Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
File:                     0Xrp3J9DomnrCszzSI6GH0_w6J4.mft (raw, json)
Hash identifier:          2jZCvyOEVa/dSTdNsobS8qZs0qParWlov996Oos1Iw4=
Subject key identifier:   F4:A7:B6:B2:78:F5:B7:CF:F2:DB:3A:71:7C:4A:0A:F6:1E:F4:EA:79
Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
Certificate issuer:       /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Certificate serial:       019D98F4431902B3093969A5B0771ECFB07E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
Manifest number:          0846
Signing time:             Fri 17 Apr 2026 01:00:37 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:37 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:37 +0000
Files and hashes:         1: 0Xrp3J9DomnrCszzSI6GH0_w6J4.crl (hash: udL2rZ7q+ZRYcAlKHzcjKHkK4uzI2a1y/9w/2NcndDY=)
                          2: UwYA2ZqOaaqxV-SbROLNU0LYhKs.roa (hash: yo5jrp46t5eed1f0aD/LDv5fDkeM+5705upQY6SakhI=)
                          3: ezZ2s7vM_vTGuAjYXi6un0LAHgM.roa (hash: FqUWKm/wtZJygI56D9CwfC5nsdth685XmNZzJnjwPBQ=)
                          4: zkgdKHScYcfkNf_hh7vlGDs0B88.roa (hash: DtYW3iy119fpBsexhV56/OzVqBZUBd8eZdz8luW6zw4=)
                          5: zz2jRWtl0ZmBUMIyfCqK089JqZE.roa (hash: 6YCEfjH+kikFIKbX6N6L9tIisswKqNgalcvAp8ZWIls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:43:19:02:b3:09:39:69:a5:b0:77:1e:cf:b0:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
        Validity
            Not Before: Apr 17 01:00:37 2026 GMT
            Not After : Apr 18 01:00:37 2026 GMT
        Subject: CN=f4a7b6b278f5b7cff2db3a717c4a0af61ef4ea79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:60:cb:25:4c:a9:ec:c7:71:6f:a8:48:e6:
                    00:3e:88:71:b0:cd:30:f1:99:a1:e7:62:eb:8c:04:
                    2c:61:d0:15:4d:22:3c:a6:19:91:0f:6d:16:b9:98:
                    8b:f4:fe:3a:69:83:02:d7:48:d4:9f:31:54:7f:9b:
                    50:89:ef:62:5d:2d:41:b1:64:1d:01:8e:a5:8d:2a:
                    35:55:ad:ce:13:00:53:3c:44:98:61:0b:a3:1c:4a:
                    0b:24:12:e4:12:91:f5:f6:f6:bf:e6:cd:fb:27:af:
                    6f:a8:a5:2c:e3:9e:a8:96:b8:b4:91:6f:73:ad:2f:
                    bf:58:d8:38:df:ce:51:76:a0:9e:af:24:bf:67:3f:
                    71:41:0e:92:42:7a:bf:45:67:e1:d4:f1:27:e4:8f:
                    c5:81:2f:ac:92:32:73:c9:af:2a:e9:3b:b1:a8:61:
                    5a:76:6a:b2:24:ba:88:52:71:1c:e6:3b:f5:f3:bb:
                    ac:c8:1e:4a:97:f6:a7:6d:bc:25:a4:a9:1d:69:f7:
                    fe:6a:c8:aa:b9:87:d1:a9:af:da:12:f1:ee:1b:ed:
                    e9:fd:00:a0:44:e2:56:23:e1:b5:03:07:ae:f0:ca:
                    9e:d6:6a:9e:10:e5:aa:39:c3:6d:04:b2:5e:2d:b4:
                    91:ec:6a:f2:44:6b:eb:79:b6:82:07:9b:25:1b:ae:
                    55:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A7:B6:B2:78:F5:B7:CF:F2:DB:3A:71:7C:4A:0A:F6:1E:F4:EA:79
            X509v3 Authority Key Identifier:
                keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:c6:59:3b:38:46:27:53:1f:05:52:1a:37:5c:f8:3c:6e:1d:
         57:43:80:f9:fb:1e:d1:b8:57:dc:fe:2c:6b:1c:49:2d:04:86:
         7a:1c:b3:2a:f6:41:ba:c3:a3:53:d0:62:e3:15:d7:8b:02:6d:
         c5:cd:68:74:d8:f0:6d:75:93:b2:7d:64:f5:d2:18:a1:33:d1:
         3c:81:da:ae:fe:96:99:3e:0b:81:c1:c8:e2:67:dc:4d:bc:6d:
         d3:20:40:31:d9:55:e2:b7:13:73:77:b8:cc:3a:69:d6:63:4d:
         23:91:e3:96:83:f3:3c:e5:3c:0c:c0:44:17:54:6d:66:cf:a4:
         4a:b3:08:e7:33:27:bd:e7:07:93:aa:27:b3:2f:44:02:d6:d9:
         3d:56:de:f5:03:7d:47:a6:7d:6d:93:7c:e8:d4:14:fd:51:77:
         88:43:f7:5a:5b:b5:9e:4d:5a:11:ff:0a:be:53:af:5e:f0:e1:
         a7:cf:36:29:bd:1e:76:70:44:bb:d9:52:6a:61:23:b2:cc:98:
         76:f0:a6:f3:c3:3f:33:17:a4:17:af:cf:e5:c2:a4:03:b3:7d:
         07:55:35:a9:b6:a0:7d:3a:56:20:70:0a:20:e5:c3:cc:35:6d:
         55:be:ee:22:87:2f:ba:fc:27:8f:cb:bb:fb:e7:04:9b:02:58:
         bc:34:89:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:43 2026 by rpki-client