Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
File:                     3o44GHrnDLx77WlXWfDgMpn7swI.mft (raw, json)
Hash identifier:          0FaWmawz3yKJtlBz4cuecTIhEw1uU6542i4tCyqYwIU=
Subject key identifier:   40:2B:46:C1:9F:02:BA:97:18:0A:B6:1A:D5:46:93:6B:B0:05:1F:4E
Authority key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
Certificate issuer:       /CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Certificate serial:       019D992BBAAAD83475181C474C258F12BAB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
Manifest number:          054A
Signing time:             Fri 17 Apr 2026 02:01:13 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:13 +0000
Manifest next update:     Sat 18 Apr 2026 02:01:13 +0000
Files and hashes:         1: 3o44GHrnDLx77WlXWfDgMpn7swI.crl (hash: aCb0KnHXt9rLDy7K5NLFk38InALAvhyu/StP2VnU7dg=)
                          2: RPnqpd4QiTnwCz1MgHARgUiKRfA.roa (hash: EMQ9uAHdxhy6q4kC92RKeDGjFCm7FDg8EbfwYcj/lNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:ba:aa:d8:34:75:18:1c:47:4c:25:8f:12:ba:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8e38187ae70cbc7bed695759f0e03299fbb302
        Validity
            Not Before: Apr 17 02:01:13 2026 GMT
            Not After : Apr 18 02:01:13 2026 GMT
        Subject: CN=402b46c19f02ba97180ab61ad546936bb0051f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6f:9e:10:21:21:a3:c7:37:18:5a:b4:e0:4e:
                    68:40:c8:3c:01:ca:b1:c9:af:a0:9d:89:bb:b8:e6:
                    0e:db:fe:ba:b7:d2:fe:d1:e7:58:07:f0:e9:08:4e:
                    59:b0:05:0d:af:af:ec:e9:fc:bd:9d:ac:02:c9:a3:
                    2d:ed:6a:89:c5:ee:d6:89:73:8f:e0:7d:c3:ea:d4:
                    9a:df:50:5a:c3:38:ff:ec:11:3f:ef:de:df:e4:cb:
                    44:22:89:ec:48:2f:08:b9:8e:47:ae:6d:7c:bb:34:
                    16:8b:59:78:cf:f5:e4:18:61:b2:7d:0e:7c:8f:3b:
                    4a:7e:0a:9c:91:8e:49:9a:45:08:36:cb:d9:a2:d4:
                    f9:6e:2d:b0:f3:11:60:49:12:a4:cc:72:c2:5b:da:
                    95:ed:2a:17:05:59:bd:e7:de:67:1d:65:68:c2:76:
                    e7:45:9e:2a:8c:d4:68:47:8a:43:dc:17:df:43:d6:
                    34:cd:cd:7d:01:01:32:9a:05:4b:27:c6:0b:2c:0a:
                    22:2b:09:1d:6b:b1:be:9d:52:3c:22:e9:67:2e:01:
                    2f:bf:34:7c:69:42:f5:a5:12:83:6a:20:f5:a6:ba:
                    f3:4b:9e:26:8e:5e:39:69:98:83:24:44:b4:00:df:
                    13:18:45:3b:c6:0f:19:4f:00:80:8e:3e:85:d3:69:
                    dd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2B:46:C1:9F:02:BA:97:18:0A:B6:1A:D5:46:93:6B:B0:05:1F:4E
            X509v3 Authority Key Identifier:
                keyid:DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d4:9e:45:15:24:1d:f8:be:00:bc:13:13:4d:ca:7a:ed:f0:
         e7:b0:c9:c6:0a:fd:45:bc:25:0a:09:ac:e3:4a:fe:64:d1:8c:
         c1:c0:82:5e:40:f7:b0:e3:d5:5c:7d:98:81:d7:1d:3e:6d:ee:
         04:38:3d:91:c6:88:73:67:a0:5a:9d:5e:ab:77:87:f0:f7:b7:
         6d:a0:b3:5d:f9:6e:ba:4a:1f:c9:b9:7e:2a:9b:50:e8:46:59:
         66:96:c7:c7:d3:e3:2b:67:1f:db:e6:3d:f8:24:7b:95:dd:07:
         ea:83:de:2a:f4:73:93:f9:23:b5:18:55:72:6d:e9:99:35:15:
         c1:05:9f:df:84:c3:54:07:ee:3f:e6:84:0c:f4:4a:23:35:41:
         33:55:8f:9d:c4:45:11:d6:22:58:0f:b1:5c:3e:10:7a:3d:38:
         1d:35:43:aa:85:84:88:a3:0b:ae:7f:06:ef:07:82:0e:27:a1:
         70:6b:7c:a9:9a:e3:75:6d:f7:06:5e:b7:d5:94:e3:f1:6c:33:
         3c:59:11:95:df:f5:62:21:92:41:9c:b9:46:c1:ab:12:4e:ae:
         30:d9:94:26:ab:3c:d2:86:47:e5:42:2d:48:c0:20:5c:15:b7:
         20:82:5a:16:5e:b7:49:cd:db:4e:4e:34:9a:13:26:90:77:d3:
         db:7f:07:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:54:50 2026 by rpki-client