Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
File:                     0GLPgHpWt3Gl9CzBia8tYx61quw.mft (raw, json)
Hash identifier:          JwqjUx3t7ouTu2GS0I/Jjn8ii3z7ZaaKdoX6s38c6iE=
Subject key identifier:   2C:CE:99:BA:49:0D:03:83:37:CD:85:C2:A7:A9:83:BD:53:64:76:A9
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Certificate issuer:       /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial:       019D9D765C7FF6E1E857429FFAA2F7365749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
Manifest number:          0494
Signing time:             Fri 17 Apr 2026 22:01:13 +0000
Manifest this update:     Fri 17 Apr 2026 22:01:13 +0000
Manifest next update:     Sat 18 Apr 2026 22:01:13 +0000
Files and hashes:         1: 0GLPgHpWt3Gl9CzBia8tYx61quw.crl (hash: BJZk0teH8c1DzR0AsTGOOK3AecUVm07+ddmW6COCyK4=)
                          2: FwyHYSFHDsnHe13-teMRd2Fwsok.roa (hash: HzeLlPvVaerPbRc2Uu0sKiJSiZNPtG93MnAwRwanKNY=)
                          3: NrghsoBul7tbolTWF8ZamRT2aQc.roa (hash: hJwEiMp115u5I16JHTrfollMknUTcgmFLYKBs/fIj04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:76:5c:7f:f6:e1:e8:57:42:9f:fa:a2:f7:36:57:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
        Validity
            Not Before: Apr 17 22:01:13 2026 GMT
            Not After : Apr 18 22:01:13 2026 GMT
        Subject: CN=2cce99ba490d038337cd85c2a7a983bd536476a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:32:2f:e6:ab:b8:6b:f6:3d:9d:e0:24:56:7c:
                    f2:55:21:05:f8:0d:d4:d2:e5:9f:ac:0a:71:fb:2a:
                    59:88:e9:01:45:ce:c1:36:fa:f7:f6:30:be:3d:d9:
                    9e:68:26:42:40:95:ad:bc:ff:c0:26:e6:d5:92:96:
                    da:9d:d8:88:e7:59:ef:46:d7:09:dc:d0:35:39:3a:
                    ac:7c:c6:16:a1:33:0a:7a:d3:4c:ef:81:8a:1b:6b:
                    c5:cf:b2:ef:de:bf:cd:78:91:98:02:88:1c:60:ca:
                    3c:b4:40:4a:d6:be:55:5e:ca:ec:ae:8b:a3:0b:02:
                    d1:c7:d0:fc:86:f1:3f:8e:b5:00:16:94:3a:e4:2c:
                    1b:71:aa:f0:8c:ce:b8:7f:19:39:87:c2:30:36:20:
                    b3:6a:72:c0:71:48:63:10:1c:8a:92:1b:ed:dc:a5:
                    b8:1a:c9:c5:9c:e7:d3:24:44:bf:a2:4b:13:e1:b5:
                    ca:b0:a2:3d:92:c1:20:84:26:d2:40:49:a8:0b:52:
                    51:e3:71:56:c1:fd:67:10:98:aa:d1:d7:67:08:5c:
                    91:eb:e8:fa:f8:57:b2:b4:d7:a6:9f:ab:d2:f6:34:
                    bd:14:11:92:63:ec:a9:34:9a:4e:33:23:72:8a:6f:
                    a1:34:12:99:63:c8:64:72:8e:98:fc:5b:50:a4:0e:
                    89:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CE:99:BA:49:0D:03:83:37:CD:85:C2:A7:A9:83:BD:53:64:76:A9
            X509v3 Authority Key Identifier:
                keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9b:40:05:87:e4:c8:c8:69:2a:35:1d:65:4b:3f:7d:77:af:
         e7:bb:f8:fb:8a:6c:d2:37:04:39:10:5c:d7:9a:16:b9:0a:18:
         3a:b8:ff:fc:a8:a0:20:12:32:fa:c6:2f:68:19:96:e0:12:b9:
         59:42:19:0a:cb:0b:26:9a:36:b6:3d:a6:ee:8c:1a:68:43:80:
         11:ff:3a:e8:0a:cc:85:74:df:55:87:0a:ad:76:15:52:06:99:
         13:ae:eb:26:4b:dc:c4:8b:43:7b:df:6b:e6:08:1f:81:7a:03:
         64:7f:3b:a0:b7:ff:bf:72:ed:7a:28:94:c7:5c:cd:67:9f:8c:
         0a:b5:a0:32:26:2c:93:34:4c:e3:bf:7d:09:ad:7f:19:1d:f8:
         4d:02:ae:f2:0f:e5:bd:f8:c3:55:af:b4:6c:cf:02:1e:9e:d0:
         7a:1e:30:66:9a:3a:a5:cd:6b:ba:79:5c:a1:26:71:d9:70:d2:
         7d:ee:92:de:34:ee:71:a3:b3:2a:5c:1b:25:59:bc:3a:83:a6:
         cd:b0:e8:de:4d:99:43:a6:72:c9:2c:13:e1:28:97:68:41:d1:
         fa:d8:07:af:57:3a:2b:73:2e:00:fc:d1:25:5e:04:87:c5:fa:
         5a:92:91:bd:7f:4f:0d:ab:16:7a:af:4b:c2:e2:df:0d:51:62:
         5f:70:27:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:00:50 2026 by rpki-client