Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
File:                     9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft (raw, json)
Hash identifier:          /vGHbhNQLUlTT2FsQtR13Xtgl5LZ7WfgZnizbCO0XQ4=
Subject key identifier:   45:91:C6:A1:46:52:F1:E4:7E:29:04:83:AF:C7:79:EB:28:BA:85:F6
Authority key identifier: F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4
Certificate issuer:       /CN=f6413486886b56231dec573fad4f8ab32cbf92a4
Certificate serial:       019D98BD859CDCCF41C8F003F6D5B9126D2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
Manifest number:          1416
Signing time:             Fri 17 Apr 2026 00:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:50 +0000
Files and hashes:         1: 9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl (hash: ZVD52pWxzLG7o+5hTNcxEaSy0PAYflSuIAz6jndrRCQ=)
                          2: F5y9ZOsLF94osiTAvUu_ZpYquTw.roa (hash: XwqPFonWgi2NEgeq0iK4xwmr9JNoIB6OncnPE0wX2yA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:85:9c:dc:cf:41:c8:f0:03:f6:d5:b9:12:6d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6413486886b56231dec573fad4f8ab32cbf92a4
        Validity
            Not Before: Apr 17 00:00:50 2026 GMT
            Not After : Apr 18 00:00:50 2026 GMT
        Subject: CN=4591c6a14652f1e47e290483afc779eb28ba85f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f0:d6:8d:02:18:bb:a9:85:c0:97:27:f8:db:
                    11:bf:3b:74:35:ee:1b:b2:22:91:86:75:1a:eb:f6:
                    6f:0c:76:37:42:fe:f4:62:6d:f8:52:bf:32:a8:13:
                    db:0c:70:3f:59:1b:41:0d:7a:c5:1b:ee:34:9e:7b:
                    da:ca:2e:9c:7b:ff:71:39:de:5d:89:3b:3e:6b:c4:
                    9e:e4:fc:dc:bb:b6:f2:20:62:71:02:fb:27:0c:4b:
                    f6:32:f9:27:48:2c:d5:54:45:94:aa:2a:e2:8b:59:
                    fc:9b:f6:fc:97:a0:3e:ed:cd:3f:73:96:7e:bb:91:
                    6d:19:cb:54:8e:71:4e:e7:e7:61:d0:90:e4:ee:a8:
                    94:2a:e8:a2:e9:c1:dd:b6:f1:23:08:90:4f:dd:48:
                    42:10:e8:c2:7c:5d:cf:0f:50:41:a1:56:cb:ea:52:
                    3e:01:38:88:4b:f7:d2:a4:84:8c:3d:c6:47:7a:a4:
                    d6:03:94:28:4a:6b:d8:6e:8d:e5:e9:3e:e4:e9:41:
                    e6:fe:07:33:44:f2:f9:e4:46:d3:e0:72:58:be:11:
                    5f:2d:50:ea:ec:61:41:1c:3a:30:73:4c:af:1f:43:
                    6f:31:67:0b:8e:81:35:3e:c0:f6:b6:eb:97:29:92:
                    98:7e:fa:b6:0b:3d:f9:2a:00:b4:20:f8:17:1f:de:
                    d2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:91:C6:A1:46:52:F1:E4:7E:29:04:83:AF:C7:79:EB:28:BA:85:F6
            X509v3 Authority Key Identifier:
                keyid:F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:25:ac:e4:57:a8:a5:d4:cf:0c:4a:b6:7c:6f:c7:01:2d:b4:
         58:85:35:b3:1f:87:bc:b7:96:4d:d9:be:ae:9c:5d:4a:9d:7f:
         67:10:26:e2:67:bf:5e:8c:67:0a:36:9e:41:2b:19:a9:4f:b7:
         96:a5:94:5a:3a:f7:f1:ba:0a:ed:0f:44:94:a4:03:5a:ac:35:
         26:bb:f6:5e:0d:29:b5:0f:80:9a:3d:ed:4f:84:8b:2f:6c:16:
         c0:35:0e:a7:f7:6b:43:f6:ce:30:4e:47:b8:c3:a0:fd:f0:c4:
         e7:44:30:9e:3c:ec:6d:14:c8:f5:66:28:e8:68:4b:63:6b:f0:
         0c:e7:7d:f8:b1:83:e9:b4:9f:12:d3:ba:dc:c8:35:e0:cd:ad:
         0a:03:63:0a:9e:6d:d7:e9:3e:3d:4e:a0:98:79:fd:1e:9b:90:
         ee:6d:37:37:1b:d0:68:81:d1:99:1f:c9:42:47:60:84:f3:61:
         e1:39:77:5e:20:0a:9c:d6:0c:9d:5a:db:bf:54:fa:07:94:7e:
         83:ef:f8:1b:e4:39:5d:0f:e0:b7:9c:68:1d:c4:16:7d:6c:b7:
         9c:2d:41:91:99:75:cd:f9:9b:5b:cb:c6:d8:ba:e1:07:76:3c:
         44:40:ac:6e:65:0c:3c:92:8d:ed:a9:25:30:24:a4:98:28:26:
         d9:55:19:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:14:34 2026 by rpki-client