Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
File:                     0jxZJVkZvdmrA73hxceIBixLmfM.mft (raw, json)
Hash identifier:          ceRnu10yv+UkW9ERl/FQtHAItUWL2TUlwXrWz3xo0fc=
Subject key identifier:   07:E3:B4:56:5F:0B:A8:9E:A8:06:E3:AE:A2:3F:28:C7:3C:74:07:5C
Authority key identifier: D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3
Certificate issuer:       /CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
Certificate serial:       019D99620E1BF9F4680374C39EE6E3337BDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
Manifest number:          09F4
Signing time:             Fri 17 Apr 2026 03:00:33 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:33 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:33 +0000
Files and hashes:         1: 0jxZJVkZvdmrA73hxceIBixLmfM.crl (hash: rzPKY7Fngxb01mTBw8q/U4uBdiEC1zkPdBuQZ7OyjYE=)
                          2: K9V0pBJMxjQPv91xTP0Kh2UeFvc.roa (hash: BFDPDbmJPLOCYexzkcBoZllev8YkC0o5ma6JusF+wZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:0e:1b:f9:f4:68:03:74:c3:9e:e6:e3:33:7b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
        Validity
            Not Before: Apr 17 03:00:33 2026 GMT
            Not After : Apr 18 03:00:33 2026 GMT
        Subject: CN=07e3b4565f0ba89ea806e3aea23f28c73c74075c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:88:df:9f:c4:a6:e2:9a:19:eb:17:fd:f5:a0:
                    0f:06:e4:a0:24:5f:d9:18:1a:31:4c:1d:c1:ee:4b:
                    af:65:e7:aa:5d:a3:de:f1:1d:03:ef:96:4f:89:1f:
                    2a:d0:6a:8d:54:84:9d:07:97:a0:00:d5:d0:21:eb:
                    2e:5e:58:53:fb:69:30:4b:09:19:84:35:14:9f:c3:
                    5b:f2:20:30:27:33:3f:39:e2:d9:dc:81:e8:85:14:
                    43:5c:60:99:14:2d:4e:48:5b:31:19:69:23:4b:da:
                    fb:27:d5:60:11:2d:84:3c:c6:be:ab:5a:e1:8f:03:
                    8e:a1:1a:ab:f6:67:52:67:6d:66:34:38:6c:e3:c3:
                    a0:d1:27:3c:1a:0e:d4:f7:56:88:5c:d9:d6:2f:88:
                    50:91:f5:e6:50:17:79:a0:e1:6a:af:1e:aa:ce:ea:
                    3f:50:3c:66:9a:32:de:ca:1c:7f:8d:07:1e:82:68:
                    81:a7:b7:ef:dd:cc:57:ed:30:50:5a:b3:4a:16:a5:
                    42:02:c4:81:31:17:c8:9b:db:72:c8:a4:5d:c3:79:
                    a8:23:5c:35:c9:95:f9:c4:49:c2:bf:c8:dd:96:71:
                    16:07:b1:80:9f:7c:fe:6f:75:3c:f8:04:0e:87:cf:
                    53:f7:e6:5c:61:89:a8:2d:5a:b5:30:7c:bf:a7:17:
                    eb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E3:B4:56:5F:0B:A8:9E:A8:06:E3:AE:A2:3F:28:C7:3C:74:07:5C
            X509v3 Authority Key Identifier:
                keyid:D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:b0:32:33:e5:b5:df:81:28:98:47:a2:be:e8:ec:0c:19:d5:
         96:1a:df:ef:fa:15:79:16:79:74:59:45:1b:61:7a:87:bb:32:
         13:17:e3:63:a8:fc:c5:74:31:46:0d:64:a5:cb:b4:10:84:d5:
         6f:e5:9f:cd:e1:12:2c:61:cd:5c:bc:ff:a5:c0:ab:12:37:a9:
         f6:34:7c:e6:87:00:2e:8f:8c:80:12:30:72:22:0b:ed:f8:74:
         6c:70:5c:75:9b:22:b0:f9:fb:d5:60:c0:27:de:80:be:9a:b4:
         9a:ca:b2:9e:42:ab:43:c6:a6:e3:c3:bf:13:15:81:a0:cf:04:
         5e:25:9c:74:88:45:ef:25:60:cc:47:2b:a1:3d:21:d4:d5:6f:
         4e:6f:10:8e:b6:eb:96:ee:06:5a:2f:64:4a:8c:20:17:5e:6c:
         95:b2:bd:1a:76:4f:06:94:08:39:92:80:75:39:06:db:a7:59:
         0f:76:4c:3a:16:43:bf:16:15:41:a1:e5:93:86:90:66:12:34:
         9e:00:08:83:c7:a6:d7:ba:ef:ac:8f:ae:f7:36:0b:0c:5b:4b:
         f5:89:9e:cd:15:22:c2:6e:bc:46:69:4d:ba:25:1b:c6:9e:9f:
         23:86:06:88:40:72:d9:58:1b:01:50:a3:db:69:9f:c5:5e:1c:
         ce:fe:2c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:24:59 2026 by rpki-client