Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
File:                     Z6TsOPL_adJQX39i6Uw715i1hVI.mft (raw, json)
Hash identifier:          5XdQwskXp7sXmEuuHcQeT8tiRqLlMbb/nZpPwSlmaKU=
Subject key identifier:   5A:F7:0F:56:B9:C2:6D:C9:73:3A:C2:77:64:13:67:77:8A:83:0E:B1
Authority key identifier: 67:A4:EC:38:F2:FF:69:D2:50:5F:7F:62:E9:4C:3B:D7:98:B5:85:52
Certificate issuer:       /CN=67a4ec38f2ff69d2505f7f62e94c3bd798b58552
Certificate serial:       019D99992F37C41136B556A29F191673577F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
Manifest number:          16E8
Signing time:             Fri 17 Apr 2026 04:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:46 +0000
Files and hashes:         1: 9GBWdjPw-BNZrNnli56ahbKMkEA.roa (hash: Oupb+aKsrMig1VIpCyGRplvadhLjMfLJm8H0dkmS7pE=)
                          2: Z6TsOPL_adJQX39i6Uw715i1hVI.crl (hash: DBVpK6jW6kwe0/t/tPpm6djZpz8gNKi9cCggXoSP7eY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:2f:37:c4:11:36:b5:56:a2:9f:19:16:73:57:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67a4ec38f2ff69d2505f7f62e94c3bd798b58552
        Validity
            Not Before: Apr 17 04:00:46 2026 GMT
            Not After : Apr 18 04:00:46 2026 GMT
        Subject: CN=5af70f56b9c26dc9733ac277641367778a830eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ea:10:1b:15:61:99:5f:7c:15:2a:1c:7f:2b:
                    5b:f5:85:24:a3:01:6e:68:c0:fc:fd:8c:1c:d9:e3:
                    c9:40:e7:e0:cf:5c:a8:94:3d:28:9e:e5:78:d1:ae:
                    69:ca:a2:d0:38:74:e2:9b:05:89:05:30:0d:ba:4b:
                    e5:65:54:51:d7:4d:e6:f4:92:30:e7:8d:ec:a5:79:
                    08:32:c9:4f:e3:b3:07:5e:8b:d8:db:17:64:5b:9f:
                    44:65:6e:e8:0e:2d:cc:3d:80:6e:ee:65:5b:06:ea:
                    2e:72:62:d6:66:7e:3c:b8:83:e6:6d:c3:4c:6e:d2:
                    60:3a:7e:c5:3f:bb:55:78:0b:22:18:11:b8:c9:6e:
                    00:56:da:40:2c:9f:4f:6e:29:e1:b2:e3:05:33:5a:
                    b3:30:7f:ad:b1:20:e4:09:f9:38:6c:74:c4:cb:b4:
                    03:02:87:09:3c:32:0e:24:a0:72:d6:79:86:a8:aa:
                    34:4a:02:15:ae:07:a0:72:76:1c:97:e8:40:4a:bd:
                    84:e2:05:bc:2e:06:9a:42:4c:96:b4:bd:e4:5f:2c:
                    6e:1d:64:23:b3:ce:f1:c0:a8:0a:8f:46:e0:5a:00:
                    49:dc:1d:56:57:54:ca:1c:84:3c:74:dd:26:34:da:
                    73:57:57:2b:16:d3:f6:7d:04:7b:72:ca:3a:4c:78:
                    ea:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F7:0F:56:B9:C2:6D:C9:73:3A:C2:77:64:13:67:77:8A:83:0E:B1
            X509v3 Authority Key Identifier:
                keyid:67:A4:EC:38:F2:FF:69:D2:50:5F:7F:62:E9:4C:3B:D7:98:B5:85:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:39:dc:8b:74:9f:cd:85:bf:68:5f:87:20:cf:82:31:98:ff:
         90:e2:ed:90:df:a4:18:11:a7:6e:d8:82:10:45:24:da:82:dd:
         f3:6c:0f:64:37:de:44:c6:8c:bf:4b:67:64:28:d2:a6:50:3d:
         5e:81:bf:f3:69:d4:d4:8b:da:d4:3b:49:48:07:34:d9:78:b1:
         50:54:39:ea:4a:41:36:3c:30:fb:33:62:41:56:3e:f0:b3:61:
         5c:6b:c9:bc:96:58:b7:13:f7:f2:07:ab:08:e3:eb:a8:d5:e9:
         fd:d2:db:57:7d:c7:81:c1:76:9e:99:5b:f2:06:a2:b4:5b:52:
         12:f0:4d:54:95:33:5c:ae:25:de:9b:a0:28:8c:36:08:52:05:
         33:17:2d:bc:f2:f8:7f:ee:b9:15:68:39:40:3d:02:43:4f:6c:
         ac:e7:35:a8:cc:52:a3:23:79:b5:d6:68:6b:7a:4d:ab:95:ea:
         fd:ba:37:37:a0:05:b7:f0:4b:07:4f:ab:5a:bc:ae:63:e8:53:
         db:f2:8e:42:53:67:50:c0:55:0f:ac:ac:93:3a:cf:22:b5:96:
         8a:c3:74:96:10:92:b0:00:bd:67:f4:e7:40:05:84:76:6c:9e:
         a4:1e:4b:c8:a2:7a:a4:28:57:73:53:3f:f6:27:90:6e:d6:19:
         53:dd:fe:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:37 2026 by rpki-client