Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
File:                     BrFkGJ99th6LYf3a5WIqCxNPXBY.mft (raw, json)
Hash identifier:          B+HcDwHvoB0OZis73T7url1RjS++jjm8uBgAATbAlhU=
Subject key identifier:   FB:54:15:FA:EE:A4:E7:E4:06:80:7B:BA:AD:C6:13:4B:80:2D:0F:E7
Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
Certificate issuer:       /CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Certificate serial:       019D98F46A053F1DE5AC80773C1AB78CD9BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
Manifest number:          09A5
Signing time:             Fri 17 Apr 2026 01:00:47 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:47 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:47 +0000
Files and hashes:         1: BrFkGJ99th6LYf3a5WIqCxNPXBY.crl (hash: DD2RE75Thi9+QqUO4yI01mztUzuOQqv8pWL5B/GUz6M=)
                          2: xLtMHLRVofBlv_rz48mjyhzxYcU.roa (hash: zhHhuq3ChHSPhA7wiwVbd31QtxXigerSvof7E12nmVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:6a:05:3f:1d:e5:ac:80:77:3c:1a:b7:8c:d9:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16
        Validity
            Not Before: Apr 17 01:00:47 2026 GMT
            Not After : Apr 18 01:00:47 2026 GMT
        Subject: CN=fb5415faeea4e7e406807bbaadc6134b802d0fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3c:ad:ed:46:bf:45:44:e3:19:a3:ea:a2:5f:
                    87:9e:7f:eb:18:ed:6b:7a:86:b3:82:b5:bd:85:9e:
                    6f:f4:c0:5d:9e:4b:2c:1e:54:10:4e:57:18:7d:75:
                    d7:dc:32:72:e4:22:05:93:e8:40:45:26:15:4e:d2:
                    6c:b7:19:25:05:1d:8a:48:a0:d7:07:14:34:47:f1:
                    94:c5:bb:84:f1:c2:bc:a4:59:3b:36:0a:69:94:d1:
                    02:9a:38:79:6f:fc:98:24:75:f2:0e:bf:89:d5:43:
                    f9:01:4b:4c:9d:07:98:9a:a5:f9:d2:61:9d:41:96:
                    ed:e9:c1:8e:a4:38:5d:ae:72:a6:ac:47:68:80:d0:
                    ab:4b:24:f9:45:0c:19:c4:df:c9:5f:b0:c6:08:2e:
                    50:54:12:a9:48:34:e0:ac:7a:b5:95:c1:64:aa:94:
                    ed:6b:68:bb:4a:3a:40:30:f4:86:88:b8:9c:56:41:
                    3c:b3:02:30:a2:8b:ff:af:c9:3e:4e:42:6e:09:77:
                    5c:65:9d:48:fa:3c:9b:4c:d6:b4:23:19:87:c1:fb:
                    1f:2b:72:7a:44:75:12:3c:6b:4a:ca:41:49:0a:36:
                    ea:99:b6:ee:ca:b2:53:3c:3a:e9:ad:63:bc:4f:00:
                    3b:3b:4a:a2:d6:8a:88:89:b3:d7:4a:f6:bc:75:95:
                    21:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:54:15:FA:EE:A4:E7:E4:06:80:7B:BA:AD:C6:13:4B:80:2D:0F:E7
            X509v3 Authority Key Identifier:
                keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:6b:62:95:3f:58:e0:55:8d:63:8c:d8:f5:b6:90:b5:32:9c:
         4b:7d:a0:bd:c5:b5:19:cf:d1:ae:42:55:d4:75:f1:69:26:e1:
         fa:12:6f:9d:16:3d:85:a8:2a:53:cc:2e:43:e7:f8:7c:04:ce:
         60:35:61:cb:8e:69:68:0c:e3:bd:18:d6:08:ff:b6:84:e3:69:
         38:b6:1c:54:7e:b6:c1:53:e5:88:d5:a8:27:8f:14:0f:91:0c:
         cd:f8:cd:7b:ed:d3:97:97:ab:df:46:f0:c7:67:86:16:fa:33:
         ca:d6:30:40:62:dc:45:16:5c:b7:e7:af:04:9d:a1:32:4e:f4:
         f1:ae:e9:85:e4:7e:3a:d0:58:4f:61:88:b1:1b:f0:20:77:88:
         f3:fb:e1:1d:7c:a4:b8:78:7d:3d:f8:23:ea:e6:08:6a:67:04:
         6d:4e:43:d6:b4:f9:cd:c9:a4:65:fd:c8:6c:fe:ac:05:4f:24:
         23:ef:38:c5:52:d5:6f:69:81:33:60:be:c9:2f:07:e5:d1:6c:
         34:f1:01:e7:0a:19:5e:88:da:49:2d:ff:26:b3:27:8a:45:0a:
         49:55:a2:fc:7e:fd:f6:86:3b:dd:e2:72:a5:5c:d6:c6:16:90:
         9e:2e:28:b8:8a:d0:23:35:84:b0:4e:7f:5f:73:ae:18:70:6d:
         9b:e2:02:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:31 2026 by rpki-client