Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
File:                     wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft (raw, json)
Hash identifier:          p74hokOYKw664+Dp630UQagkLLdbUG394KbaxshVT1s=
Subject key identifier:   CB:99:88:D8:AA:66:C9:E8:27:0D:77:02:2C:75:04:DD:69:4C:00:74
Authority key identifier: C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6
Certificate issuer:       /CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6
Certificate serial:       019D98F42BF34AFED81A7DDFFEF884AF72AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
Manifest number:          0AE7
Signing time:             Fri 17 Apr 2026 01:00:31 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:31 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:31 +0000
Files and hashes:         1: h0udnEUnZF4CgPhVM04ofBmSvzQ.roa (hash: 86Ue2QRslfOBTNicHKV9wxjZDnUc41ToAUPvqZQH7cs=)
                          2: wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl (hash: UmX/C0UnLfFKBev7EXraS1WfIpfOYWQoODUp4I7Dc9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:2b:f3:4a:fe:d8:1a:7d:df:fe:f8:84:af:72:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6
        Validity
            Not Before: Apr 17 01:00:31 2026 GMT
            Not After : Apr 18 01:00:31 2026 GMT
        Subject: CN=cb9988d8aa66c9e8270d77022c7504dd694c0074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:78:db:ad:6e:55:9f:66:fc:20:41:30:6a:1b:
                    37:9e:c2:16:24:a2:e4:ec:c0:8b:0f:12:54:3d:35:
                    f9:ba:47:ad:26:26:0a:26:3a:0f:b4:9e:10:39:0c:
                    93:2d:d2:57:0a:98:b3:23:ed:1c:e9:2f:d8:be:64:
                    f9:0a:7f:cf:c1:d7:e8:06:e9:f7:ac:34:c8:75:5a:
                    3f:4e:f3:54:a6:3a:c4:b1:49:5e:2c:06:d0:8a:c8:
                    c5:ad:c9:e7:b3:7b:72:1c:d6:3b:7d:de:30:8f:1e:
                    a7:39:f2:a3:52:3c:98:e8:24:66:12:07:97:aa:ed:
                    a2:c7:b3:ca:d6:32:91:c4:7b:23:9c:cb:ac:9d:e8:
                    20:e7:b6:0f:4e:e8:91:15:33:85:a5:73:51:01:d8:
                    0b:1f:14:63:49:1d:d4:89:9c:ac:06:9c:f7:af:14:
                    85:f5:77:52:81:44:72:5c:1d:10:fe:d8:07:bb:2a:
                    ca:04:d3:54:38:2d:45:3f:1e:8a:ef:28:0d:df:d8:
                    74:67:35:77:b5:e3:76:c8:a7:03:d5:10:20:67:cf:
                    5f:eb:d3:53:92:3e:8c:f4:f7:3a:86:7d:b9:f1:b2:
                    df:c4:ee:ea:1f:9e:54:2a:2a:d7:2b:7e:12:75:ad:
                    9d:7c:60:36:69:13:64:51:a2:8a:39:4e:2a:14:1e:
                    e4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:99:88:D8:AA:66:C9:E8:27:0D:77:02:2C:75:04:DD:69:4C:00:74
            X509v3 Authority Key Identifier:
                keyid:C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:be:04:fe:b3:40:d8:9e:63:1f:14:54:d9:f9:b9:63:f4:c2:
         24:06:ac:85:58:72:2f:da:31:e4:3e:0b:2f:7f:a0:a8:5e:90:
         a7:d2:e4:44:03:41:9a:74:74:64:e5:71:a6:de:13:54:2d:70:
         95:b7:19:4a:c3:7b:69:db:39:10:0a:3d:20:dc:0c:e0:f5:45:
         05:36:95:58:81:41:ef:d3:63:11:3e:f6:5a:30:40:ef:28:2f:
         ef:20:71:fb:73:e9:0d:66:bc:07:55:fc:41:de:fc:16:fe:2b:
         7e:3f:24:c2:75:4e:c0:9e:e4:6d:a9:be:db:2f:32:6f:a1:d4:
         28:3a:fe:bd:07:98:94:65:d8:be:c3:13:52:d0:06:2c:2b:69:
         2a:85:02:47:9d:1b:39:39:3e:4b:20:f9:4c:27:ed:59:2d:6d:
         38:9c:bc:3e:48:6a:e0:35:10:ed:7c:8d:99:6b:0d:93:2f:d5:
         cc:98:eb:e7:40:7b:4c:80:16:78:c3:72:ec:58:d8:2a:93:b1:
         72:21:d8:9e:73:42:c5:69:b2:67:a4:81:95:39:e5:75:f6:6e:
         31:9d:db:8c:24:c8:73:05:e3:18:46:a5:2a:cf:10:84:7f:ef:
         bb:7c:8b:eb:6d:22:8a:0a:0f:18:19:ae:46:ca:ff:f3:a3:0f:
         7f:b5:5c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:58:36 2026 by rpki-client