Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
File:                     pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft (raw, json)
Hash identifier:          sa7vOgG3+tP9G8aIYzUTs+6jnYEP3+4MXgvlwvve5As=
Subject key identifier:   02:8F:6C:97:55:FB:D2:AF:5E:E7:8B:07:37:E4:14:9C:AC:C6:8D:49
Authority key identifier: A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24
Certificate issuer:       /CN=a4b707300e869467be5e5273222d90e0b618f924
Certificate serial:       019D9C2C5DC16FE0EC0F85451B0D9A26FBC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
Manifest number:          02B8
Signing time:             Fri 17 Apr 2026 16:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 16:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 16:00:46 +0000
Files and hashes:         1: 4LcrxhWHmhkvPdpuzoR7Y2DvIRU.roa (hash: R/FNqp7EeNGMZEea43bk96Q3NZeLFAovdU6R5kUDA+c=)
                          2: _rkoOQmmtVtFnbLuubGb2FPnExg.roa (hash: CzxwuD95bHpNiF0gIsEuyjsHFs3IQ3s6b3cEWVvW62w=)
                          3: bBQddLsJpMdgE7gqchwFza_jgpU.roa (hash: FUjStVoQwXDYDeRsi+A//hBH3DZhoNYwk2uCiqnGlmA=)
                          4: pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl (hash: 5mj07vbWHdy7ac8aFJ3Es5eLS+84UNd+/cLtZLowCo8=)
                          5: xJLUaEqq1ZnsryMWFK1TiSGmxHs.roa (hash: CgFHk+Ek6FTFUMY85fF8eDyesBRdCZysUJ3S3cGo/uM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2c:5d:c1:6f:e0:ec:0f:85:45:1b:0d:9a:26:fb:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b707300e869467be5e5273222d90e0b618f924
        Validity
            Not Before: Apr 17 16:00:46 2026 GMT
            Not After : Apr 18 16:00:46 2026 GMT
        Subject: CN=028f6c9755fbd2af5ee78b0737e4149cacc68d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1f:94:78:e5:6b:90:84:bd:73:26:68:89:ce:
                    70:c1:60:41:0c:03:f6:07:e8:b0:f6:86:5b:63:63:
                    ce:b2:af:65:5e:b1:9b:d2:ae:7c:87:5d:2a:a9:13:
                    41:b0:6b:e3:24:bb:18:e0:0d:86:7a:ed:24:f7:c6:
                    9e:8e:98:e2:ee:06:d6:ff:a6:a4:fc:b1:0f:c7:8e:
                    3a:ae:06:ba:c5:26:ee:c1:9e:b6:b3:e8:c1:0b:42:
                    23:48:8f:b1:58:74:af:a4:5c:fb:57:55:1a:3e:cc:
                    b7:75:13:55:90:6e:cc:35:e2:53:8e:2b:5d:73:c8:
                    05:9a:6f:6b:87:8c:c4:d4:aa:04:32:b9:fc:7b:05:
                    3b:8a:35:90:b3:9c:01:bd:37:3e:5b:1e:67:d7:2c:
                    84:32:b2:af:2b:27:64:1b:1a:dd:8a:25:88:d3:47:
                    c7:87:ac:37:a1:66:f8:47:74:dd:a7:7b:ad:b1:75:
                    a1:34:9a:74:fd:43:2f:e1:d5:0e:fc:fe:d6:79:79:
                    58:d8:c9:5d:f5:12:f9:ce:09:9b:53:e5:7b:42:ca:
                    e7:10:59:2c:70:1c:64:87:a8:25:32:1d:4e:7d:43:
                    6c:a3:65:d5:98:6d:4a:12:e2:c6:91:bd:72:62:70:
                    0c:ec:63:79:7c:67:27:ea:78:fb:39:0f:a0:09:42:
                    a1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8F:6C:97:55:FB:D2:AF:5E:E7:8B:07:37:E4:14:9C:AC:C6:8D:49
            X509v3 Authority Key Identifier:
                keyid:A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:28:9d:bf:45:05:53:ee:cd:c9:2a:f4:8a:0d:41:e7:f2:0e:
         a2:8e:b2:87:a9:81:a0:fe:d4:d3:25:5a:04:1b:ad:2f:46:2f:
         28:81:36:a7:3e:e6:7f:cd:cb:37:45:c4:1d:9a:23:d8:b5:23:
         c1:57:ae:2c:38:71:1e:85:af:fa:4a:db:bd:70:2b:95:c9:81:
         e8:1d:75:d3:07:7d:29:83:6b:21:7f:7b:ec:c8:39:f7:71:18:
         a7:d2:7b:39:6c:13:de:fc:d0:c5:f4:59:ef:47:78:ad:c3:b8:
         3f:a4:19:ec:2b:4a:4e:88:a2:c4:66:a8:83:31:23:a3:e2:9c:
         9b:a6:d3:f4:e7:44:97:a7:be:1e:b4:4e:a0:8e:97:ec:18:e4:
         25:85:ed:d2:1b:b9:f8:26:c6:24:29:3d:ba:3f:14:b8:b8:29:
         3c:33:ca:06:65:86:f7:8e:1b:49:13:8a:a2:7e:74:85:25:ee:
         1d:77:15:43:fb:4c:2a:a1:fb:19:de:ae:90:fc:0e:9e:b5:d8:
         f0:72:a8:5e:f1:3a:0c:e0:b7:96:33:5e:5f:6f:d3:ad:f2:f5:
         21:58:d0:de:a0:97:c6:9f:22:ac:a0:69:9e:74:a7:03:f8:01:
         e3:ab:81:45:1a:9c:71:07:d9:43:9d:1b:6c:d4:3e:5e:ad:67:
         7c:59:1d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:20:34 2026 by rpki-client