Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
File:                     1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft (raw, json)
Hash identifier:          cctkHsWkVO3w6WchAzIQLvG1isfslTbGQWfYVJsMNhs=
Subject key identifier:   C2:43:AE:B3:36:BB:B0:02:27:CE:1D:AD:A2:8D:F9:36:F4:46:61:B2
Authority key identifier: FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7
Certificate issuer:       /CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
Certificate serial:       019DA4538234C0C85D2C3F967FD86D34D5BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
Manifest number:          0763
Signing time:             Sun 19 Apr 2026 06:00:29 +0000
Manifest this update:     Sun 19 Apr 2026 06:00:29 +0000
Manifest next update:     Mon 20 Apr 2026 06:00:29 +0000
Files and hashes:         1: 1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl (hash: XWZxBCc/ezmK7CSNxkSrA8/ue/Mi0DbLEiCCiotovtw=)
                          2: NLxrIIugp3R4DpT8Bd4iByRao_Y.roa (hash: wBPPunNUH66uF/lnjqaErJgsT6xEJ8SJhXS+mFEdnAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:53:82:34:c0:c8:5d:2c:3f:96:7f:d8:6d:34:d5:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
        Validity
            Not Before: Apr 19 06:00:29 2026 GMT
            Not After : Apr 20 06:00:29 2026 GMT
        Subject: CN=c243aeb336bbb00227ce1dada28df936f44661b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:d8:76:6f:57:c9:ea:f6:4b:77:74:2a:70:
                    d5:0a:15:3f:71:82:04:00:9b:e5:1b:27:14:ee:a0:
                    32:e6:12:5d:0d:3c:7c:64:92:3d:e4:15:06:bf:36:
                    0f:ff:6e:d5:0c:e6:32:05:0f:12:0d:ae:c9:0b:66:
                    e2:2e:cb:ca:0a:46:25:f3:0a:51:ed:2f:81:23:53:
                    af:6e:30:a5:c3:b8:39:60:6d:ba:5b:3f:fe:b7:63:
                    93:b8:8a:7c:c4:22:db:e7:f6:66:c7:b1:fd:6a:56:
                    f0:b8:23:df:bc:b4:97:d0:87:60:94:fe:d9:0f:dd:
                    f7:bd:50:9f:4a:db:8c:0b:82:cd:52:13:bd:b5:8b:
                    0e:a4:1f:84:71:97:c0:02:fd:05:2f:61:0a:d4:6e:
                    5e:89:69:a6:9e:cd:76:61:b5:88:40:5f:78:0b:1d:
                    27:04:26:93:cf:45:a0:46:e6:b0:80:90:c3:9f:eb:
                    07:35:c3:63:36:8d:70:fb:0c:9b:9b:35:19:99:2c:
                    8c:18:5d:05:d4:3e:aa:f7:46:6b:a5:aa:cd:1a:c2:
                    92:d2:c2:a7:45:d9:f6:2b:e9:2f:5c:d5:12:08:fb:
                    b4:a0:28:c3:73:07:65:e9:63:3b:55:53:16:a2:87:
                    b6:59:7a:c0:8d:9d:52:fc:d7:2c:60:c2:8d:5f:2d:
                    39:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:43:AE:B3:36:BB:B0:02:27:CE:1D:AD:A2:8D:F9:36:F4:46:61:B2
            X509v3 Authority Key Identifier:
                keyid:FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:d4:8b:a0:7b:c0:95:2e:49:ef:c5:64:2c:8f:23:7c:af:43:
         3c:5c:b3:c6:5f:2b:5d:9c:d0:1c:2c:b4:96:dd:ed:a3:86:0c:
         5f:53:45:41:6b:e8:3f:f8:4f:b0:34:fe:2c:2f:73:f5:f2:c5:
         66:a2:76:16:d0:cb:63:c8:b5:e2:ba:70:dc:36:f4:1f:d3:56:
         2c:2b:e9:e4:17:71:2e:df:7e:3b:4f:5b:da:89:b1:d0:c6:45:
         91:ee:5b:97:d5:60:a2:ce:37:a7:b8:b6:e7:a5:a7:cf:ec:e2:
         53:15:99:87:88:b9:67:fb:7e:eb:d5:9c:59:9a:8d:90:d9:be:
         07:e0:b0:ef:54:f7:d6:26:7c:01:b2:c2:e5:df:62:5b:dd:e4:
         a5:77:a0:f4:b3:0f:12:f5:14:f2:1c:ad:09:9f:2f:59:04:bf:
         91:19:0a:54:77:db:21:60:da:ac:a6:0e:a3:78:a4:7c:c2:b2:
         de:36:0f:75:ef:46:34:55:78:b1:9d:88:12:65:85:11:c5:4e:
         0a:9d:c7:9d:8b:a3:c1:a2:2b:bb:4f:7e:51:b2:c1:cc:ac:d1:
         13:09:38:8c:09:a7:14:87:c8:67:0c:2f:29:6b:2c:13:44:e4:
         b8:6a:38:12:a9:77:83:5f:3c:a8:ce:ef:72:e3:1c:37:ea:1f:
         33:d2:e6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:46:12 2026 by rpki-client