Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
File:                     P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft (raw, json)
Hash identifier:          N2FBvDwVbVV7WH3VuUgFUM2D66y/oO1D493maAvFmfM=
Subject key identifier:   1B:03:EC:2E:FF:7F:76:AE:09:54:70:1F:EF:21:8B:B6:AF:4D:6F:A0
Authority key identifier: 3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A
Certificate issuer:       /CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
Certificate serial:       019DA4F8FE14C608970790C4EB6DC52584D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
Manifest number:          BC
Signing time:             Sun 19 Apr 2026 09:01:14 +0000
Manifest this update:     Sun 19 Apr 2026 09:01:14 +0000
Manifest next update:     Mon 20 Apr 2026 09:01:14 +0000
Files and hashes:         1: P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl (hash: SyfSOLsO1GCTRptebRxWFAVrH7cJfF5P8JlXIlrpYDs=)
                          2: Z2hi7ItQ4ePG-89oC3NsOmcwohk.roa (hash: hpOgQ0YBy/9da8UmbyZyoarOicwd5QMZEwe4cjjhqvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:f8:fe:14:c6:08:97:07:90:c4:eb:6d:c5:25:84:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
        Validity
            Not Before: Apr 19 09:01:14 2026 GMT
            Not After : Apr 20 09:01:14 2026 GMT
        Subject: CN=1b03ec2eff7f76ae0954701fef218bb6af4d6fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8e:81:48:e0:63:b8:31:97:61:18:f6:a6:96:
                    a4:2e:32:bf:58:18:95:a5:32:bc:48:98:ce:ee:bd:
                    76:4f:4c:89:93:64:89:a7:5b:5f:65:d3:62:d2:a4:
                    77:8b:c5:81:f6:26:8a:ec:30:c1:12:47:45:9f:54:
                    cd:ed:80:5c:9a:e7:13:28:6f:33:02:61:1b:6c:81:
                    6e:f5:99:e1:d7:0a:e1:4f:aa:df:b3:d5:8a:72:77:
                    59:e4:21:31:67:b6:bd:97:9a:5c:3d:62:84:5b:52:
                    74:ad:d0:e5:30:34:56:e6:45:d1:72:8d:98:2a:6a:
                    92:91:36:cd:fc:29:09:9d:ed:50:01:ef:69:4d:b1:
                    7f:4e:f9:3c:7f:cb:0a:78:ed:80:26:1a:f4:fc:b3:
                    82:da:71:50:6c:0e:aa:5c:c9:69:c7:dd:60:db:12:
                    f3:b1:43:cc:f5:86:1c:51:82:89:5b:2d:c0:a4:35:
                    e7:eb:c4:93:ec:3e:f7:96:47:29:ca:e8:71:92:5b:
                    c6:84:ca:99:a0:d5:b5:d5:8b:88:ae:b3:1f:b5:8a:
                    7f:fd:0e:f1:30:1b:ea:79:f0:d3:53:7d:fa:3c:b9:
                    ff:0a:9f:c5:a1:79:5d:01:d4:51:71:e1:3c:2a:13:
                    db:e5:6f:28:8b:f1:64:b3:2e:df:74:b9:cc:ae:c0:
                    2c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:03:EC:2E:FF:7F:76:AE:09:54:70:1F:EF:21:8B:B6:AF:4D:6F:A0
            X509v3 Authority Key Identifier:
                keyid:3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:09:7f:65:04:67:fa:4a:2c:aa:07:05:e9:f0:59:37:2a:50:
         4b:ca:23:38:f3:3c:c9:79:cf:a1:d9:14:86:cd:62:54:bc:f3:
         fa:a4:25:de:d4:6f:7e:c9:b2:29:8d:95:1b:d7:a5:1d:3c:7a:
         45:17:5b:87:6a:96:6d:68:e0:a4:48:0d:a6:a9:76:01:48:3b:
         f9:5f:b0:68:9b:89:8a:10:32:0b:c7:fa:4e:35:4c:17:ec:34:
         f8:40:55:c8:68:37:47:6b:aa:44:41:cf:80:85:41:50:4c:c1:
         79:26:dd:9f:8b:02:53:1f:ed:87:2e:88:19:47:cb:e6:f9:de:
         64:98:bd:17:4a:8c:0f:37:69:7a:89:51:d1:5b:10:6e:cb:c9:
         0a:57:dc:de:fc:82:9c:20:34:a2:fa:ae:03:89:14:ba:fa:84:
         a8:f6:02:c4:35:c7:26:77:de:74:75:5e:55:91:e0:84:ba:12:
         cd:d2:1e:d8:77:50:75:e4:2e:1e:0c:a7:16:90:f7:b1:c7:82:
         f4:0e:b5:3c:cf:5d:45:83:81:10:fd:42:8c:77:9c:e5:b6:9d:
         e9:7d:4b:b4:69:6b:ec:15:fd:8e:83:2a:00:19:25:86:e6:ed:
         95:07:f0:a1:78:7c:62:02:43:e0:57:b9:ab:14:58:d9:57:87:
         7f:f0:b4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:00:28 2026 by rpki-client