Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
File:                     Hrq0DWCBM83fdsO1pvgV34H7x90.mft (raw, json)
Hash identifier:          IzOSA7zBL7H9sjW80HhcSXuLBxk50E4uxIb/KKcljQc=
Subject key identifier:   35:A1:5C:26:9F:B9:B1:F8:5A:F3:10:F8:2B:E6:10:FE:58:3F:C0:98
Authority key identifier: 1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
Certificate issuer:       /CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Certificate serial:       019D9D762BBC9897FCE0569A377BCBB52893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
Manifest number:          040F
Signing time:             Fri 17 Apr 2026 22:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 22:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 22:01:00 +0000
Files and hashes:         1: 5Kagby_sStjMFhSw2G6-l1YpdBk.roa (hash: Noo2j7EiUwmhRo9X0f0rtLLladI+Ufm3DSaLlHlT9cg=)
                          2: Hrq0DWCBM83fdsO1pvgV34H7x90.crl (hash: Wd1rioy6RzCVjgZOT1Bq67C5ZUJdVZHRHu13VoqUDls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:76:2b:bc:98:97:fc:e0:56:9a:37:7b:cb:b5:28:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
        Validity
            Not Before: Apr 17 22:01:00 2026 GMT
            Not After : Apr 18 22:01:00 2026 GMT
        Subject: CN=35a15c269fb9b1f85af310f82be610fe583fc098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9c:1d:b1:d5:5a:e6:a5:13:41:0d:6b:f3:b8:
                    56:7b:e2:be:cd:88:41:ff:0f:06:cf:1f:a1:74:13:
                    94:15:d6:29:4e:04:f6:86:a1:98:48:cd:4d:f8:df:
                    83:87:eb:10:42:56:ee:ca:bd:dd:42:13:c7:ae:21:
                    07:6f:f3:7d:04:ca:dc:8b:6f:59:c2:9c:ca:64:ec:
                    1c:13:e1:7b:08:9c:03:8d:5d:e4:c1:e7:8b:4f:09:
                    0f:0d:71:7e:6a:ea:a5:59:be:dd:e3:0f:ef:d3:76:
                    f3:04:de:17:c9:9b:a4:00:25:33:99:b5:0d:99:12:
                    64:45:97:0c:8f:9a:6b:2e:49:f1:e9:b4:f6:12:1c:
                    90:28:16:25:d4:9d:67:9e:ea:26:c7:6c:2f:2a:80:
                    41:2b:05:01:9f:81:29:52:cf:52:c6:6a:7c:16:3b:
                    27:dc:42:3d:fc:ac:a7:55:c4:25:cc:fd:10:30:94:
                    91:60:f9:e7:da:4f:44:bf:43:af:ca:9c:3e:ab:5c:
                    48:3d:9a:4a:dd:c9:a0:8e:05:5b:92:e9:65:f1:15:
                    14:e5:9b:33:af:b2:46:e5:5b:f9:f3:b1:ce:78:c7:
                    21:4a:db:77:9b:3e:ee:46:ae:8b:ef:ea:d0:65:99:
                    53:2f:e5:a5:4c:d8:2a:95:41:f4:0a:4e:a9:d2:8a:
                    9f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A1:5C:26:9F:B9:B1:F8:5A:F3:10:F8:2B:E6:10:FE:58:3F:C0:98
            X509v3 Authority Key Identifier:
                keyid:1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:27:df:b5:59:d5:54:42:ae:9f:19:61:71:57:e0:a1:b1:6a:
         c3:7d:01:95:0e:00:57:e1:39:e4:60:30:dc:e1:2a:9d:3e:5f:
         ab:2f:ae:43:7d:64:39:8c:64:09:29:09:09:a8:17:2b:78:d7:
         37:18:6e:99:74:98:66:4b:3b:8b:d8:a5:76:6b:89:17:f2:48:
         74:9c:f9:a6:81:79:73:01:7d:f6:c7:35:de:ac:e2:99:2b:81:
         56:b9:34:b7:b4:cd:af:3c:fd:d7:98:47:dd:ab:7b:28:60:cc:
         97:1e:b5:49:a9:e2:d6:6b:e3:37:60:ba:c1:23:f5:f6:bc:c5:
         8e:dc:88:e5:d3:66:db:34:a3:4b:5c:8c:8f:10:36:56:ee:d2:
         9b:2b:3d:a4:a2:8c:1c:20:06:4a:dc:55:26:50:27:f0:db:84:
         3b:34:15:b6:e0:30:b0:04:cd:da:29:a1:66:65:33:2c:d7:d3:
         fb:60:9d:ea:c2:3e:74:41:31:90:4f:78:d4:4f:7b:9b:26:70:
         4f:d8:96:cc:f3:de:43:03:75:04:47:68:33:41:42:ac:30:8c:
         bd:92:1d:f8:96:27:c1:8c:8e:6e:8a:66:1f:6e:f1:e5:bd:84:
         c4:a7:9b:9d:05:af:e8:1a:95:b2:d9:d5:50:b7:8b:6e:98:ff:
         99:ae:ec:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:39:36 2026 by rpki-client