Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
File:                     REIuqj2u32uQIVnu2-lMqbfSKE8.mft (raw, json)
Hash identifier:          9UB+s1+Hwjde1Pq4NGIPk6R/HkiAI02EpksKscGklOo=
Subject key identifier:   69:98:2C:53:B1:CA:9F:22:76:6D:DF:0C:BC:22:A9:C2:64:6D:97:D0
Authority key identifier: 44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F
Certificate issuer:       /CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
Certificate serial:       019D999948633DB58E48D24E27F8E7DC0C64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
Manifest number:          0EF5
Signing time:             Fri 17 Apr 2026 04:00:52 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:52 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:52 +0000
Files and hashes:         1: REIuqj2u32uQIVnu2-lMqbfSKE8.crl (hash: JJWGTb3sAKwpGrVwncDdp0sOckKsLY2EV2wkj6Bv7k8=)
                          2: gCwdPZm7-2mkCNs_6h-_knpGMgA.roa (hash: zOOdjbIrjBtj8zo7gLNAmynH9YT4viYiJaXTAoE0p/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:48:63:3d:b5:8e:48:d2:4e:27:f8:e7:dc:0c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
        Validity
            Not Before: Apr 17 04:00:52 2026 GMT
            Not After : Apr 18 04:00:52 2026 GMT
        Subject: CN=69982c53b1ca9f22766ddf0cbc22a9c2646d97d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a8:c2:5e:fb:3e:46:59:50:68:02:e2:55:ee:
                    34:1b:a2:b6:03:9d:40:d9:d2:df:5b:43:5e:91:9f:
                    32:4a:33:e0:46:98:e5:4f:12:88:06:4a:93:d1:47:
                    f8:73:d3:45:71:de:86:ec:08:f2:8f:a8:a9:91:ae:
                    6c:11:77:1c:4e:ea:e8:3e:09:3b:a1:3a:1a:40:53:
                    8d:f0:0a:a3:36:ac:88:3a:4b:3d:93:37:9f:21:2b:
                    49:65:41:19:55:2a:5e:67:98:d7:93:c4:af:20:27:
                    08:29:73:e0:1b:ba:8a:08:90:5d:b3:e0:10:a3:c1:
                    57:a5:33:c2:2c:65:d3:c4:82:c3:50:c9:b3:f3:4e:
                    bd:d4:25:ab:4c:4d:ad:72:01:82:c3:bd:f7:b7:31:
                    33:33:d3:f1:06:07:fa:3e:98:65:2e:9b:a8:01:8d:
                    c8:e7:7b:ea:a2:48:ee:0f:d7:1f:86:ff:fc:dc:c9:
                    e6:12:9e:27:0b:7d:6a:5f:c8:c4:f8:6f:2e:cc:1d:
                    4f:ff:48:fa:d6:82:45:57:b1:7d:55:27:0d:96:8d:
                    43:cb:47:42:a7:b9:31:42:41:c9:a9:16:93:06:24:
                    8d:e4:77:df:22:65:44:df:ee:06:21:21:a7:64:bb:
                    6d:1a:2a:50:53:c7:87:69:ca:83:cc:ba:43:8b:dc:
                    de:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:98:2C:53:B1:CA:9F:22:76:6D:DF:0C:BC:22:A9:C2:64:6D:97:D0
            X509v3 Authority Key Identifier:
                keyid:44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a9:2c:77:d4:31:50:a1:44:64:76:4f:99:ea:21:db:9f:ef:
         d7:d0:93:2c:15:6e:75:1e:ae:12:5e:b1:42:fa:59:65:87:de:
         57:a1:79:28:7c:7e:8e:93:68:f7:f6:cb:de:86:20:71:24:d5:
         1f:cb:9b:a2:1c:82:68:9b:92:d5:62:6d:7c:1b:d6:e6:5e:96:
         b1:d8:08:90:62:76:61:fd:68:1b:5b:37:6b:66:93:16:b3:9e:
         25:04:32:8a:65:1f:b2:4b:95:5f:ad:6c:9f:41:4f:8c:ed:f9:
         ce:b5:79:ba:9e:c9:19:9d:1b:8a:5c:f4:6d:ad:76:e7:8b:df:
         4b:13:e6:13:79:cc:c1:d9:7c:da:b3:08:c4:a3:a5:e7:bd:f7:
         30:14:c9:e6:69:d0:08:00:3f:eb:88:ba:d3:a8:e5:ba:95:19:
         70:d2:b6:29:56:6e:9d:8f:86:59:99:06:ac:44:ec:c8:cf:06:
         97:27:a8:fd:f9:09:19:d0:e1:99:78:05:22:c0:40:3b:03:9e:
         8b:5e:86:31:e1:15:26:c0:ea:f9:71:84:c0:e8:43:89:c2:09:
         22:8e:56:f9:0c:d0:ce:4a:b2:34:07:7d:11:06:5f:f8:35:ab:
         65:a5:7d:49:09:a0:26:71:a4:9a:72:81:9f:31:2f:78:35:2e:
         33:fc:e9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:45 2026 by rpki-client