:24:10:45:91:7f:07:4e:ae:be:bb:07:d7:8a:18:35:02:
         43:86:dc:0d:e6:64:50:8f:5b:55:9a:5c:7c:b4:d9:f8:81:f5:
         9b:07:f4:8f:cf:6c:0d:5f:77:ac:21:73:5a:b7:4d:3a:dd:02:
         5c:d8:7c:3d:18:3c:02:70:b2:90:e8:2e:36:d1:53:f5:b2:ed:
         12:ba:d5:91:d1:79:19:77:c2:d7:30:a7:f2:f8:f5:b8:22:15:
         9b:0a:d8:86:48:75:5c:fd:df:15:77:5b:bf:16:72:7f:8b:17:
         11:33:fb:74:39:4e:6c:31:08:6b:ab:38:62:ed:0c:d3:45:f1:
         38:bb:9a:92:10:d3:7a:5c:3f:a9:87:01:64:4e:da:0c:de:be:
         bc:fa:5e:74:84:03:44:94:6c:24:73:39:a3:ce:20:c9:cc:fc:
         ca:c0:d5:84:f8:34:d8:86:0c:98:da:0d:db:05:dd:47:6f:2c:
         74:99:5c:ff:ab:28:cd:f6:0a:63:4d:e8:ea:a8:85:4c:9e:0b:
         5f:fe:31:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:21:38 2026 by rpki-client