Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
File:                     _im9i7SagJlrRg9QKO1SqOBXwLE.mft (raw, json)
Hash identifier:          QgzyhNZ++cT5EXKNIwGH77/p790yrFnNakFLBespIa8=
Subject key identifier:   59:36:C0:E1:2C:5A:7C:BB:C7:3E:A0:2F:1E:D6:88:7D:D1:BF:26:83
Authority key identifier: FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
Certificate issuer:       /CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Certificate serial:       019D9962001278CA205521539189E46E0DBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
Manifest number:          1677
Signing time:             Fri 17 Apr 2026 03:00:29 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:29 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:29 +0000
Files and hashes:         1: OBdFDRVC595sAnyB_0VmTmVJFWo.roa (hash: 28ttAFOYw0/3k0gD+y/7PAKtDPtrhHQLrlbHUNtynS0=)
                          2: _im9i7SagJlrRg9QKO1SqOBXwLE.crl (hash: 49yGDCrQd9q8GyMiMesswFeWHx4DX4zZcyp9lM9VcZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:00:12:78:ca:20:55:21:53:91:89:e4:6e:0d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
        Validity
            Not Before: Apr 17 03:00:29 2026 GMT
            Not After : Apr 18 03:00:29 2026 GMT
        Subject: CN=5936c0e12c5a7cbbc73ea02f1ed6887dd1bf2683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9c:1f:55:8a:c0:4e:94:89:74:2c:f5:aa:76:
                    8e:60:42:2a:cd:e3:f4:be:30:b5:d3:cc:77:3d:8d:
                    b6:10:11:dd:f7:33:b9:0a:2e:6e:1f:83:a0:85:2a:
                    cd:75:e7:9b:b1:0b:34:35:5a:e0:77:48:38:41:09:
                    39:e3:1a:3d:89:5a:e1:4e:c0:b1:a4:13:a7:2e:41:
                    4a:88:84:af:f7:32:0b:a3:51:de:27:eb:03:a9:92:
                    e5:49:e4:c6:b9:92:52:6f:66:fc:70:a4:15:53:d4:
                    bd:1b:05:26:4f:1c:8a:3c:4c:b2:d2:84:d0:79:ec:
                    21:ae:44:e9:be:8c:5b:f2:93:cf:82:ef:f7:03:98:
                    22:f6:84:24:61:7c:f1:ff:fd:c8:96:c5:7c:ff:5b:
                    bb:c1:48:0b:20:bf:ef:8a:1a:75:e8:57:e1:cb:4d:
                    d3:5f:0c:67:85:26:82:33:4b:83:9a:3f:25:ac:7a:
                    57:dc:06:50:b9:f2:29:3c:67:d3:4d:64:8d:58:36:
                    ca:70:fb:92:1a:95:2c:92:57:a0:f1:69:dd:9b:25:
                    d0:89:ab:e6:ba:fb:97:71:c3:05:da:bf:9d:42:a8:
                    0d:bc:4b:47:08:7e:ca:a6:a4:56:c4:16:bd:53:06:
                    d6:98:8d:d2:5e:d4:b6:fe:03:3f:de:b1:fd:51:69:
                    09:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:36:C0:E1:2C:5A:7C:BB:C7:3E:A0:2F:1E:D6:88:7D:D1:BF:26:83
            X509v3 Authority Key Identifier:
                keyid:FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:89:a4:78:7a:14:d0:56:01:b4:27:3b:69:c8:34:a3:d1:20:
         18:98:ba:a4:46:61:8e:0b:ba:87:60:1a:36:3f:46:1b:d4:b1:
         bb:93:c6:fa:d0:89:a7:08:c4:a8:8b:26:a6:68:92:c6:8a:64:
         a7:68:9e:ee:51:8f:e1:3b:1b:f7:a6:9d:94:17:56:6e:56:a1:
         76:e7:b5:a6:61:01:1d:d6:ef:3e:f9:42:30:16:c8:a8:2e:d4:
         dd:5c:d2:85:b8:5c:9e:5d:6c:dc:b2:2b:6f:af:e5:43:2b:bf:
         f4:60:46:23:5a:9d:8f:eb:44:7e:2b:47:6d:5a:42:71:db:db:
         0f:8f:d5:b9:01:ef:14:d6:a8:92:87:40:51:2e:2e:1a:e2:d0:
         28:82:48:03:9b:11:1b:43:4c:53:db:88:99:11:d4:09:39:5b:
         83:ea:a2:aa:da:2c:74:a3:5d:e8:86:b0:d9:9f:7b:7c:a8:aa:
         8a:30:b4:36:1d:de:7f:4a:d6:2c:4e:0d:2c:3f:d1:39:24:c3:
         ae:38:c3:99:e3:83:b3:38:09:6a:e7:5c:13:62:47:8f:4b:a9:
         a8:31:70:fc:92:b8:43:98:dd:cd:31:94:0e:70:96:2a:f0:1d:
         ba:e4:8e:a3:81:88:40:f0:f5:5b:65:a1:c8:85:61:59:b9:24:
         ac:b8:9b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:17 2026 by rpki-client