Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
File:                     pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft (raw, json)
Hash identifier:          mtCLWYRqyCeV7HEMF31YsGqw0QqB2UfbguLvz2Wslb8=
Subject key identifier:   74:41:3A:29:E6:70:39:55:A3:09:07:18:F7:AA:AA:02:5D:3C:CD:34
Authority key identifier: A7:24:38:34:90:A1:05:BD:C0:D2:15:97:BF:B1:47:8E:F0:46:30:B1
Certificate issuer:       /CN=a724383490a105bdc0d21597bfb1478ef04630b1
Certificate serial:       019D99CFEA5C6BDF7844D06F34289B2A372D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
Manifest number:          0893
Signing time:             Fri 17 Apr 2026 05:00:33 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:33 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:33 +0000
Files and hashes:         1: QQvg19RwajXD2HR6-dIlare9_Rk.roa (hash: NDZGZHbva25Eq3lCZo+AeGz2C0nVtEPW/31zQHhJYJ0=)
                          2: pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl (hash: rLWUydZd4v2mB53lG7gw+ctffnXP3Di7yiPcCnJf3/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:ea:5c:6b:df:78:44:d0:6f:34:28:9b:2a:37:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a724383490a105bdc0d21597bfb1478ef04630b1
        Validity
            Not Before: Apr 17 05:00:33 2026 GMT
            Not After : Apr 18 05:00:33 2026 GMT
        Subject: CN=74413a29e6703955a3090718f7aaaa025d3ccd34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5e:5d:2a:68:f4:27:63:3f:12:64:de:22:a9:
                    10:fe:79:c8:e8:41:7c:0e:8b:54:bc:74:98:06:5c:
                    ce:24:92:85:a1:3d:ed:7a:a1:cd:6e:78:12:dd:f5:
                    70:fd:75:ce:e7:b2:39:ab:47:72:1a:4f:a7:73:e8:
                    57:c5:5b:50:a9:b2:e7:f6:25:10:c7:ac:0f:44:4d:
                    1f:07:42:8b:58:33:49:c4:65:fa:66:ad:9e:01:76:
                    6f:ce:c5:5f:d7:b2:eb:92:1d:25:cb:22:d4:33:77:
                    67:a3:31:0e:7d:f5:7c:23:bb:0e:b4:0b:64:e6:b5:
                    41:b9:6d:14:64:98:3c:11:83:9f:35:fa:10:88:52:
                    96:8e:37:95:dd:34:55:f2:25:42:4a:8f:52:4e:49:
                    2f:12:02:2f:4e:52:8a:cd:e1:81:94:b1:3e:61:4c:
                    36:ac:04:c9:dd:80:cb:6b:de:79:81:c1:fc:31:a0:
                    18:68:c7:11:5a:63:d9:85:bd:72:8f:05:3e:bc:94:
                    b8:a1:13:46:42:d6:29:87:da:37:89:5b:fe:6a:5e:
                    bd:9c:b6:9f:3a:92:6d:63:11:67:b3:73:1a:f6:cc:
                    23:77:5c:33:32:88:bf:50:91:8c:ed:8a:b0:63:cc:
                    d8:09:de:fd:bd:1c:d4:23:ed:a8:9f:f0:02:28:ac:
                    98:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:41:3A:29:E6:70:39:55:A3:09:07:18:F7:AA:AA:02:5D:3C:CD:34
            X509v3 Authority Key Identifier:
                keyid:A7:24:38:34:90:A1:05:BD:C0:D2:15:97:BF:B1:47:8E:F0:46:30:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:3c:e6:33:50:57:26:13:bb:1c:ea:f1:d1:15:1f:d3:2d:77:
         df:ed:a6:28:f0:64:56:0d:85:65:1f:4d:fd:4b:14:d6:1a:22:
         05:e1:49:55:14:95:ef:2e:d8:3d:f8:d2:7a:41:37:62:13:7b:
         d4:b3:e3:81:58:db:fd:3e:87:b4:99:b5:3d:b3:2e:2a:d1:82:
         ce:3f:0d:61:1e:79:d7:75:1a:29:88:fc:9d:dc:02:42:44:ec:
         2f:25:b2:e9:f0:f9:8b:48:4c:25:5a:db:5a:a0:47:a9:74:01:
         cb:27:9b:4d:fc:5d:3e:27:15:11:b0:0b:89:08:45:97:cb:a6:
         d8:72:d0:8b:67:54:f5:90:b3:2f:30:cf:22:26:c1:0a:02:6a:
         ed:30:7b:7d:c1:12:12:04:1a:ce:38:06:ea:57:b5:af:67:93:
         65:df:25:88:73:ab:b5:93:89:e9:b3:8c:b3:c2:3f:e3:f2:2c:
         5d:6b:8d:84:2c:ec:29:84:79:4e:13:28:35:be:fc:89:8a:d2:
         fb:31:e0:75:1a:4f:5b:fb:28:2f:6f:95:88:6c:0e:81:a2:d9:
         72:24:7d:d5:c6:72:aa:ba:1f:37:7d:96:95:b1:af:da:40:e5:
         2e:2a:1e:cd:a6:3e:54:a6:fc:60:8e:ae:5b:dd:f9:93:f0:ec:
         5f:18:a8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:37 2026 by rpki-client