Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
File:                     Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft (raw, json)
Hash identifier:          9RtQclBDNYXvyXECjS2RpHWXYGCyv9TWsHfDkt3taEA=
Subject key identifier:   0F:E9:AE:27:D5:FC:78:43:A8:99:0F:B1:09:4D:6D:DC:1A:C9:70:32
Authority key identifier: 46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
Certificate issuer:       /CN=463f917077f8f3d0e338c742ea21d64358d19d52
Certificate serial:       019D98F51883C2E6A73A4D72A5F98037A471
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
Manifest number:          082A
Signing time:             Fri 17 Apr 2026 01:01:32 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:32 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:32 +0000
Files and hashes:         1: HmNbu7fvLqkuNCvwTP-eXZTgjiM.roa (hash: m/atD1lD6rUs54W8etAvVpgoMLgOWanL44spO3D1HdE=)
                          2: Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl (hash: r/JgIkMk0CcM0Gtmy/Yuyx4jvRjFrtfUfBudcYJoEqI=)
                          3: eASxXKRxIs_kj-l1Ner7toyYCdA.roa (hash: ezV7+yb4XB2ubnd0AqkzgtqKTjmFbndpmZgG2VbnSno=)
                          4: pxOnqlq8UjygS2yRmi3Ur3nd-A4.roa (hash: aJhD1VyN6OGe5iE4OPjL2lO60V5k352+7aiUBwTHoKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:18:83:c2:e6:a7:3a:4d:72:a5:f9:80:37:a4:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463f917077f8f3d0e338c742ea21d64358d19d52
        Validity
            Not Before: Apr 17 01:01:32 2026 GMT
            Not After : Apr 18 01:01:32 2026 GMT
        Subject: CN=0fe9ae27d5fc7843a8990fb1094d6ddc1ac97032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:59:e4:30:f8:6f:3a:57:3b:1e:e6:b8:e3:39:
                    75:ef:89:8b:69:08:dd:1f:73:d9:da:15:72:5b:24:
                    78:57:a3:fd:e4:74:16:18:f4:f1:2f:88:ef:4f:35:
                    0d:14:1c:3e:32:fd:8a:bc:6e:48:0a:6d:2b:00:67:
                    90:0a:93:2c:4e:06:45:fb:72:80:56:32:ab:e6:83:
                    4c:3e:ca:52:aa:57:6c:56:0e:72:b7:2d:63:8f:d8:
                    ef:60:9e:c7:77:60:fb:f6:c6:db:f5:8c:24:7d:28:
                    76:01:cb:e1:cd:ef:e4:ed:6c:ba:b0:23:20:43:cd:
                    72:58:8b:35:82:47:01:26:a4:fc:7b:49:ff:3f:37:
                    47:5c:df:3e:17:55:83:fe:10:a4:3e:e5:56:87:d4:
                    e5:a5:6a:be:9f:a9:01:a2:9d:da:8d:27:9b:3c:bc:
                    cb:97:1a:6d:56:2e:ee:a5:f7:ae:5a:65:e2:0a:f8:
                    de:e5:03:4f:fd:fe:b3:ef:a2:bc:27:54:42:dc:31:
                    52:10:15:78:8d:e5:a3:6d:e1:7c:70:d6:d7:75:39:
                    a1:87:9f:c7:78:01:03:25:9d:dd:16:fa:81:74:c7:
                    43:78:02:9f:80:3a:4e:47:54:ae:8e:f1:43:93:00:
                    c1:b0:27:6e:39:35:a6:24:cc:77:b5:87:2a:0a:a0:
                    2e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E9:AE:27:D5:FC:78:43:A8:99:0F:B1:09:4D:6D:DC:1A:C9:70:32
            X509v3 Authority Key Identifier:
                keyid:46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:62:e6:ee:f8:c6:92:ea:2b:7b:fb:8b:17:32:ee:25:cd:94:
         39:2c:2c:bf:ba:81:28:7c:ae:ec:e9:6a:e9:45:05:cf:c1:2b:
         35:70:1a:2c:cb:40:00:89:bb:48:0d:7b:87:e8:1a:d9:33:06:
         55:62:a2:e9:9b:8d:cf:2e:5b:c6:c4:5d:97:10:74:a6:ab:ee:
         dc:69:af:b5:85:49:f9:b4:eb:a0:ff:05:80:a2:f4:e6:ab:55:
         c1:8a:a8:83:a4:31:8b:bd:69:54:97:e4:97:8c:9b:59:1f:e5:
         37:9b:18:c9:fa:4d:3b:9a:32:19:7d:92:f8:cd:06:8f:21:dd:
         a8:c8:4e:90:32:99:09:19:de:85:53:3c:bf:04:0a:20:b9:14:
         f8:fd:3f:0f:e5:f8:6d:16:b0:20:eb:a9:76:10:d2:8d:2c:54:
         e1:1c:6a:a4:9a:27:50:fc:32:b2:8b:cc:4e:ef:28:a9:9e:be:
         a2:78:4d:f9:c6:10:14:c1:4e:39:32:96:46:d7:e9:27:63:4c:
         97:ed:49:21:93:3a:90:3a:87:6d:17:73:c6:88:24:22:0a:17:
         8b:df:f8:8f:2f:27:51:d8:10:de:67:2c:74:24:ab:86:06:56:
         8e:1d:26:03:ff:c2:21:87:10:be:9b:6c:a7:46:2a:0e:15:a9:
         0d:6f:89:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:35:43 2026 by rpki-client