Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
File:                     1COlvl4hykYHMq5I84Wj6hUKK-E.mft (raw, json)
Hash identifier:          wmJ9CrR3ZdUM/Q9og3+S153PttbqJ0UuvTGzwdARTW8=
Subject key identifier:   ED:3F:EC:06:BE:65:F7:94:1A:5F:09:BD:E5:E8:4D:A1:29:EF:1B:30
Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
Certificate issuer:       /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Certificate serial:       019D9B87726F2C67B437B28301052D57132F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
Manifest number:          0B91
Signing time:             Fri 17 Apr 2026 13:00:38 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:38 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:38 +0000
Files and hashes:         1: 1COlvl4hykYHMq5I84Wj6hUKK-E.crl (hash: RFw/1z4Ff8v4pA0RD4Ndo6TvUEv6Q9qvlU+k/9Pfd08=)
                          2: Ac8C988WG2rKoPAyM0PJx2rNaoE.roa (hash: 89LOHLJ7QAy8vGNQbBqFUdTxIH6fXbqoySpOcf8nHiY=)
                          3: IHsIqdWKW3oXqrv8CC_-_K3HeCM.roa (hash: dZCFigPRpz1prER5FdjelyGWWX2YW17+YhrDgGzAMCw=)
                          4: LpR-LQvQfXymcif_LMaWE0JZD3g.roa (hash: zhvd1luynFJPjxGKrx2N652wizkvdv3su1q7wp46nxA=)
                          5: URkF_3wWv4caQ7gSHuTsb7r6MGI.roa (hash: Gjnz59P638W/IUVQMIM+Nm7HP3jZwW2uLN6LQ+PZObA=)
                          6: hnX6AgrOaoGB1pS6d2IohDyU9YY.roa (hash: TyBpxjx7ARYI2/qA9SgTNdxkKgP/znTGEAT9++KH4mc=)
                          7: vAK4daozNSO59AKfeMnlfBD0uBI.roa (hash: BWOG9qwyAhGR7urMCtstbKhY8qOFr3C+wcw1uSuJqsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:72:6f:2c:67:b4:37:b2:83:01:05:2d:57:13:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
        Validity
            Not Before: Apr 17 13:00:38 2026 GMT
            Not After : Apr 18 13:00:38 2026 GMT
        Subject: CN=ed3fec06be65f7941a5f09bde5e84da129ef1b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f3:7d:b8:03:98:d1:9a:4a:ea:f1:1f:19:95:
                    5e:4c:70:f4:58:20:47:40:79:2b:ab:78:d6:58:c0:
                    92:23:02:b8:4f:4b:48:55:3b:e4:af:2c:6d:d8:19:
                    c3:71:80:a0:50:45:b9:0a:9a:a0:bc:96:19:eb:71:
                    ce:c5:98:4b:54:8e:01:20:b6:a4:eb:e2:a6:43:15:
                    ed:cb:e0:40:6a:5f:24:84:d7:8a:12:dc:c9:83:85:
                    b0:49:9f:92:85:cf:a9:c5:83:dc:cb:2e:1e:e2:79:
                    7e:8f:8d:7e:37:cb:55:4c:0e:bd:ce:dc:48:b3:fa:
                    61:e4:b0:93:c4:08:c0:4c:6e:62:e5:35:8f:d3:39:
                    b6:86:12:05:db:17:b4:61:da:1d:31:36:13:90:cf:
                    fb:22:47:93:ae:e3:74:0a:ef:80:13:65:94:ed:c6:
                    f9:84:f5:39:72:45:b7:80:c8:fd:d0:53:e3:46:90:
                    a5:b9:ac:31:5f:54:d0:8c:21:48:c2:07:a5:73:77:
                    1a:7d:1b:12:a1:11:40:48:3c:4e:ce:09:62:08:54:
                    df:eb:0b:ff:e9:23:99:33:0d:a3:4b:d9:f3:a8:94:
                    82:d9:c1:b9:33:18:36:dc:be:c0:c4:cd:3b:29:b2:
                    d6:ef:2f:8b:2b:cb:02:2b:ee:24:0c:c9:09:c4:46:
                    12:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3F:EC:06:BE:65:F7:94:1A:5F:09:BD:E5:E8:4D:A1:29:EF:1B:30
            X509v3 Authority Key Identifier:
                keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:5a:b1:c0:fe:9d:9c:00:ed:72:10:5d:3f:ca:75:c4:01:c2:
         c8:c5:18:d4:db:86:84:cd:d2:7c:7e:cf:63:23:18:c2:59:b5:
         ba:36:6a:72:bf:49:40:b2:76:9b:f8:72:57:53:bb:a0:b7:8a:
         26:a8:3e:61:4a:42:d5:17:33:42:0e:3a:17:3e:57:dc:33:e6:
         2c:f0:b9:56:b8:a3:29:d3:a0:60:de:f9:93:29:5b:8a:de:d0:
         41:17:bb:d4:5e:0a:1a:1a:b9:e7:be:d7:42:a3:81:d9:8c:4a:
         1a:26:92:ce:80:75:a8:02:06:76:15:8f:74:3e:85:61:9f:5e:
         d8:d6:92:04:33:09:86:28:47:3d:9b:13:1f:df:cd:af:93:16:
         50:88:2c:aa:a1:f5:0d:bb:68:3b:93:48:d9:9e:40:12:92:a4:
         29:8b:d5:0c:e2:81:0b:b3:0e:6e:a4:05:ea:36:f1:21:23:15:
         34:ba:24:be:01:d8:b9:68:0d:5a:7a:e2:c3:92:0d:34:46:49:
         37:7e:a8:8b:ed:37:e7:0e:83:e2:17:c7:45:5d:ef:50:88:13:
         31:be:e5:a7:89:0a:ae:f2:5a:04:2b:47:c3:c2:83:71:74:9a:
         62:27:74:ee:b5:83:08:b2:ce:a2:5e:62:9e:10:5b:80:c5:63:
         66:a5:18:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:38:21 2026 by rpki-client