Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
File:                     1vrDln6phZIn2fe-dE4qbqSG4Rc.mft (raw, json)
Hash identifier:          2a7vz4RKh8iy45czvtUe84x0HDzUWijxLcMubvOBZks=
Subject key identifier:   65:6A:EB:C3:37:19:4E:B2:43:F9:27:E1:A1:78:1D:A8:7C:92:4F:3B
Authority key identifier: D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
Certificate issuer:       /CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Certificate serial:       019D99CFF099BEA50926C74D2AA1F0846628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
Manifest number:          17FA
Signing time:             Fri 17 Apr 2026 05:00:34 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:34 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:34 +0000
Files and hashes:         1: 1vrDln6phZIn2fe-dE4qbqSG4Rc.crl (hash: 6WIv27x8RoqWvHdOaf0Gx6aDveNWOCjjYHhp49vQL6s=)
                          2: 58jG5a4etI7HLIjlMWRu8EZHcBI.roa (hash: h6AjzB3AJvNdpXgK77pPU3V49NDZDTYGpMVhHidUW8I=)
                          3: 9rQtcYniJqaTmpf5xB6cfsXG52I.roa (hash: du7a+9+coel4o3rj5T2HDR19krlEKiSzpeQoq4pnzXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:f0:99:be:a5:09:26:c7:4d:2a:a1:f0:84:66:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
        Validity
            Not Before: Apr 17 05:00:34 2026 GMT
            Not After : Apr 18 05:00:34 2026 GMT
        Subject: CN=656aebc337194eb243f927e1a1781da87c924f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:ec:3d:50:42:81:c9:8c:c3:02:5d:ee:51:
                    6b:06:eb:a1:75:d3:cd:dc:58:18:d9:b1:bf:35:c4:
                    dd:5f:25:a1:ef:b8:6f:82:46:d4:af:c0:49:09:f2:
                    14:f2:0e:07:af:b2:43:81:89:07:fc:94:f5:fe:63:
                    1f:d7:c0:0f:99:7d:b4:c1:6a:24:0a:10:df:fb:b9:
                    6d:dd:65:4d:37:ad:e3:33:74:81:00:a0:68:1c:f1:
                    b4:18:97:08:97:95:ed:b4:e0:f8:4a:c6:c4:dd:a4:
                    99:a8:92:11:b5:98:ec:45:3b:7a:81:c5:9b:8f:c9:
                    0e:f5:ea:92:aa:be:8f:e2:8e:10:b7:0d:8a:9d:e4:
                    38:18:5c:dd:1d:64:d9:9e:f8:c6:b5:21:9b:6b:ac:
                    b6:ae:66:99:97:ab:c1:ca:85:29:4f:ad:1d:f7:8a:
                    16:d3:d2:25:75:63:fa:1a:2d:60:ce:c8:ee:bb:62:
                    fa:0c:76:11:a2:5e:38:74:4b:0c:70:0b:0f:ab:44:
                    a8:5a:c7:45:fc:28:a9:69:f0:2b:77:66:9a:3d:9e:
                    9a:21:a9:22:c9:cb:2c:76:80:f0:9b:95:d0:1d:98:
                    a8:d7:2f:b6:3d:fd:cb:fc:c9:69:09:cb:45:a1:9d:
                    df:01:5a:a5:d6:4c:91:fd:0b:17:61:ef:b1:22:02:
                    0a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6A:EB:C3:37:19:4E:B2:43:F9:27:E1:A1:78:1D:A8:7C:92:4F:3B
            X509v3 Authority Key Identifier:
                keyid:D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:78:f0:a7:4b:d6:c9:69:4b:74:aa:67:7b:89:db:5c:91:9b:
         14:45:43:18:2a:0c:ec:47:b8:80:8b:0e:60:40:df:7e:9e:93:
         72:ce:49:3c:95:d8:8f:3d:d8:e5:0d:eb:57:f6:f9:aa:27:7b:
         d0:c8:6f:b4:81:0e:ac:07:17:d1:43:a4:e8:3a:29:fe:da:f3:
         cf:5e:18:cb:90:13:c5:a3:b8:8c:c9:3e:cb:eb:93:5f:2a:15:
         e3:ff:39:1a:cc:9c:81:10:28:b3:37:99:29:7a:61:62:74:f6:
         05:db:2d:28:c8:b1:5d:2c:6b:66:a4:c4:eb:a0:17:1a:a0:40:
         18:62:ae:6d:18:54:d8:6a:2b:cd:8c:af:6b:43:70:70:7f:5b:
         e4:a7:d9:6f:2b:1e:81:34:02:ba:31:2a:10:1d:1a:ab:83:0d:
         4f:20:e0:02:20:ff:a3:83:65:1b:21:b9:83:72:ec:07:c8:9b:
         c8:70:34:06:a4:10:94:d0:e1:5b:80:ac:b8:e5:a3:08:81:5c:
         73:11:4d:a9:33:1a:98:87:14:5d:64:7a:57:7c:52:9d:df:69:
         85:f5:62:2a:2a:1c:e0:e1:1a:ba:a7:c2:84:2a:2f:ba:ac:b4:
         d1:4c:db:de:f7:2a:38:0b:82:e0:21:67:ea:73:6e:12:73:c9:
         cb:2b:a8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:40:14 2026 by rpki-client