Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
File:                     xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft (raw, json)
Hash identifier:          N4SnB3hnzSkZO61htH9y7dyDIuhZqVmFJ/F5oX2enBQ=
Subject key identifier:   2D:99:DE:E3:E3:CC:A9:0B:28:BB:E0:7E:67:A3:23:20:FD:0A:2B:53
Authority key identifier: C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27
Certificate issuer:       /CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
Certificate serial:       019D992BACF737A227B8A5FEAFA009AC61E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
Manifest number:          082D
Signing time:             Fri 17 Apr 2026 02:01:09 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:09 +0000
Manifest next update:     Sat 18 Apr 2026 02:01:09 +0000
Files and hashes:         1: mI2eJ7owlng-a2RTBGJSB2dC0xc.roa (hash: Mtyhcf44MGwkMCoMpod+PD8wPTtDOMEI8pvJgEO7E5k=)
                          2: xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl (hash: 3xHj6f0w2ooiGS/5eQi6hMEqjVcZqUJpMlLKuUZfGoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:ac:f7:37:a2:27:b8:a5:fe:af:a0:09:ac:61:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
        Validity
            Not Before: Apr 17 02:01:09 2026 GMT
            Not After : Apr 18 02:01:09 2026 GMT
        Subject: CN=2d99dee3e3cca90b28bbe07e67a32320fd0a2b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d6:d4:79:ae:be:fe:cb:d7:e8:83:1c:41:bb:
                    e2:97:05:5d:68:9c:99:3e:64:47:60:bf:f6:68:51:
                    bd:a8:18:aa:38:96:1f:b2:ec:2a:a4:a1:3e:d2:30:
                    12:c6:de:a3:7d:8b:8e:e4:12:0f:58:a2:17:2d:ae:
                    41:80:87:48:29:ad:d2:f3:7e:8a:2f:ac:68:d0:22:
                    df:54:c4:1b:35:d9:a9:4a:5c:c7:75:ac:17:1c:7b:
                    ca:08:8d:04:ff:06:82:e6:c8:8e:e2:e3:7a:a4:63:
                    fb:eb:56:3e:e4:9e:97:92:b1:75:59:23:3a:2b:c7:
                    f0:ab:92:42:36:16:7a:8e:f8:bf:b4:e7:f4:8e:80:
                    85:98:ca:dc:24:74:51:3f:fb:f8:4f:e8:fe:ed:1f:
                    a8:28:3f:5e:28:88:db:d0:ce:ff:87:e0:fb:b7:ea:
                    cf:c9:60:d4:01:1a:81:87:23:a7:2d:a1:5e:0b:af:
                    a7:a0:54:91:e3:4a:1f:60:d4:e3:f3:29:0a:1e:87:
                    5d:b3:bc:b0:4c:13:ed:f0:58:75:d1:c8:47:6f:da:
                    a5:4a:90:a6:b5:c8:34:84:70:5d:78:43:54:f4:7e:
                    24:7b:8a:af:32:fb:b2:2e:ed:63:92:76:5f:6e:07:
                    c1:39:39:6d:2c:29:0c:b2:78:dd:3d:97:66:ed:74:
                    3a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:99:DE:E3:E3:CC:A9:0B:28:BB:E0:7E:67:A3:23:20:FD:0A:2B:53
            X509v3 Authority Key Identifier:
                keyid:C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:33:c8:74:43:47:c1:ee:0c:61:4e:d3:dd:9e:4c:93:0b:f8:
         17:8c:ed:82:84:ce:e5:84:ce:2d:5a:75:e0:a4:da:cf:03:2c:
         20:15:4c:0f:41:0d:bd:5b:db:9b:b0:bb:dc:c2:c5:e2:2b:07:
         b5:de:dc:32:78:1d:fc:0c:7a:29:a1:4b:39:8e:9d:32:40:85:
         b5:c3:7d:78:22:a6:d2:89:34:e8:73:44:9c:2c:40:dc:11:ce:
         f0:72:74:62:89:c1:60:70:7c:fb:17:24:a7:4e:97:ea:54:5a:
         5d:2a:13:2e:9b:49:85:a9:ce:b6:46:f1:36:08:bf:6e:23:c0:
         42:83:40:f0:78:1b:df:40:ed:5f:43:26:92:7d:a4:98:c3:1d:
         06:c9:45:0c:4f:f5:d7:cb:ed:3b:62:aa:43:9f:99:26:6f:e2:
         9d:bb:de:87:28:d4:e1:e7:5c:26:e7:38:22:6e:6e:df:b2:f5:
         73:e7:ff:53:c4:2e:e1:4b:f7:e2:d3:44:db:d8:fe:66:e1:06:
         82:54:15:21:bb:99:59:f4:7d:36:7f:d2:50:63:92:8b:99:c6:
         81:05:ac:21:95:de:89:fc:c4:1d:c9:64:fe:8c:36:a5:dc:ef:
         53:b8:49:63:1a:54:d4:b6:5d:8f:94:9a:9a:bf:84:7f:65:6d:
         d5:14:0d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:04:43 2026 by rpki-client