Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
File:                     91sCopx2blsTs-sXapccEt3h1M4.mft (raw, json)
Hash identifier:          Sy04dynCV1nlPnMI3I9+IYWSWp4QyJYBawRaLXtRseE=
Subject key identifier:   00:24:74:28:C4:F5:47:48:CC:48:41:4D:01:0C:1F:D1:BA:A2:DD:E0
Authority key identifier: F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE
Certificate issuer:       /CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce
Certificate serial:       019DA4F92B71B56F47E9C7C61427854CFEEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
Manifest number:          144E
Signing time:             Sun 19 Apr 2026 09:01:26 +0000
Manifest this update:     Sun 19 Apr 2026 09:01:26 +0000
Manifest next update:     Mon 20 Apr 2026 09:01:26 +0000
Files and hashes:         1: 91sCopx2blsTs-sXapccEt3h1M4.crl (hash: RwsrO9pjjfZGdq+H8uTmV1da10lZTRFbiuD8h2d4APs=)
                          2: zzK4qCAtynNjDjZWUiRCQn5dpDk.roa (hash: E6+IdS0ezqI3UKO4kCUBOk2GF16tHu1sV21TlzMQxMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:f9:2b:71:b5:6f:47:e9:c7:c6:14:27:85:4c:fe:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce
        Validity
            Not Before: Apr 19 09:01:26 2026 GMT
            Not After : Apr 20 09:01:26 2026 GMT
        Subject: CN=00247428c4f54748cc48414d010c1fd1baa2dde0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3c:7a:d0:a1:3b:4b:a8:f8:c4:1b:a1:70:13:
                    dd:e0:8e:61:96:a5:4a:4b:8c:a4:f0:c7:6c:96:24:
                    80:6c:16:48:ed:0d:28:7f:e3:1d:47:c5:8e:51:7b:
                    00:38:34:dc:d7:f8:29:b8:ab:bc:1a:7c:e9:ae:fb:
                    ed:c2:6c:aa:54:e5:1e:79:3a:c7:48:8c:53:55:d6:
                    de:20:71:3e:ae:ea:d0:67:ba:c2:b7:71:a6:7d:95:
                    b0:52:02:fb:62:6c:f7:0c:a6:8e:0c:bf:d7:20:1b:
                    2b:3f:44:54:aa:f4:95:86:94:ba:a1:76:0a:59:17:
                    4e:6d:b5:db:26:57:07:50:57:16:f5:aa:5e:6b:6c:
                    94:d9:ee:c4:9c:20:c7:27:35:fb:ad:7c:47:89:6b:
                    72:e8:73:32:bd:a4:69:ab:64:9e:46:72:b1:57:a6:
                    e1:6d:79:e8:3f:93:a3:fa:93:8f:f2:d9:fa:5c:43:
                    cb:90:c8:5b:66:d2:78:e4:b7:7d:21:4a:d0:4d:7f:
                    de:ad:7b:5b:da:22:d0:f6:9a:77:8b:db:b5:81:d5:
                    56:48:19:65:15:55:09:b4:54:f1:73:7d:01:0b:9f:
                    70:a3:99:d3:ba:ce:d3:55:30:81:06:fc:1a:e4:c0:
                    62:a0:cd:c4:a0:1a:f1:ad:23:9f:b5:03:47:f3:8e:
                    84:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:24:74:28:C4:F5:47:48:CC:48:41:4D:01:0C:1F:D1:BA:A2:DD:E0
            X509v3 Authority Key Identifier:
                keyid:F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a9:1f:f1:34:64:89:49:bf:4d:86:76:16:ab:e1:ea:7d:0b:
         55:ff:f2:ed:77:ea:96:09:1e:b3:ed:60:af:c7:3a:9f:29:ba:
         23:99:69:6a:d6:1b:e0:c0:0a:7d:7f:1d:83:e3:71:48:d0:62:
         83:fd:1f:dc:2d:51:19:30:77:4f:d8:8e:36:18:54:84:b0:d8:
         32:82:fa:44:07:26:98:1d:70:7f:b2:04:e7:73:51:3a:c2:6f:
         bc:83:45:ee:45:9b:5d:6b:c8:10:85:3f:1b:dc:81:3e:ab:33:
         8b:b2:95:fc:6e:16:71:96:63:58:50:e3:04:c6:ba:ec:cf:4f:
         9a:ab:8a:d9:d7:b6:ef:26:52:a0:95:ba:7a:b4:58:fa:80:31:
         d9:d9:dd:5c:65:14:83:b2:e0:1b:a5:f9:3b:c0:96:d1:05:31:
         d0:42:a5:a8:b3:22:48:0e:74:2c:f2:ee:b2:8e:f9:d3:7d:a1:
         92:98:7b:62:f2:8c:e4:3f:c0:aa:45:82:c2:d3:21:9b:1e:3a:
         41:95:97:4f:46:e1:a0:09:82:aa:9d:6f:eb:de:64:02:ea:d0:
         a3:f3:b3:92:9a:0a:cc:c0:fb:5d:26:94:5a:75:03:8e:35:76:
         e3:04:f2:12:f8:10:c8:24:a1:1c:20:b6:b8:27:ae:07:75:63:
         b2:ca:d2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:51:29 2026 by rpki-client