Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
File:                     AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft (raw, json)
Hash identifier:          Q3Ul4Dxqzh0lHIr1VciH1MPzpz8OJwQsmPW/NQrRO8c=
Subject key identifier:   47:32:2B:4B:A2:40:2B:BA:61:E2:04:1E:96:4C:C6:6E:AA:8B:67:01
Authority key identifier: 01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
Certificate issuer:       /CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Certificate serial:       019D9DADA5FF49A8834EBD98C6EB33FCCDA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
Manifest number:          178A
Signing time:             Fri 17 Apr 2026 23:01:36 +0000
Manifest this update:     Fri 17 Apr 2026 23:01:36 +0000
Manifest next update:     Sat 18 Apr 2026 23:01:36 +0000
Files and hashes:         1: 6uyLPr7GcIkDSRR1cBioO7oGEF0.roa (hash: FfvCuloLAdVXrZLuuHrf1reVNj9KC+EjXSXR/em79FA=)
                          2: AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl (hash: n/0Vatsu5qB2cI5GPExrzD9Yomsw6VtHGZTPqxgJPe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:ad:a5:ff:49:a8:83:4e:bd:98:c6:eb:33:fc:cd:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
        Validity
            Not Before: Apr 17 23:01:36 2026 GMT
            Not After : Apr 18 23:01:36 2026 GMT
        Subject: CN=47322b4ba2402bba61e2041e964cc66eaa8b6701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:94:b7:32:e1:24:3f:25:3d:a1:77:9d:bf:1d:
                    1a:b0:81:bf:72:87:2a:cd:5a:f1:97:80:ec:43:91:
                    5c:3d:ae:5a:02:f2:d7:f8:84:2f:2c:f7:c0:45:29:
                    71:f6:3d:c8:f1:4f:f6:90:2a:64:0b:f1:30:7d:e9:
                    fa:c3:22:a1:16:b2:2d:6e:7a:e9:b6:d4:cf:b4:d2:
                    54:40:d4:ff:a6:c4:b6:9c:45:de:1f:f3:0c:99:c9:
                    89:4d:0f:ae:da:b1:bb:ac:2a:20:e4:50:99:06:ad:
                    f1:a8:59:3d:d1:5f:bf:74:75:c5:c2:de:92:57:f7:
                    2a:56:30:ca:3c:ce:4b:bb:f4:62:8b:a0:a0:d1:be:
                    c6:d7:a7:02:cc:f7:a4:ea:03:61:b4:de:ed:bb:d9:
                    33:a1:a1:f3:a1:88:05:a7:a8:d6:80:17:4f:2c:5e:
                    81:28:4f:d6:8a:2a:c2:13:05:77:68:4b:dc:9f:55:
                    ce:5d:5e:ab:ac:4b:42:75:74:2a:eb:f2:f7:be:c6:
                    1a:a5:49:e4:b8:ea:b9:fe:ef:46:54:d9:68:7b:7e:
                    d8:d7:cf:8d:2b:b9:cc:99:83:86:80:95:0a:77:1b:
                    a4:d3:ba:47:fd:c7:5d:66:b9:80:88:e5:e5:38:d4:
                    0d:0e:9f:33:bb:9a:f9:97:eb:a0:77:7f:a5:c9:35:
                    74:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:32:2B:4B:A2:40:2B:BA:61:E2:04:1E:96:4C:C6:6E:AA:8B:67:01
            X509v3 Authority Key Identifier:
                keyid:01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:6e:f8:c0:3f:9b:22:5b:01:84:61:f6:f3:5f:01:49:92:74:
         c5:54:8f:8c:da:62:db:e8:a8:48:26:8a:bf:70:ee:c0:99:15:
         f3:81:07:6c:b7:9e:a8:a6:57:21:a0:b8:32:bb:bf:bb:9d:2d:
         a5:80:b6:ae:b8:3e:b4:0d:7b:9d:59:53:a7:44:37:27:ba:e5:
         40:61:dc:41:cf:be:46:ca:34:a7:0e:d0:72:03:a6:a7:c7:48:
         a8:c2:1c:3e:8c:bd:42:f9:f8:12:5e:a5:1b:d0:67:f4:c5:b8:
         07:3e:e2:94:54:2d:0c:78:b5:ca:48:81:2a:0b:75:fe:f7:78:
         5c:5f:aa:42:1d:ed:de:f4:84:5b:e6:70:58:3b:ea:1e:73:9e:
         71:cf:18:a1:72:e5:dc:d1:e3:4f:34:3b:64:eb:92:c3:03:1d:
         f4:9c:8d:f8:3a:69:4c:4e:5c:be:84:d8:1b:51:e3:d1:3e:22:
         12:00:70:2f:42:a9:77:65:82:fa:f1:05:fe:d4:b8:22:20:22:
         af:26:d7:4e:ce:aa:a8:b1:6c:cb:30:3a:6e:43:6c:0f:9d:73:
         5c:3b:95:70:03:52:10:de:5e:2d:26:87:1b:d2:57:0d:3f:4f:
         3b:e0:3d:1d:b1:49:2b:0d:d0:75:ea:64:ae:20:77:39:5a:be:
         95:85:77:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:02:18 2026 by rpki-client