Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
File:                     ByZq37GLGJ89xNO-bcWWJUvlybE.mft (raw, json)
Hash identifier:          PB0Pj+qG28NcxZPck1qZ2q+JBGNJN/9IHR8db46rC54=
Subject key identifier:   4C:A0:4E:F9:BA:06:1B:EB:9E:B6:5A:7E:45:B4:DD:E0:B9:61:1D:CD
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Certificate issuer:       /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial:       019DA41CA77BEE448BE6B33E0018A8790FC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
Manifest number:          0E81
Signing time:             Sun 19 Apr 2026 05:00:34 +0000
Manifest this update:     Sun 19 Apr 2026 05:00:34 +0000
Manifest next update:     Mon 20 Apr 2026 05:00:34 +0000
Files and hashes:         1: ByZq37GLGJ89xNO-bcWWJUvlybE.crl (hash: JEFkMyNAxJsgcJNjSBcpGbv2hUJMDGtSW1OnHo5c1M0=)
                          2: aM81JrdxO-yRrVlKdRuDInz7Xik.roa (hash: m45p2Y1vKc3tda0x+KiQ3qLXf93450FPSTY5dkd5d+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:1c:a7:7b:ee:44:8b:e6:b3:3e:00:18:a8:79:0f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
        Validity
            Not Before: Apr 19 05:00:34 2026 GMT
            Not After : Apr 20 05:00:34 2026 GMT
        Subject: CN=4ca04ef9ba061beb9eb65a7e45b4dde0b9611dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6d:63:a6:f5:35:e0:7a:aa:29:1b:44:34:49:
                    a1:f8:b8:2e:fb:a5:4e:7a:24:91:47:7b:3d:b0:6b:
                    10:eb:c1:07:88:81:1b:2c:40:da:34:02:fe:99:d2:
                    fa:b0:fe:e3:47:43:1f:73:5b:da:77:45:bf:4e:62:
                    90:57:12:6b:52:b4:14:39:07:f4:0d:58:2a:40:29:
                    53:79:04:a4:a6:c1:6d:af:33:79:23:49:c9:5e:cd:
                    52:00:b8:fd:e3:65:ff:62:99:b0:cd:68:5f:db:b4:
                    77:5b:7f:59:36:10:80:72:16:b4:d2:b0:20:8e:d6:
                    a4:6b:87:63:a4:db:ea:6a:7f:1c:aa:1a:46:28:39:
                    65:8f:7e:a3:13:62:75:e9:32:f4:e1:e7:3a:27:bd:
                    bf:a2:70:02:a6:b0:86:fe:7c:e0:c4:ba:12:72:8c:
                    42:fe:f8:74:b3:f7:87:55:ba:c4:ec:8d:0e:9b:93:
                    02:48:7c:ea:7a:43:d7:19:39:47:35:f8:ac:47:27:
                    c5:ba:cd:5d:30:a1:ae:43:07:10:9d:c1:ae:ad:a5:
                    cc:b4:21:e2:4d:cf:d7:3c:16:14:84:da:12:bd:b7:
                    57:be:21:6a:39:88:8f:b9:bf:d4:0d:a3:1d:89:f3:
                    b5:a4:cd:46:86:e2:fd:27:d1:b5:dd:53:67:87:3d:
                    1c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A0:4E:F9:BA:06:1B:EB:9E:B6:5A:7E:45:B4:DD:E0:B9:61:1D:CD
            X509v3 Authority Key Identifier:
                keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d2:50:96:cd:1d:52:57:96:40:26:5b:15:5c:bd:a4:5c:92:
         fa:43:13:9e:a1:5e:22:d3:40:c8:c6:3e:6c:2e:ef:2b:a7:38:
         a6:73:56:1d:c9:ca:08:76:82:68:d2:ed:6f:47:ba:02:f9:76:
         2a:70:7a:56:df:47:9e:b6:8d:7f:33:bb:ff:9f:83:c6:d4:86:
         fd:b6:52:94:1b:30:3b:3e:2a:98:3e:a8:91:1e:0e:4f:14:3d:
         cf:cb:e7:7f:ee:1d:08:31:b3:69:3e:54:a4:e5:bb:a9:23:54:
         e0:a9:47:c6:a0:9e:7e:f1:06:a1:44:b2:72:93:17:c9:02:69:
         48:be:19:8e:ee:60:c0:f3:44:97:8e:c7:a9:17:b6:01:60:93:
         63:43:cd:c9:d8:9a:b7:72:f4:d9:c2:58:1f:34:87:34:73:ea:
         90:bc:d9:1c:0d:f8:ee:78:b9:81:a1:59:95:b2:ae:16:45:83:
         87:cb:9d:4f:8d:a6:2a:4a:58:cd:5e:a8:35:29:32:ae:80:9d:
         fe:1e:8c:87:57:30:5d:f4:a5:83:2b:76:a9:f9:c5:a8:bd:a7:
         b5:67:37:42:d5:73:9f:49:d8:39:b4:ac:e9:bf:40:d9:6d:ca:
         13:41:76:e5:ba:71:a7:2a:00:09:ae:22:5f:66:38:e1:43:4f:
         30:07:90:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:05:18 2026 by rpki-client