Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
File:                     9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft (raw, json)
Hash identifier:          BLV+TudyKYq/mLiHqoXFlUglwD36Yc4jKb7k0jIgztw=
Subject key identifier:   50:26:84:11:78:DF:E3:13:2F:A0:60:B4:43:3A:7F:32:D1:30:CC:89
Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
Certificate issuer:       /CN=f68e231d5551876e15afc6637eab7fca80088391
Certificate serial:       019D99D0CC9FD6B6A2616FB0F6EA1A42C691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
Manifest number:          1738
Signing time:             Fri 17 Apr 2026 05:01:31 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:31 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:31 +0000
Files and hashes:         1: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl (hash: i5H+TWKSxrXcKygc+jIEVnAed0gfDc31qkNWBgcl9CA=)
                          2: BrhtiCQ6piwiqQ1pBvv28oLuyG8.roa (hash: ryijqGxwQHpnmrcmVfe+7BnWPcERkXO0XSnxMSNhaks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:cc:9f:d6:b6:a2:61:6f:b0:f6:ea:1a:42:c6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391
        Validity
            Not Before: Apr 17 05:01:31 2026 GMT
            Not After : Apr 18 05:01:31 2026 GMT
        Subject: CN=5026841178dfe3132fa060b4433a7f32d130cc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:af:3a:a3:1c:5f:63:11:5b:2a:f8:da:9e:dc:
                    a2:01:f5:5e:1c:c8:ae:f8:54:5d:98:a7:a9:29:a6:
                    68:65:b8:03:b4:89:e5:c5:02:7b:6c:60:75:e6:e2:
                    b5:f3:1e:4f:a3:be:85:ad:fe:b2:2e:98:1b:3b:06:
                    58:cc:25:bc:da:5b:12:14:6b:85:40:4b:7c:98:78:
                    63:68:9d:60:18:8b:45:f3:b2:69:34:d1:a3:d2:14:
                    6f:70:ed:4a:3f:c1:92:54:a4:67:97:60:b3:24:78:
                    75:5e:32:87:d3:77:e2:c3:96:fe:20:9b:f0:e3:8b:
                    8c:5a:c2:cc:74:be:54:ad:65:50:19:5f:1f:a5:3f:
                    c9:67:bf:96:d6:3b:99:1d:7b:18:a9:c9:ba:b8:81:
                    d7:fa:d6:e3:e2:8d:a9:b1:ef:82:cf:77:5d:da:06:
                    ac:b6:ad:a5:e7:91:cf:a5:f7:82:07:65:83:7b:e9:
                    03:49:55:17:27:04:30:61:08:dd:6a:52:09:36:45:
                    a1:48:24:c7:1f:cb:19:d4:a8:64:7d:fd:8f:b2:5e:
                    e8:e6:8e:e1:df:ba:4c:c2:1a:75:ea:b3:1a:dd:f4:
                    e1:fb:34:1b:68:bd:56:93:a3:4b:85:25:a0:80:ad:
                    a3:18:b1:70:97:04:7e:98:ec:fc:10:42:4e:41:74:
                    bb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:26:84:11:78:DF:E3:13:2F:A0:60:B4:43:3A:7F:32:D1:30:CC:89
            X509v3 Authority Key Identifier:
                keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:8d:70:36:28:44:66:5c:3d:d3:8e:be:ea:3e:45:b2:91:5a:
         be:31:6e:09:96:d9:eb:a8:65:1c:61:d6:3a:14:6b:8d:a2:2a:
         0c:5e:67:20:77:98:61:a9:e2:d1:4c:87:e7:46:b3:db:2e:a9:
         48:22:9b:29:c5:5f:1d:20:fa:c1:83:23:d5:ed:67:fe:e8:06:
         65:53:15:b1:86:c6:03:d4:22:26:64:11:15:93:fb:d5:03:2d:
         80:aa:c0:f0:1f:14:e8:8e:c3:81:50:c0:53:32:27:21:48:ae:
         4b:17:60:c1:02:95:5e:54:58:af:0c:dc:2e:dc:b8:e9:f5:10:
         a8:76:48:fd:58:d6:e4:91:c4:9c:ce:4c:a7:63:ce:5b:b1:d9:
         41:98:cc:73:62:de:4f:cf:ea:ba:38:24:01:17:6b:d7:28:80:
         48:da:cb:20:49:76:9e:a7:6e:e2:ea:fe:29:55:7f:fc:80:e4:
         37:f9:ee:7a:93:91:4c:7e:27:00:c5:d7:c2:8f:28:ca:b5:1a:
         95:f0:43:31:80:dc:8b:7b:ed:d9:69:cb:62:5b:48:5c:89:38:
         5f:52:78:74:a1:5e:a9:48:30:2a:c2:8e:95:91:3f:b2:a8:17:
         eb:b5:8c:0b:cb:b7:ee:94:eb:06:b8:d7:cd:c5:d4:dc:db:93:
         98:4b:56:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:24 2026 by rpki-client