Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File:                     TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier:          9AjIuYqeBzSwnwoKdX8ZNNdieX5o4LFbjBXQ2UvIMcA=
Subject key identifier:   2A:05:01:B1:56:9F:46:78:62:F9:01:1D:35:91:4E:89:B3:05:64:49
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer:       /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial:       019D99CFF904ACE25A9A0963DD29A2F995FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number:          0D2E
Signing time:             Fri 17 Apr 2026 05:00:36 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:36 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:36 +0000
Files and hashes:         1: Oz2JTTFEUToA4rcARVfBKfZ-bNM.roa (hash: fQeMDFsyE9NlA+JYKajgKZ3XxSRtkUJy780HUIKIiOE=)
                          2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: 4mHPDb6OgGW9fjqdohj4cHsg8ewGZEMMKAYUxQa2CX8=)
                          3: p2AFdxK-ZHTv-IUkNOyxXK_-F34.roa (hash: XMvgQ2GpOxolBIvE+NkJU3WDfGq3UMdrz3BN6w9ftF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:f9:04:ac:e2:5a:9a:09:63:dd:29:a2:f9:95:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
        Validity
            Not Before: Apr 17 05:00:36 2026 GMT
            Not After : Apr 18 05:00:36 2026 GMT
        Subject: CN=2a0501b1569f467862f9011d35914e89b3056449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cd:60:0e:7a:1e:12:43:6c:66:d0:45:60:73:
                    75:69:dd:15:ee:23:fc:ef:98:eb:2b:d7:90:38:58:
                    8e:62:28:22:3a:e2:6c:1c:72:5f:92:73:87:16:a4:
                    57:43:1e:a9:80:e6:06:a1:48:07:71:49:73:3f:7a:
                    e2:0c:0c:03:c5:99:2e:f8:58:93:d4:59:12:4f:71:
                    cb:f8:eb:56:c3:b5:32:4a:a8:27:93:6f:42:74:89:
                    67:c7:2f:5a:0e:c5:30:ad:77:10:91:aa:70:09:79:
                    3d:63:1a:b4:2f:81:07:69:e5:fa:fc:a1:4e:8b:04:
                    38:3e:e2:6b:45:dd:d7:df:5f:60:67:96:41:74:8c:
                    f6:d1:73:40:10:5b:17:03:1e:39:be:61:a2:f0:41:
                    94:38:42:86:40:4f:d9:f3:98:4e:04:86:b2:fa:b3:
                    e3:0d:b6:a1:b0:94:01:ed:9a:47:f6:9f:06:95:35:
                    f1:e9:a7:38:ab:a8:a7:0e:83:2f:99:c7:ef:58:3a:
                    23:cc:a2:da:1c:f8:30:54:c9:6b:9c:bf:3c:63:6c:
                    36:2e:94:01:a9:0d:4a:bf:79:f3:db:07:ac:7a:22:
                    80:77:8f:d1:b3:f5:c0:ff:17:ef:d0:fd:ff:54:ef:
                    af:86:6a:f7:22:0a:ca:5f:d9:3b:d2:c3:d5:9f:ef:
                    e5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:05:01:B1:56:9F:46:78:62:F9:01:1D:35:91:4E:89:B3:05:64:49
            X509v3 Authority Key Identifier:
                keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f9:7c:1e:f4:07:86:ba:aa:37:b1:d8:8e:63:57:9e:3e:16:
         d2:cb:12:1e:70:2a:45:c1:4c:9a:e3:a8:f5:a2:02:9e:42:b5:
         fc:5e:32:c9:e2:14:c9:a2:06:1f:7f:bb:ea:09:94:68:a6:14:
         4f:15:d6:06:a9:8a:50:33:81:e7:40:64:38:16:d4:f6:94:2e:
         07:2f:f3:12:34:0c:a7:0b:66:b8:56:c7:e4:37:c2:5c:f6:51:
         cf:88:b4:dc:e6:1b:5f:5a:2a:90:6f:c6:e8:ab:6c:f2:54:d0:
         8a:a7:17:b8:0d:59:85:12:d0:ff:4a:12:b9:8a:85:f4:96:f2:
         f2:a9:e4:e4:3d:8a:91:2c:7a:d5:1f:6e:5c:a7:8c:f7:8a:4c:
         46:69:2f:5b:5d:25:a4:d9:52:01:2f:ee:c9:96:b4:ff:1b:2f:
         94:0e:c3:69:8e:98:3c:75:aa:c4:10:53:36:79:b5:83:41:73:
         30:15:81:0a:dc:5c:7c:17:92:cc:91:24:31:1f:6e:2f:e8:02:
         b6:1c:42:42:4f:2a:c3:46:53:74:70:15:0c:57:c8:d1:ca:66:
         ab:61:b5:2f:99:83:f5:26:67:9b:c3:5f:bd:56:9f:b3:9e:a6:
         ab:21:7f:92:93:b7:3a:01:5d:e7:94:d2:96:ef:e2:96:5c:56:
         b3:17:ef:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:09:12 2026 by rpki-client