Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
File:                     9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json)
Hash identifier:          fv30R96y0AIj4zikaTu5WmvLVltwVkhnVLNBF3aeKiA=
Subject key identifier:   20:97:FB:69:34:9D:DF:C0:1A:88:9A:7B:CB:83:B4:6B:C8:7B:4E:F6
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Certificate issuer:       /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial:       019D9998FF03017181CF12EEDE2C958882FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
Manifest number:          10DD
Signing time:             Fri 17 Apr 2026 04:00:33 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:33 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:33 +0000
Files and hashes:         1: 6JluXjhm_3nHCCaPoS3TfBvKy-U.roa (hash: o1cOjM+O0qiescaG0asYe3SHOLXy9bPb72S0RHPk1N0=)
                          2: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: iHfmuAgD948x1I11V7tfgLjg0QfpjB0bQG26teu272A=)
                          3: EXPtgF3pZHjNUJl2LJCVZFox4fI.roa (hash: eBmFuREOuZdP3B6dGKEKnHjrjSuhSyhM471vSjq0eBQ=)
                          4: EtFx9f4oiCywxFykUSR2QjU7eFQ.roa (hash: b2AfdRFwbg0njOLl9hGqSCvFbx4kUQActP2xft37G50=)
                          5: GDHsmxtHVdYa1bZaIWOH1_OImP0.roa (hash: 7pk8LdfcytaksybidRQnrYPauwLqusCRjPdg0+T84EQ=)
                          6: M_AsK8xtgHW--enKh1Fv-0yD_GQ.roa (hash: kvJW1SXagKB0pbzliKf7XR3LeE5GTsMSJYvmlREXthM=)
                          7: QojlrQ9a8Sf-3OscCFSF9lKZeL0.roa (hash: 5zZB8tcLmgJvpKxRcJyw89w0k3VioDwJSjfpHcGceEg=)
                          8: _DBibvy1y9JoyoGE-bKCjSoDWyc.roa (hash: tHTDVPFwK8Ocp3huDTizupo9HBbejkSKeT8H3qb/iR8=)
                          9: aI7K851ffCc0tWN8S0U8Ns8VJxg.asa (hash: 822VH5CA3fhDgHZR6uAc8SFbxTllR+Bitc8kZBqFSyY=)
                          10: jFHWQVied9oZQfm4vhIvSC4eiV0.roa (hash: dr0KfgCKcAC1kV4SsWObX5dDQnEh0pKNGg0bXRatP4I=)
                          11: u21fpxmmOR9mlnHoRxP6iE7HrmQ.roa (hash: UB+VK364X+iu32GdfVjBn8r1mi4BDsfoTepchYMyQUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:ff:03:01:71:81:cf:12:ee:de:2c:95:88:82:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
        Validity
            Not Before: Apr 17 04:00:33 2026 GMT
            Not After : Apr 18 04:00:33 2026 GMT
        Subject: CN=2097fb69349ddfc01a889a7bcb83b46bc87b4ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:47:f9:93:a2:35:46:3a:e7:9b:89:ac:46:6e:
                    75:d0:13:4d:d2:fb:51:55:5c:74:b2:84:f0:76:61:
                    34:45:82:98:cf:77:36:58:3a:f2:96:dd:1a:3c:8e:
                    5e:e1:46:b9:5c:c9:08:ed:0b:5a:48:dc:54:67:72:
                    ca:7a:e9:b3:9a:31:a8:80:0a:5a:e9:fa:41:89:b4:
                    12:e5:af:f3:96:9c:1e:ae:8a:cd:82:9b:bd:4b:10:
                    13:d1:72:67:a1:05:b8:7b:77:47:13:64:29:47:0e:
                    34:6d:47:f5:bd:78:86:d7:07:48:3f:c4:2b:a0:b2:
                    9a:79:d4:29:8b:a2:95:2f:0a:e3:49:9d:0d:34:87:
                    5b:cc:b0:41:3d:97:9a:5e:b4:13:d6:7c:64:6a:88:
                    32:60:62:3c:c7:4d:72:13:8f:8f:7a:f1:c0:b1:f9:
                    25:a9:74:51:62:25:8a:b5:ec:b8:56:0e:71:7f:a1:
                    88:a8:08:2c:00:bf:e9:44:d6:1d:b4:3d:6a:da:55:
                    76:f3:5e:04:fe:39:95:a3:1e:0a:4e:85:12:a7:9d:
                    6a:fe:01:d8:15:a3:37:2e:d5:b6:1e:a8:a5:66:b5:
                    2c:ea:8e:3a:32:cc:7e:47:0e:d7:5f:d3:89:13:03:
                    c2:5d:25:df:0f:2c:76:80:37:dd:94:66:7e:b2:b7:
                    4b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:97:FB:69:34:9D:DF:C0:1A:88:9A:7B:CB:83:B4:6B:C8:7B:4E:F6
            X509v3 Authority Key Identifier:
                keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ef:1b:3f:4c:76:a7:36:8b:da:31:ef:1e:54:a0:65:bb:2e:
         75:03:4b:c5:20:78:0d:7f:cf:67:a0:d0:ba:38:89:6d:9d:8a:
         ff:0f:04:5e:d4:ea:ee:7f:f6:a2:36:3e:11:51:94:be:3d:80:
         86:6d:7a:ad:6a:51:fb:f6:bd:42:2a:88:38:7c:e6:58:65:9e:
         30:27:68:9e:36:ba:55:4e:97:ab:18:b2:a7:70:68:19:0a:64:
         b8:3a:73:ab:a0:a0:1f:35:12:65:32:f2:cc:f3:a2:90:2a:10:
         ca:46:79:7c:23:16:2f:78:a1:90:ff:8f:b0:83:fd:69:81:63:
         1d:c8:88:36:12:95:cc:00:99:18:1a:cc:67:4e:30:0b:57:e8:
         17:d4:b9:3c:43:cc:46:6f:9d:76:ad:dc:3f:12:f1:21:4c:cc:
         7b:61:8d:1e:10:60:61:8e:a8:34:0d:38:ca:26:2d:03:9c:0f:
         95:dc:78:e9:94:63:05:d3:a6:5f:60:12:7e:a0:16:a8:6a:de:
         09:d6:12:08:aa:65:83:c7:43:3a:b0:7c:17:4b:d1:c7:e6:7e:
         78:48:c8:c8:b5:e2:74:65:24:61:0b:b0:a6:a5:9c:52:fd:af:
         8c:78:d9:c9:3c:32:b6:a7:e6:23:4a:43:ea:d1:8f:3a:c0:53:
         f6:be:6d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:20 2026 by rpki-client