Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
File:                     tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft (raw, json)
Hash identifier:          T140M8/d1Ym2DI+XDH7z6jYixee8mKeKIFhmWtl8BI0=
Subject key identifier:   7E:35:61:FD:B3:48:EB:3F:9E:DF:ED:AF:09:F0:41:62:FC:B2:BB:28
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Certificate issuer:       /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial:       019D992B8DDEE3CD7A1C021370CC439CFD52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
Manifest number:          0F8D
Signing time:             Fri 17 Apr 2026 02:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 02:01:01 +0000
Files and hashes:         1: 6_uqscAUqLl-U-FOdnB8b80ymVs.roa (hash: 6iIxj8hFU1rpgiG9WHmnrQdt6HoHVlv0NufbYcZmLKU=)
                          2: Asdq0CBEIsgp9XnIZOINz9u9Cp8.roa (hash: nOKPYxisoFhulj9H3B7lMkY5LfDFsGYXQ3OYtNKl888=)
                          3: I2T7UeDGLA8H6P-KL1eFGnyz1sw.roa (hash: v4p0Y6w9BB4bsfMbtUIZ8Y6YLTCCJcFeqfZJdPcFyGU=)
                          4: Rb8NbhTAxdW8Qozx0F0hMesjBeQ.roa (hash: vFhA2KjCPdOcJsVjA7uGx7jrzbvsOL97jtv5aYxWqgs=)
                          5: rFMfSzn-n7nZRas5UlWT_V3b0wE.roa (hash: BT3wbqOQUe0s9zLkAX65/Pmrb3QAkF3u9va25+8RZ8s=)
                          6: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl (hash: Oom3O8xeieYx0BL1r7BvmSrMhi/VA+c95EQR7YAyrFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:8d:de:e3:cd:7a:1c:02:13:70:cc:43:9c:fd:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
        Validity
            Not Before: Apr 17 02:01:01 2026 GMT
            Not After : Apr 18 02:01:01 2026 GMT
        Subject: CN=7e3561fdb348eb3f9edfedaf09f04162fcb2bb28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:9b:bb:86:93:03:00:2e:0b:14:44:b3:1f:
                    46:ce:7d:90:cc:19:0e:29:4a:10:87:bb:69:c8:6a:
                    50:30:a0:1a:1a:3d:3e:10:b1:af:2f:91:c4:b2:28:
                    16:ad:c4:82:c7:f4:db:2f:cb:ce:84:46:8d:5f:9e:
                    5b:d2:53:ba:ac:17:b1:b4:7d:91:5c:7e:17:ba:71:
                    9c:08:5a:a4:14:a0:8e:1d:e2:60:91:fb:a5:8a:92:
                    05:d2:6b:4b:4d:96:6d:96:5f:c3:e4:64:a4:27:66:
                    49:28:51:32:81:73:b5:b5:c8:31:d2:33:98:2f:ef:
                    d5:1d:00:61:4a:58:47:91:a4:52:4b:f5:04:2d:48:
                    ec:1b:d7:e8:63:e6:28:c3:0b:7b:c3:26:26:50:b6:
                    c1:7c:6c:c5:c3:09:93:9e:72:3c:ac:0e:ce:76:17:
                    65:6d:19:49:d4:21:d7:c3:87:86:7f:c1:5c:ef:ed:
                    76:c9:05:24:31:4d:d2:dc:7f:b4:cf:9a:47:34:25:
                    98:cc:13:1a:96:f1:28:6e:36:48:7b:ae:4a:b4:27:
                    79:a3:4b:04:95:ca:fb:7b:30:72:5c:64:ea:35:83:
                    16:aa:3b:fa:6b:99:6e:b5:61:77:1a:0c:06:cc:24:
                    1f:94:9b:63:1c:92:c4:da:7b:93:26:26:d7:c5:8f:
                    0b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:35:61:FD:B3:48:EB:3F:9E:DF:ED:AF:09:F0:41:62:FC:B2:BB:28
            X509v3 Authority Key Identifier:
                keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f2:26:a4:43:5d:ea:71:d9:a5:28:5a:5a:1d:64:73:98:d5:
         61:f8:0e:b5:d5:08:00:23:0e:7e:9a:52:e8:8a:5c:52:2e:5b:
         fd:40:82:f0:22:1c:70:e1:df:04:96:85:9a:50:95:29:b4:d6:
         3f:06:9c:a9:32:a3:64:22:b8:75:72:f5:5c:6b:21:b8:a3:ac:
         52:af:8a:63:bc:d5:ef:1a:95:fe:5d:e4:d6:96:77:b5:57:00:
         6d:59:28:76:e1:d7:6d:cb:5e:4b:b9:a7:02:e8:e8:83:02:2b:
         81:dd:03:6b:26:14:31:40:fb:e6:1a:5b:a7:52:52:8b:a8:3d:
         6f:5f:d1:88:6d:3f:ce:49:47:60:36:4b:5d:67:36:52:e6:e2:
         63:f3:a8:90:bb:08:bc:45:a0:9f:aa:28:4c:af:bd:6e:9e:37:
         af:29:dc:03:2b:cd:6e:54:2b:1e:07:20:bd:a4:e1:39:5d:80:
         e3:4d:0d:9a:58:6a:4c:ad:ce:82:1c:80:82:e6:cf:90:68:39:
         22:bc:f5:5a:37:3a:80:23:ad:bd:ef:12:c4:f8:b5:ef:d9:6a:
         49:6d:b1:e2:72:fc:d7:72:a1:ce:ad:02:43:53:6b:31:d4:45:
         5e:68:b2:59:c2:98:0d:76:fb:3a:ac:9b:24:d1:d0:bf:41:b5:
         f5:6b:69:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:39:47 2026 by rpki-client