Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
File:                     a4us2V8fS9Z1Un0ybSmZVoYsMho.mft (raw, json)
Hash identifier:          TEUt8KDSv0ZgDi4ZXtwZBYsp47OQoQC2G0dBGlJpSoE=
Subject key identifier:   6E:81:6A:47:4E:47:48:EB:D0:32:57:12:64:BE:B0:C2:45:D3:C6:11
Authority key identifier: 6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A
Certificate issuer:       /CN=6b8bacd95f1f4bd675527d326d299956862c321a
Certificate serial:       019DA48B07F55753C764F402FCFB7641393A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
Manifest number:          1368
Signing time:             Sun 19 Apr 2026 07:01:08 +0000
Manifest this update:     Sun 19 Apr 2026 07:01:08 +0000
Manifest next update:     Mon 20 Apr 2026 07:01:08 +0000
Files and hashes:         1: a4us2V8fS9Z1Un0ybSmZVoYsMho.crl (hash: 7rlPdqy9Jpj61YHVWP8wn72vpsRLMbh2m47g3jmFMQc=)
                          2: kP2KSuj-FkQKmwr3mlICYjWYuAk.roa (hash: mJFVgN/gg79ER/d0W7J+rux4VqVkbxiEL9s7hNeViGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8b:07:f5:57:53:c7:64:f4:02:fc:fb:76:41:39:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b8bacd95f1f4bd675527d326d299956862c321a
        Validity
            Not Before: Apr 19 07:01:08 2026 GMT
            Not After : Apr 20 07:01:08 2026 GMT
        Subject: CN=6e816a474e4748ebd032571264beb0c245d3c611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:69:c9:2e:e9:b7:02:0d:2a:cb:35:c3:e3:c5:
                    0d:05:41:ac:21:48:ae:22:10:39:d8:ef:89:a0:7e:
                    8c:ba:b4:94:05:74:45:7b:a2:90:5a:86:01:fe:ab:
                    14:8a:4a:e2:45:6c:9e:7e:35:c4:2d:64:92:57:52:
                    31:fb:fb:d4:b6:d7:97:15:3c:8b:c9:33:01:0a:bc:
                    05:6d:43:8d:99:32:e3:17:4d:64:0e:54:36:c4:1d:
                    cf:f9:0f:02:3a:02:73:15:ce:c3:34:54:0b:07:18:
                    2c:c8:bc:c0:ba:99:65:20:ee:ed:74:6a:fe:ba:2c:
                    1d:1d:99:09:89:d3:d6:f2:0f:45:56:58:da:46:a6:
                    79:a2:13:6c:db:ba:b9:1b:b9:2e:55:03:de:a9:ec:
                    c4:40:92:d9:dd:0d:f4:9d:52:29:3a:ed:d2:53:4b:
                    28:61:92:f9:38:4f:b5:25:7a:ab:a2:72:4e:91:dd:
                    6b:11:b5:a4:29:d4:2e:33:01:09:30:71:4c:71:4e:
                    90:96:cd:c6:38:4d:84:19:5a:9c:3e:ab:38:e9:ce:
                    d7:b2:75:69:df:ed:67:7b:d5:b4:b1:a9:07:a6:22:
                    3f:17:d2:31:08:f5:24:d2:4f:69:e1:fc:3e:ad:ee:
                    72:80:60:3a:f0:8c:83:89:e0:98:3b:d2:3c:35:18:
                    78:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:81:6A:47:4E:47:48:EB:D0:32:57:12:64:BE:B0:C2:45:D3:C6:11
            X509v3 Authority Key Identifier:
                keyid:6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:36:1a:aa:56:6b:39:d5:76:f4:08:03:4c:3a:80:cd:10:e1:
         0f:66:f7:7a:89:84:ec:3b:f1:41:f1:9e:e4:7a:67:86:4e:be:
         fb:f6:dc:0f:59:41:23:49:03:d7:01:9e:c7:69:26:ad:7e:4f:
         3e:47:58:d3:91:80:44:44:50:86:1e:57:ce:f0:f9:b3:a3:7e:
         47:5a:e5:b7:d5:75:88:67:78:dd:61:09:23:92:f4:4a:32:77:
         60:22:22:34:79:70:00:d5:38:ca:cd:2b:a9:a7:63:be:11:83:
         d3:94:19:78:65:a4:e0:de:c9:52:6c:f7:44:eb:bb:b5:31:fd:
         a9:57:90:ad:4d:0d:cc:54:69:cd:aa:83:e9:47:08:34:d7:62:
         c9:7b:96:5e:77:7c:1b:37:56:ae:c4:a6:b4:0e:6b:77:6c:54:
         56:13:44:e2:20:31:98:e2:31:26:b7:c5:b8:e4:ef:f0:45:3e:
         29:9c:27:78:53:03:c2:ad:a2:75:1d:8d:53:55:ec:e5:b8:30:
         60:35:0c:35:27:30:2f:21:27:fc:83:0b:0c:73:c3:b7:e1:02:
         b8:86:7c:70:d3:e9:80:bb:e4:40:de:98:45:99:05:06:ff:18:
         10:0e:7b:0b:ad:cc:43:60:8f:9c:81:a2:f5:45:25:0f:9c:2b:
         b7:c1:fa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:30:02 2026 by rpki-client