Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
File:                     mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft (raw, json)
Hash identifier:          M4WYKhBxswI9zqcTrnYjvJPQMfoJR23XTM3W6E9Ldlo=
Subject key identifier:   E1:7B:EA:9D:A6:66:3C:A0:69:1E:04:D6:F2:90:85:90:47:B0:D5:6C
Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
Certificate issuer:       /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Certificate serial:       019D992B09FEF28B694E2F72DB7E0920EDF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
Manifest number:          08B8
Signing time:             Fri 17 Apr 2026 02:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:27 +0000
Files and hashes:         1: BR_BUevx2sg_8tyRkbQkeVhjNsQ.roa (hash: DcW4cVxJuDUK3IKLW2cbHxN+qa5e/QUPCI24FuVBujI=)
                          2: NE_RBgLN-WEZ1pofTZpRWHKQLhU.roa (hash: nHBSYWCWMkjsq8eIHvyxI7K4o3nKXMreU+r6LsPFSas=)
                          3: f-WzYrTcVspbvV27XUH8n69DSig.roa (hash: dPXvzRcp3N5snJFT4/YTmjC8NO5nN1yqw4UaUWODI/0=)
                          4: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl (hash: rgMrnyqXf1ASqG1MdULKEhXm6+EO3+C8rqE9WVVs8JQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:09:fe:f2:8b:69:4e:2f:72:db:7e:09:20:ed:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
        Validity
            Not Before: Apr 17 02:00:27 2026 GMT
            Not After : Apr 18 02:00:27 2026 GMT
        Subject: CN=e17bea9da6663ca0691e04d6f290859047b0d56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:36:20:a7:e9:4c:d0:47:96:d6:62:a8:54:33:
                    da:40:2a:bc:ba:f4:b5:a5:c6:87:a3:4c:c1:3b:f0:
                    83:2e:f7:a7:f8:f7:e2:4a:04:5b:c7:e1:d4:1e:14:
                    68:49:97:7b:49:dc:0c:a3:3c:4d:f3:95:e2:92:4b:
                    59:b4:8b:f7:cf:87:3a:26:38:50:a6:eb:32:c9:c4:
                    b7:89:4b:ad:09:99:7b:02:82:77:c6:4b:74:4e:1c:
                    ea:3b:8c:a7:72:3a:c9:3c:9f:76:57:74:41:ff:90:
                    cf:58:dd:01:fd:a9:08:98:5c:b1:46:4e:21:3a:bd:
                    8c:75:22:e5:fa:b6:41:de:c6:b4:18:ba:4e:84:60:
                    e1:31:75:64:5a:70:4d:f1:2c:e1:47:a9:e6:2f:34:
                    bb:48:05:51:5e:b5:46:1f:b8:fd:59:a9:99:65:13:
                    ed:89:97:ed:04:e3:68:6c:33:52:89:28:d8:96:ef:
                    2b:d6:e6:5c:1d:23:13:2d:eb:31:31:b7:bb:16:50:
                    ec:4b:fa:d5:d0:a7:ec:33:1a:d0:f8:0a:ba:2a:f5:
                    68:b2:69:10:8f:8f:c2:ca:76:fd:a4:8a:7e:ac:2d:
                    e3:9c:bd:34:1f:eb:68:5a:f3:4f:1e:c3:0b:ba:4f:
                    25:af:8f:4a:1c:29:7d:42:9c:8b:e3:09:a4:2b:c4:
                    9c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7B:EA:9D:A6:66:3C:A0:69:1E:04:D6:F2:90:85:90:47:B0:D5:6C
            X509v3 Authority Key Identifier:
                keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a1:32:96:c6:d5:21:de:b8:e5:06:72:c7:13:d5:c6:be:89:
         80:3f:b3:d6:e0:f9:49:e3:6d:dc:0a:2d:39:61:aa:77:b1:69:
         44:7c:3a:67:2d:a1:46:d9:6f:bf:00:fa:d1:5b:27:a9:41:d9:
         20:3f:42:a1:28:0d:91:e3:89:1c:fc:7e:29:38:27:8a:7f:c6:
         6d:64:f9:3f:5b:87:95:c1:ea:78:08:9f:3f:bc:df:83:c1:f2:
         79:e5:50:77:fd:c0:7a:f6:4a:36:72:5c:65:8c:e2:8d:5b:5a:
         b7:5e:22:bf:63:05:7b:85:3f:66:ad:2e:71:69:0a:94:e2:5d:
         71:c0:0a:af:b6:9e:9d:a3:6c:b9:fa:aa:f9:2a:b6:8d:f4:a4:
         16:85:73:51:44:b1:1e:22:4f:72:2b:48:f1:71:2a:72:4e:38:
         0f:6f:2d:9b:20:aa:11:13:92:5a:87:8f:ff:62:7b:c3:41:74:
         27:05:c2:21:dd:8c:36:40:72:c5:cb:26:ab:97:b0:6c:ab:0e:
         a6:df:a3:51:42:e2:77:83:5e:64:23:53:c4:96:9a:df:27:ac:
         37:78:1a:a8:51:7e:9d:29:73:64:e4:1a:f2:6d:9d:9f:69:32:
         fb:69:61:c4:a9:03:13:c3:38:88:7c:ec:bc:1d:e1:e9:f3:6f:
         01:ac:9b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:49 2026 by rpki-client