Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
File:                     mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft (raw, json)
Hash identifier:          b2OKurujyFygZdgusSWsXPuSTOYq2rynnUU/qtS3Q/k=
Subject key identifier:   F9:B0:AD:5F:03:DF:8B:20:46:15:9F:84:D9:1F:97:C1:90:38:0B:E7
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Certificate issuer:       /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial:       019D99D0CFF4278B26A004F65CDCD51E98AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
Manifest number:          1621
Signing time:             Fri 17 Apr 2026 05:01:31 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:31 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:31 +0000
Files and hashes:         1: 0ZP1YlMOxuFGcwCLj4TKGjg8sfM.roa (hash: VhKxH0518mejo08ToVhYHPgDOHhInMaaDygZ1dTqm3Y=)
                          2: RQbysAt1GgspnWOfwyBwad4EPWw.roa (hash: vfkA0hp4PretiDOgOmfw6YA3bRwSiVq26snYswjOLco=)
                          3: TEEO5INFoFOS-MGXLrvKsA4z6og.roa (hash: T0NYFqzX6is45agO0ikp5meW9VU+vzUTgYc02wqqV0s=)
                          4: kNrttXxRkvGtSS-ZxC6SB63f7PI.roa (hash: ejrGju4Fa38mlMegmP+17sgwP0nRgaGrfvKHwJ3IgXI=)
                          5: mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl (hash: FbMR8DsY+Sqvv4Na98ugEMvTuxMDzrRKL/rkwzGTtdI=)
                          6: nMu4q2cW92pxZythIIHUZkqmvqo.roa (hash: 7YAsuza7OQtak6icttFz0ei42yjLP0nZELQwsfMtRCg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:cf:f4:27:8b:26:a0:04:f6:5c:dc:d5:1e:98:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
        Validity
            Not Before: Apr 17 05:01:31 2026 GMT
            Not After : Apr 18 05:01:31 2026 GMT
        Subject: CN=f9b0ad5f03df8b2046159f84d91f97c190380be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:c1:4a:52:d7:14:1a:b0:4d:1f:b4:37:85:
                    e8:00:2c:34:7c:62:d3:8d:ab:3a:03:ca:12:7b:54:
                    fd:f5:c8:c2:b3:94:5d:fb:54:46:02:eb:25:a1:04:
                    18:e1:af:82:ca:4a:56:d0:16:fd:ae:bf:83:c0:12:
                    9c:8b:f2:05:0d:8e:de:9a:6e:01:85:90:67:39:9d:
                    20:11:ba:b5:32:f0:2b:2e:49:72:88:19:79:ab:35:
                    54:b5:aa:6a:c3:4d:6f:b5:40:0c:a9:e7:2d:f0:30:
                    c8:c8:fc:30:10:10:14:65:83:dd:26:79:95:10:ee:
                    5f:1f:4c:23:d1:ee:17:29:44:50:fd:b2:78:08:cf:
                    3c:38:31:3c:ec:b2:c8:56:20:04:40:b3:d7:e5:8f:
                    ef:06:11:a1:9b:59:87:5a:6f:65:2f:39:9e:f4:fc:
                    dd:d2:e2:1f:9f:03:2f:d0:7b:6f:5e:33:9f:4a:af:
                    56:33:67:87:a0:be:f7:e3:dd:c3:e1:b1:1f:76:2f:
                    95:f9:15:5b:3b:11:df:4b:bc:f9:3d:2d:72:ac:02:
                    e4:db:cb:a4:62:78:86:cb:ea:84:c3:29:52:17:47:
                    d7:81:00:96:f2:85:7a:0e:f1:ad:0b:8c:84:09:3f:
                    db:a1:de:8d:e7:28:4c:11:02:b4:07:0d:cf:f3:e7:
                    bc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B0:AD:5F:03:DF:8B:20:46:15:9F:84:D9:1F:97:C1:90:38:0B:E7
            X509v3 Authority Key Identifier:
                keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:0f:f6:39:69:a3:58:e8:4a:b0:df:d0:a0:68:5d:8e:0f:83:
         c0:68:e0:db:a7:72:43:78:3a:31:0c:35:80:4b:03:2d:77:d7:
         98:f6:ed:e1:dc:98:fd:e6:76:a9:95:33:43:fa:27:49:18:9d:
         86:8f:4a:1c:08:06:66:74:7e:90:3d:ab:5e:16:f6:f4:37:89:
         cf:8f:87:38:a4:f9:0f:cc:7b:14:10:2a:78:36:ae:22:f4:ff:
         ec:d4:d0:b0:2e:e4:69:05:71:1e:eb:34:fb:fb:ef:15:63:53:
         ce:9f:d5:ba:3a:22:36:60:49:6c:9a:3c:d2:81:bf:f2:34:6b:
         5c:6d:e2:12:6b:13:42:1d:25:f3:31:ce:20:4b:bb:ab:2f:15:
         df:a2:ad:a0:e0:0c:bc:b8:21:fb:a6:a3:de:44:20:24:5f:68:
         2d:d9:e2:be:98:f8:3f:76:51:59:47:53:f2:ff:04:83:42:3f:
         4c:ac:b7:4f:40:06:1c:cd:cb:c9:84:38:5f:94:3c:48:87:ba:
         e0:da:2f:15:43:46:9a:0c:6a:59:27:fc:a7:9b:68:24:67:9e:
         69:d9:dd:d2:0a:f1:bb:2e:52:98:7a:40:ec:5f:90:c9:85:87:
         b3:d8:de:c1:07:27:6f:e5:77:4a:f2:a4:9f:c3:96:f7:b6:cc:
         1f:b4:dd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:02 2026 by rpki-client