Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
File:                     8RqaRFV9Rv8tgIiiKIha_wANwqI.mft (raw, json)
Hash identifier:          IL9lVazfcayTl7Wg1G5vbkRWVZ07NvKbVKZH2R2aiXo=
Subject key identifier:   7B:68:48:9A:C8:7E:FB:9A:D3:29:62:09:66:B0:E6:0A:7E:DD:19:79
Authority key identifier: F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2
Certificate issuer:       /CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
Certificate serial:       019D9A74B5215FE689F87379798C326A79F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
Manifest number:          0D0E
Signing time:             Fri 17 Apr 2026 08:00:32 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:32 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:32 +0000
Files and hashes:         1: 8RqaRFV9Rv8tgIiiKIha_wANwqI.crl (hash: 1jsYdxAa2cgB+r3ihgq/Jy0yW5VONdRShuwTW+/SVJk=)
                          2: z6n92NIP1tvVgc0euBLMnBtSoZk.roa (hash: Jjy7mkaYofsu+k30uI9CDy57tkSDpiXwny9UHpG3aJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:b5:21:5f:e6:89:f8:73:79:79:8c:32:6a:79:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
        Validity
            Not Before: Apr 17 08:00:32 2026 GMT
            Not After : Apr 18 08:00:32 2026 GMT
        Subject: CN=7b68489ac87efb9ad329620966b0e60a7edd1979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:e8:32:67:cd:48:0b:54:2f:8c:ac:9f:b1:
                    9e:77:75:8a:b2:74:34:00:1c:3d:b5:dc:0e:ef:b7:
                    02:08:5c:fd:a8:6a:45:2f:1f:e3:9d:16:30:60:0e:
                    bf:62:10:28:77:ea:9d:ff:70:71:8f:03:41:fe:b8:
                    dc:d9:48:87:ad:10:06:57:de:42:0f:31:e9:8f:85:
                    48:30:01:02:b4:0b:dd:9a:0e:b5:70:5b:fa:9f:f0:
                    a4:7f:24:31:23:86:fc:47:18:32:f0:c7:4d:71:b0:
                    9d:2e:6b:cd:ce:7e:c8:26:87:94:d9:07:cb:40:26:
                    57:26:bd:db:57:e1:78:71:82:af:c2:10:28:6b:66:
                    75:3e:e5:e8:e9:a9:a2:25:dc:c9:e4:0f:b6:ae:ef:
                    9d:fb:01:91:56:42:9f:dc:e5:d0:2f:91:7a:71:5d:
                    9e:4f:59:e0:85:0a:55:42:b7:c3:fd:2f:2d:b1:05:
                    71:4a:85:07:0d:37:15:f7:41:83:c0:3c:91:76:16:
                    d4:b4:dd:62:79:5c:a6:59:dd:76:a7:af:d1:50:ff:
                    60:c4:f3:61:39:82:39:bb:7a:88:63:9c:35:01:fa:
                    a8:08:32:f4:bb:15:74:8e:21:e8:ff:eb:6d:a6:fb:
                    30:39:f3:d7:a2:f1:70:7d:30:1d:f7:9e:47:cb:9d:
                    bf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:68:48:9A:C8:7E:FB:9A:D3:29:62:09:66:B0:E6:0A:7E:DD:19:79
            X509v3 Authority Key Identifier:
                keyid:F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2e:ff:f0:51:60:61:31:1f:47:f4:3b:87:19:14:f5:d1:93:
         65:55:6e:c8:5a:09:50:95:fb:10:3a:c5:78:98:72:66:be:ef:
         da:87:a4:45:3a:36:10:dc:89:a8:50:46:96:c4:d4:b4:57:93:
         ec:c3:8f:6b:31:0d:4c:d0:3a:d6:5a:88:37:0f:cb:fa:e8:47:
         1b:39:8b:79:9a:7d:b3:28:1b:d0:22:34:34:97:43:90:0f:ab:
         b6:54:39:36:cc:89:a0:22:79:62:32:23:cc:6f:5d:c0:a3:07:
         db:9c:cc:71:c0:2c:dd:9c:42:da:51:c4:1e:6a:5e:c5:4a:b1:
         bf:5f:8f:9a:06:ef:f2:16:6c:a6:86:f9:60:f2:19:b7:6c:7f:
         f5:05:ab:d6:de:83:96:0a:e5:a1:fa:99:e6:a2:5c:b9:43:82:
         1d:2e:8a:90:0e:c9:95:b3:b5:14:8b:09:0b:70:de:54:b6:4a:
         06:b6:c8:d9:6b:91:7e:c0:d9:a1:a7:de:f3:f6:cd:70:35:b3:
         24:96:57:29:5e:3d:45:f0:eb:b8:69:94:ab:59:96:86:fa:c8:
         17:0a:b6:e1:5d:85:23:ea:7c:47:90:b0:8b:90:00:c4:b8:8a:
         01:79:4d:5a:d7:93:6a:ee:6d:ef:fc:40:43:e9:16:ad:a1:c4:
         ee:49:f1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:47 2026 by rpki-client