Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
File:                     fQL6LFuiiSBF581Qpa39VNbbuMI.mft (raw, json)
Hash identifier:          IMnj/0NmeVsm9ybfrvPrvAU94wKggHkLuHKi447wI8I=
Subject key identifier:   EC:CB:70:1B:30:E9:B5:56:1F:36:99:6D:76:D0:8B:D8:0A:3D:0A:4A
Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
Certificate issuer:       /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Certificate serial:       019D98865DA09D97B71AE11E6FEA2279A40E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
Manifest number:          17A0
Signing time:             Thu 16 Apr 2026 23:00:35 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:35 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:35 +0000
Files and hashes:         1: 05QJdDPCq2Q_jznqerhgP5BoCxg.roa (hash: gU+YSQWmwa9r8UbcwqPCuU94QjYr5yYj3Kh8Xri7um4=)
                          2: 1nEI4ofN7-_O7YLfMqtxBcLAnwA.roa (hash: 3NhBeQVEE89mf7lTmcAscd7f117hY++nWIP6cov6PBQ=)
                          3: fQL6LFuiiSBF581Qpa39VNbbuMI.crl (hash: 3LKoyGYMe0fwX+2GQHM86+AH4FfFmrtyFtj5g7yB7c0=)
                          4: l4-d5SvMomjdFUDqgivEAjMb3Jc.roa (hash: 0ZRBDEnU53gKRwXc7PBdtexg08xkZTFwaLUEyX3bxXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:5d:a0:9d:97:b7:1a:e1:1e:6f:ea:22:79:a4:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
        Validity
            Not Before: Apr 16 23:00:35 2026 GMT
            Not After : Apr 17 23:00:35 2026 GMT
        Subject: CN=eccb701b30e9b5561f36996d76d08bd80a3d0a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b8:a8:2f:65:f7:d5:74:6b:69:1b:45:ce:72:
                    d2:46:da:60:d7:20:78:58:2d:48:da:91:00:73:dd:
                    ca:be:38:7b:1a:01:32:2c:7b:ee:2c:fd:fe:b6:17:
                    97:2c:e8:9f:90:38:0c:cc:2c:93:dc:e5:ad:7e:7c:
                    a7:76:2f:18:f8:23:d7:ad:46:f4:05:59:b3:3f:18:
                    94:5a:26:08:86:e3:2c:63:7c:05:c5:34:8e:13:d7:
                    fc:7d:9d:fc:70:25:cb:72:50:d0:25:6f:ed:3a:96:
                    81:70:36:bd:71:a0:7e:3f:1e:d3:85:88:3f:2b:de:
                    e5:ad:b9:0b:bf:e2:6c:19:df:70:e5:7d:ab:e5:31:
                    63:52:f5:bc:87:2f:05:a3:26:c2:27:97:c9:ec:f8:
                    6d:b7:d5:28:0b:d0:e8:50:43:9d:50:ba:ab:25:80:
                    7b:7a:1e:8d:9f:c7:f2:90:30:e9:9e:b1:e8:3f:d3:
                    cc:b5:be:92:ea:4b:01:56:72:80:02:cc:72:e8:71:
                    0e:ed:82:f5:45:53:71:25:32:5e:8b:57:d1:73:e8:
                    2b:15:de:70:f1:6a:25:ae:35:34:4c:03:47:2d:ad:
                    a9:b2:42:28:b3:09:b3:a0:0c:35:09:97:5a:c3:5f:
                    2d:0b:de:7b:23:f4:50:13:3c:53:b9:5f:e7:0f:f2:
                    24:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CB:70:1B:30:E9:B5:56:1F:36:99:6D:76:D0:8B:D8:0A:3D:0A:4A
            X509v3 Authority Key Identifier:
                keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a9:68:c4:fd:39:15:b2:45:d4:34:d2:47:d8:f4:e4:a5:62:
         07:50:de:39:0f:c5:49:84:ed:e8:a7:6f:5a:1e:44:39:85:18:
         fe:a3:58:c8:a3:62:73:ab:bd:87:7f:af:b5:f3:5c:c6:fe:6b:
         6b:c2:30:48:71:98:3c:30:46:c9:24:bb:c3:f4:99:e4:eb:44:
         ac:d1:19:fa:52:86:67:53:33:de:3e:aa:bc:49:43:8a:84:03:
         eb:b1:26:20:13:f7:2c:94:83:bc:01:b1:fa:04:54:b8:36:3f:
         d7:d9:d6:79:fe:00:1f:b7:7b:1e:8c:c3:f4:57:88:af:1a:0e:
         2a:9c:08:c2:33:4c:d5:b7:01:fd:c5:34:20:0f:4e:f9:01:aa:
         c4:33:2a:78:5c:a1:b8:ab:7a:92:86:45:fc:ad:5d:58:d8:f3:
         11:b5:bf:7d:5c:2c:1a:38:e3:3d:e5:fe:6e:ca:f8:a6:ff:30:
         77:04:1b:a6:11:1f:21:7c:d7:d6:92:7f:87:b4:f3:d7:74:f8:
         27:91:11:e4:9c:5a:b6:29:49:d3:50:6d:e8:20:2b:a4:14:48:
         e8:f9:38:e9:01:3d:59:f1:b4:1b:12:1b:d8:f6:91:8c:ff:ac:
         92:6b:15:b4:08:ba:19:3a:fe:e1:3f:48:ab:07:10:c7:02:51:
         5a:f3:d1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:30:24 2026 by rpki-client