Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
File:                     V1j80i-3oR3qizfkw_YiqnpHue4.mft (raw, json)
Hash identifier:          8Cth0Vky41Vs0k1mM2iWVFwxhF9hxNUKF1h2UZn8jzU=
Subject key identifier:   29:58:E8:58:EC:43:E5:D9:2C:5C:DB:9B:C6:7E:60:BD:36:8F:C0:D4
Authority key identifier: 57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE
Certificate issuer:       /CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee
Certificate serial:       019D99D0570A90714D135704E355D470A2E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
Manifest number:          15D0
Signing time:             Fri 17 Apr 2026 05:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:00 +0000
Files and hashes:         1: V1j80i-3oR3qizfkw_YiqnpHue4.crl (hash: /2/Pq7MyPokiyQucHQqTEippuwPPLIR1ntHaliS7xdg=)
                          2: ksTitpak2u-_MSffFj8d3gLieoc.roa (hash: Akc+ifGn4Wu7e6ztv1Jh+lSvFvn72wjh27ACIaDBeLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:57:0a:90:71:4d:13:57:04:e3:55:d4:70:a2:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee
        Validity
            Not Before: Apr 17 05:01:00 2026 GMT
            Not After : Apr 18 05:01:00 2026 GMT
        Subject: CN=2958e858ec43e5d92c5cdb9bc67e60bd368fc0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c6:09:b6:f7:0f:33:51:75:59:f4:18:27:7d:
                    9e:42:53:62:17:b9:b5:6e:18:8b:08:7d:76:d1:c8:
                    d1:7e:bd:bb:d9:a3:bb:36:00:b5:c5:e3:f4:4c:f6:
                    40:19:54:19:86:f5:3f:07:55:11:63:f2:a3:ec:f3:
                    42:25:0c:dd:bc:7c:f3:ce:65:0d:13:8c:46:13:cb:
                    75:40:89:66:c1:73:a2:64:b3:71:5a:48:6a:86:88:
                    67:f1:54:b4:67:96:f4:5f:04:56:9b:2f:b1:c4:86:
                    2a:cc:db:c9:60:2c:ad:90:cb:81:b3:9e:48:e9:0e:
                    c9:c8:3c:30:83:7f:08:72:e5:3e:77:25:2e:43:4b:
                    89:d7:0e:1b:f8:42:cb:dc:1c:30:80:db:33:6b:b0:
                    60:d5:d7:f7:cc:91:0c:08:07:9f:e2:92:c1:13:be:
                    f9:e7:6d:b2:50:ea:aa:7b:13:1e:c6:92:5c:5c:71:
                    bb:61:e7:a4:6d:d1:6c:8d:05:6b:b9:e8:6a:fe:62:
                    ab:9a:cf:b5:5d:56:28:1d:54:fe:ba:c4:28:2c:bc:
                    5b:a6:fc:2f:11:f6:be:65:15:7d:c1:88:f0:12:86:
                    4a:82:02:29:84:d3:9c:2d:e5:2c:41:7d:37:e8:3c:
                    84:2a:86:42:13:0a:73:47:30:0f:66:58:10:ad:86:
                    7c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:58:E8:58:EC:43:E5:D9:2C:5C:DB:9B:C6:7E:60:BD:36:8F:C0:D4
            X509v3 Authority Key Identifier:
                keyid:57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:d6:2d:4c:c8:43:2f:3f:e0:f0:39:64:3b:01:fc:e3:0e:ee:
         61:88:eb:ba:20:8a:a6:f5:03:88:ba:98:72:be:26:5a:e0:b6:
         0a:ab:fa:d3:7b:7f:67:7d:93:37:19:58:aa:f4:f6:0b:12:11:
         b7:ce:c9:79:ad:e5:bf:e9:86:20:f9:55:88:03:03:b7:ab:10:
         d9:4e:4f:bf:8d:7f:b4:5d:78:a9:76:1f:f3:0a:6b:1b:17:81:
         db:be:49:e6:a1:fd:60:4f:1d:71:fb:82:dc:03:46:e7:00:0e:
         26:3f:3a:ea:7b:b9:0e:c6:ef:6f:9f:a2:6e:01:33:70:c7:ed:
         54:5f:1e:f2:89:38:4b:f0:0f:88:6a:64:fb:c0:1c:8b:38:07:
         e1:47:fe:95:d2:72:b0:0e:7c:55:df:fa:9d:1a:ed:d2:a5:c6:
         56:63:0c:06:5e:e1:4a:c9:96:a1:92:6c:a5:74:3c:02:f3:40:
         fb:60:3a:68:ef:e5:eb:a2:f4:1b:0c:0b:ee:23:53:6c:e7:71:
         3d:89:55:e6:f3:c1:70:ab:60:72:26:2b:ae:b5:c4:9e:01:1c:
         9c:70:77:a0:38:bd:9f:d8:8c:53:04:c8:a2:f4:a5:46:22:94:
         3e:ca:d7:ce:c6:f3:c4:38:4f:1a:3a:7d:57:52:8b:fe:61:c4:
         12:01:c4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:31:17 2026 by rpki-client