Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
File:                     0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json)
Hash identifier:          bTO6QaeY7uwNafM1JtCZC1DCuwflhycSVCd9vMmW7Yo=
Subject key identifier:   76:C1:38:88:C9:3D:69:FC:0A:BC:92:7F:98:1E:53:7A:F4:1C:7D:F4
Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
Certificate issuer:       /CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Certificate serial:       019D9D083C9487B01EB380CCDD8F81AFF556
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
Manifest number:          11FF
Signing time:             Fri 17 Apr 2026 20:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 20:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 20:00:55 +0000
Files and hashes:         1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: gR3Ogn1QaQXzcdqXu7THC7MG2At+qzpwXE3q3fv/wJs=)
                          2: 2f5dXJrT7zuKxhEnBTwrq6ei-_s.roa (hash: RkvyHwjfWKAPyzciHocJpPKvG0Wkaxk6iDB72eKrEGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:08:3c:94:87:b0:1e:b3:80:cc:dd:8f:81:af:f5:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f
        Validity
            Not Before: Apr 17 20:00:55 2026 GMT
            Not After : Apr 18 20:00:55 2026 GMT
        Subject: CN=76c13888c93d69fc0abc927f981e537af41c7df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:c2:64:63:c4:02:fd:a1:1c:c0:6c:7e:40:
                    eb:a6:e9:cc:c9:d7:0a:fb:95:90:a2:34:e6:93:93:
                    17:2a:dc:47:b1:e5:b0:e2:9a:f5:14:1f:e3:79:44:
                    ab:e4:ca:48:f3:00:81:63:06:40:a7:25:1c:89:6d:
                    58:0f:4f:71:da:69:5f:38:48:06:36:02:bc:89:b2:
                    ff:9d:67:aa:d3:91:e3:ab:d5:5e:bc:22:02:c3:17:
                    d0:ee:1e:95:01:d7:ab:ea:2a:53:5f:dd:01:f2:91:
                    2a:ca:01:1e:2a:b6:54:82:29:1e:db:53:50:5c:b6:
                    92:27:0d:37:19:a3:9a:e7:89:59:92:06:05:97:4d:
                    da:76:a1:d9:07:e9:a2:1c:1b:e7:69:5b:b4:21:da:
                    40:96:7d:4a:bf:c3:c7:7b:a6:c6:2e:77:b0:77:58:
                    75:1a:a9:79:c9:58:70:fc:ea:70:be:82:f7:2b:d1:
                    67:b9:9f:e6:43:29:2b:87:fa:fc:09:a0:1b:29:4c:
                    8b:54:da:4c:a1:88:88:34:80:85:1e:46:71:97:e0:
                    f5:03:4b:df:9c:e5:c4:9e:c6:4c:9d:00:34:cb:7f:
                    99:63:7a:e9:32:ea:79:23:6c:4e:6e:cd:f5:0e:d3:
                    a6:45:30:c2:47:20:4e:96:79:66:71:ee:ed:3d:75:
                    5b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C1:38:88:C9:3D:69:FC:0A:BC:92:7F:98:1E:53:7A:F4:1C:7D:F4
            X509v3 Authority Key Identifier:
                keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:29:a9:d7:f8:e8:ab:0f:1a:89:b9:aa:35:f5:f0:2c:67:81:
         d9:8d:ee:8b:cf:f6:d9:33:9c:63:a1:30:c3:f6:ad:9f:7d:8e:
         02:ff:1c:f0:96:d1:c3:d4:16:a9:a8:93:fd:17:b1:34:77:ba:
         0a:0b:7f:54:ff:14:59:82:d4:45:09:10:b0:f3:cb:3a:d2:3c:
         34:0c:91:61:95:82:c9:a5:87:fa:ef:c0:99:80:77:6a:fc:2f:
         dc:05:2b:84:18:aa:f7:fb:f6:dd:2b:78:6f:97:62:be:b1:40:
         a6:45:03:a6:76:2d:b6:26:aa:61:06:c8:68:d1:89:d3:56:0b:
         cf:4f:43:83:aa:8f:f9:d2:ca:77:90:08:44:5e:50:92:83:ac:
         dd:70:61:bf:c6:cc:43:49:04:a5:6c:f1:c5:69:08:30:41:aa:
         c2:ac:45:57:a1:54:74:c6:6c:8a:af:9a:7d:e6:0c:35:8e:35:
         f6:23:3b:43:83:c0:46:1a:9d:77:ce:be:83:7b:f6:dc:11:79:
         71:db:91:34:a2:06:79:7e:46:bb:e2:31:41:ab:cd:4c:c1:d7:
         d6:ea:2b:b3:3e:28:fb:07:77:64:ea:76:ff:10:9b:5d:2d:5b:
         6b:53:24:45:86:f8:a7:97:d3:24:e4:10:5e:cb:8d:30:eb:41:
         e4:2d:1a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:07:02 2026 by rpki-client