Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
File:                     1-FVaeIP5K5-bpCKpa045e_X7j8c.mft (raw, json)
Hash identifier:          L1VTRCF5s128DVTs5wcXhFNnJkymeQEwCmsmM/Tkk/k=
Subject key identifier:   47:86:D9:1F:57:32:9D:1F:90:92:DE:E5:1B:16:4C:75:34:E1:89:66
Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
Certificate issuer:       /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Certificate serial:       019D9818E9A5464FC4C31A8F889715993C44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
Manifest number:          11D5
Signing time:             Thu 16 Apr 2026 21:01:02 +0000
Manifest this update:     Thu 16 Apr 2026 21:01:02 +0000
Manifest next update:     Fri 17 Apr 2026 21:01:02 +0000
Files and hashes:         1: 1-FVaeIP5K5-bpCKpa045e_X7j8c.crl (hash: 4JZ8D0H8e1HtZOt41U7Yjr1WcLEIc+2juD1vMCrWvE4=)
                          2: KO-QbiA4B8Fqmh4PoUG1b2CWqyo.roa (hash: AQjqAS5i/LVUFXeGIyKdhva6id7Kjy8HsHgnyuWVcqc=)
                          3: LBp-f2wTeEG__GeuFL9S2VPjFS4.roa (hash: jbigl4wtO4I3oLlMsdwWFhj1QBqpQaBQsh/wEl6VUQo=)
                          4: T7-uQqlLNMsiccxdjsoaTK4wseo.roa (hash: +BKfpUhxoHfLf7cPj1R21xoP1tto5+gxC04QZRCZI6c=)
                          5: ap691plquRdyX3vt85LxuWpbm1c.roa (hash: khufkxMKrWAd/D05QdS5OQV/ljvmohRpPsDkx0sZzKs=)
                          6: eWAGfLfEp43y_iN-RtSZfG1D49U.roa (hash: POgI5hw92swzuRADnz2nsMp43qgG4i2QfhiIQqJZJqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:e9:a5:46:4f:c4:c3:1a:8f:88:97:15:99:3c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
        Validity
            Not Before: Apr 16 21:01:02 2026 GMT
            Not After : Apr 17 21:01:02 2026 GMT
        Subject: CN=4786d91f57329d1f9092dee51b164c7534e18966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:12:dd:9e:75:5f:1d:6c:35:30:ef:62:f9:25:
                    03:c6:3d:73:68:f9:b7:7c:20:17:e4:60:3b:23:64:
                    d3:80:40:4f:0f:f3:e2:0b:99:39:63:ac:d6:1a:bb:
                    ac:8b:54:ce:eb:15:e7:9c:e7:04:b6:59:a5:ab:13:
                    50:8a:ed:16:0c:24:0a:22:21:a7:22:89:05:60:52:
                    1c:cb:dd:ed:af:10:d2:ed:5c:03:19:7f:39:6d:28:
                    1d:8c:7d:6f:c5:95:87:cd:fc:a5:64:61:f0:41:8e:
                    7b:6c:c7:c6:1e:64:72:b7:2b:00:9a:49:9b:0e:ae:
                    9b:0e:d6:04:1b:c5:6e:18:d4:ec:b9:29:a4:0e:62:
                    b3:57:d0:93:bb:c7:32:0f:ba:63:ef:6e:d5:82:0f:
                    1e:b6:10:f1:43:41:68:3a:72:1a:4b:fb:37:a7:fe:
                    02:15:a5:0c:c5:99:f9:fd:fe:21:a3:2c:35:53:b1:
                    bd:f5:a0:7a:0f:f2:6f:33:14:82:b6:c9:c8:93:50:
                    20:10:d4:0f:84:00:08:36:94:22:78:98:3b:2a:38:
                    9c:40:18:f0:09:4b:51:3f:6f:17:1d:fc:b2:7b:f6:
                    7b:79:55:a7:d0:5d:2d:98:92:6a:ae:f0:85:5a:64:
                    7b:c0:f8:20:8c:f4:03:e2:b6:9c:87:15:b7:db:f1:
                    8d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:86:D9:1F:57:32:9D:1F:90:92:DE:E5:1B:16:4C:75:34:E1:89:66
            X509v3 Authority Key Identifier:
                keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a4:63:4e:ef:59:e6:ba:22:ab:5e:2d:dc:d9:8c:40:9c:20:
         58:03:6d:60:18:88:5e:06:ef:f0:ef:61:3d:6e:d9:4f:98:65:
         8c:0b:1a:94:f1:80:e3:b6:3b:3a:a9:a4:b4:b7:eb:b2:fa:89:
         27:66:c3:43:f7:8f:3e:f3:e6:31:5a:f8:1d:63:47:85:de:93:
         20:66:bf:93:33:4a:9e:9f:b7:7f:c3:de:9d:9b:7e:2a:14:dd:
         c4:c6:c9:cb:60:6b:c5:04:17:c7:55:26:1f:49:47:61:7b:20:
         6a:ff:2b:47:f9:6b:7e:36:ce:c4:6e:cf:9d:d4:54:ee:2e:8a:
         a2:56:17:b4:92:4c:00:c2:b4:c9:e3:45:36:b2:57:8c:99:cf:
         7d:6d:fe:78:40:61:8e:d5:32:66:dd:8c:d7:10:c5:6a:0d:57:
         4a:2a:59:0c:b9:a2:c5:f6:e6:cf:e8:6d:6f:4b:94:ff:58:b9:
         d1:e2:fd:22:e4:c1:fb:53:ec:7e:2c:7a:65:ef:02:fb:43:b6:
         f8:0f:5a:46:0b:72:90:88:c8:db:b0:a9:4a:a0:6f:21:db:d1:
         19:59:d6:f5:db:cf:9f:98:bf:ce:b2:ef:32:69:fc:d2:fe:67:
         df:e0:b3:70:11:83:62:94:b5:eb:72:8a:17:2c:05:58:f1:25:
         42:ea:80:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:51:13 2026 by rpki-client