Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
File:                     Ts9hevNfNyTn2oYOv75OwTiuGAA.mft (raw, json)
Hash identifier:          Gj/LOQVLTbHfVZDIHr/fnENduRjApc2sz3c1S4m5oXY=
Subject key identifier:   E5:E9:29:21:D6:F1:AA:64:4A:DF:15:AA:11:87:80:B7:58:CB:20:BD
Authority key identifier: 4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
Certificate issuer:       /CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Certificate serial:       019D9C2D36B706FC775351DCB133B33BE18F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
Manifest number:          1608
Signing time:             Fri 17 Apr 2026 16:01:41 +0000
Manifest this update:     Fri 17 Apr 2026 16:01:41 +0000
Manifest next update:     Sat 18 Apr 2026 16:01:41 +0000
Files and hashes:         1: Ts9hevNfNyTn2oYOv75OwTiuGAA.crl (hash: 1QJunkCqX5HNO1yHsmKpAxm8ECvqHSUbRfZ95qU8+wU=)
                          2: lRIjNj0BHQE6hiLGxFavKUdyoeg.roa (hash: PocADE6/FL6eoSgXxu0JdSE+M73YHwsz3KQP93yGopU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2d:36:b7:06:fc:77:53:51:dc:b1:33:b3:3b:e1:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
        Validity
            Not Before: Apr 17 16:01:41 2026 GMT
            Not After : Apr 18 16:01:41 2026 GMT
        Subject: CN=e5e92921d6f1aa644adf15aa118780b758cb20bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:15:24:d7:38:c9:fc:3c:68:da:28:9c:e6:25:
                    09:e4:5f:7e:85:2c:ea:59:c6:f8:1d:64:70:60:49:
                    c3:23:e5:3a:12:04:89:bf:da:fe:49:db:60:65:a7:
                    3a:fb:60:f1:8f:13:67:08:28:ed:cb:b0:85:73:93:
                    7c:56:55:40:da:b7:1f:60:85:8e:7b:c3:c1:83:b8:
                    36:86:1d:66:22:f6:ba:86:81:01:c1:d1:3f:7b:cc:
                    7c:96:0f:c1:a2:b5:71:6a:08:a6:9b:c6:08:75:a8:
                    c4:db:ce:3a:5a:86:db:ce:9d:ee:8c:57:d8:dc:8f:
                    8d:a4:06:04:b0:bf:d2:fd:0d:dd:7d:5b:8b:a0:d9:
                    b0:04:21:ef:81:c6:a6:c9:77:fb:78:76:bd:54:41:
                    c8:db:b6:f3:82:7a:b5:3d:f5:68:ab:f9:57:aa:5b:
                    81:48:ce:fa:c0:59:2b:ed:5d:d1:51:d2:1b:80:fc:
                    bd:16:fc:0e:14:f9:7e:3d:38:f7:c5:3e:65:bd:ac:
                    e0:7a:8c:2a:09:29:a0:aa:5c:18:0f:a0:fd:c4:aa:
                    13:55:41:92:fc:be:17:79:f0:01:05:fa:ee:8b:e2:
                    91:72:4a:6c:83:fc:b3:e1:82:f4:b1:d1:73:42:b2:
                    e5:de:35:11:cc:20:23:55:62:70:ac:78:b5:29:49:
                    4f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E9:29:21:D6:F1:AA:64:4A:DF:15:AA:11:87:80:B7:58:CB:20:BD
            X509v3 Authority Key Identifier:
                keyid:4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:10:3b:9f:02:91:a5:13:94:75:09:9e:a2:5e:a6:5d:14:ae:
         c4:e1:b2:d0:bc:41:20:7c:06:b4:20:60:1e:2c:05:3b:b0:85:
         48:e9:1b:2d:9b:f9:eb:11:e9:f8:1f:04:a5:39:d3:d2:bd:4a:
         10:de:6d:a0:bf:9a:41:99:cc:fe:b8:26:1b:7d:bd:42:76:24:
         3e:6d:5b:4e:94:6e:2b:c0:c4:3c:d0:ca:af:78:ec:e9:3c:e4:
         c9:f9:91:5b:73:85:ed:2d:d7:fc:f2:5d:b6:61:19:1b:42:b0:
         34:6f:79:d9:0e:ae:9f:59:c9:38:30:b2:3d:23:ce:14:50:9e:
         b8:94:18:f6:57:53:8d:3d:12:8d:a3:8f:06:20:ff:7a:5c:19:
         18:b7:51:7a:40:54:5c:e7:36:8e:ca:57:f9:c5:92:d4:05:fa:
         27:59:84:a7:f6:46:63:74:d4:02:51:ee:bc:1e:87:25:14:a1:
         58:1c:fb:d9:81:e2:ec:ef:f8:e6:db:c2:c4:f4:7f:3d:35:bf:
         4c:c5:f2:27:ff:19:89:ed:a0:90:f1:7f:45:c9:c8:bd:01:07:
         b4:64:58:a9:0d:e3:e0:1d:06:54:c5:9c:b3:4e:89:5d:32:c5:
         03:53:ab:20:3f:6a:97:c5:65:f9:b8:12:d3:95:65:1c:57:c2:
         3a:bb:82:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:10:32 2026 by rpki-client