Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
File:                     ruCNkzby5s0WXrcwKX_m0gyDw5o.mft (raw, json)
Hash identifier:          A2IRrtqpwlb5PEqhoOJD7QFlt3seJ2RVB1c5P/YoNIo=
Subject key identifier:   D6:10:36:59:A1:EB:E5:02:8D:40:83:78:12:E9:3C:26:04:F6:BB:13
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Certificate issuer:       /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial:       019D9BBE9BD44AD68BE19E99D0C46D12A558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
Manifest number:          160E
Signing time:             Fri 17 Apr 2026 14:00:53 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:53 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:53 +0000
Files and hashes:         1: 123WXGbRTZdeisXrE-k_3g3EMvk.roa (hash: PVrjq81b7ONxfTHO259I9HIBssHsthuK6wCJzCfRRBw=)
                          2: 3JLEaN47mFd4AJ1ulcTajHwX46Q.roa (hash: 7nuv0xJK6J/Wz9ZBABmkHA68zDZCu6LbMkw8k4JA0aY=)
                          3: 3m4ZcWe4AoRitpxIdoHTfvPCTz4.roa (hash: R1IDNKkyr2PRIrfMe44b/uoEQJhofAwIdcVDkSZ0J1s=)
                          4: ktGWBH_rz8CZASP_zJHcbXXlp7Y.roa (hash: WQj8sJ8bysuFkPbFG5oVPz6oUf8fVBbz+1mkOQXAzAY=)
                          5: qmwlU-LpszPGm_f_AiX4jfEipIU.roa (hash: eBcbl11HwyKBKgKCJIYPrcRxwRYlzqQyOytUqmTgqj8=)
                          6: ruCNkzby5s0WXrcwKX_m0gyDw5o.crl (hash: NT6/66Fi9ZKPHUoeDKN8wGY+nk0Og2FjdIZ/BgXm1Qc=)
                          7: wwateRuj040-ENpDYQ6qLA2XVl0.roa (hash: NH6PZI4atftudx1FEvFD8kdIjwc++XEY3pey7kw2zFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:9b:d4:4a:d6:8b:e1:9e:99:d0:c4:6d:12:a5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
        Validity
            Not Before: Apr 17 14:00:53 2026 GMT
            Not After : Apr 18 14:00:53 2026 GMT
        Subject: CN=d6103659a1ebe5028d40837812e93c2604f6bb13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fb:d1:e1:4a:e9:fb:ae:e0:f8:c4:18:c0:7d:
                    ca:20:ae:87:39:f6:21:01:72:bf:d4:d7:1b:db:f2:
                    95:18:43:32:07:8d:0d:88:4a:77:42:ec:61:13:d1:
                    4a:59:46:d8:2e:93:50:01:3d:24:f1:5d:f0:83:27:
                    9c:56:c3:5a:cb:9b:48:16:bc:f5:74:f5:58:3b:c5:
                    9d:84:52:f5:1c:c9:76:e8:fb:04:f0:1a:49:12:ae:
                    ae:cc:01:4a:4b:fc:3a:12:f4:3d:20:78:c5:d5:85:
                    b0:1b:4b:94:f4:ad:53:66:ef:dd:8a:35:31:ac:55:
                    ac:9c:0b:18:90:3d:79:c0:69:0e:94:fd:3c:d2:32:
                    fe:f7:58:97:62:83:d5:b1:d8:6a:8e:e3:97:2e:bb:
                    e6:52:20:59:85:1c:9c:03:6e:79:fd:24:ca:90:ff:
                    0b:4f:8b:9c:40:bd:d5:c0:24:64:16:49:b3:e2:4a:
                    d0:67:82:0f:6d:26:d6:ce:8a:fb:33:6f:bd:78:a7:
                    b8:eb:22:23:a6:37:ac:ca:1e:b7:25:b9:a4:c4:eb:
                    69:96:98:fc:bc:11:f0:ac:73:67:c6:74:4b:da:53:
                    8c:43:4a:3d:d8:ed:1b:bc:d6:d7:2b:95:e9:17:e8:
                    b9:b2:af:1a:66:1d:5e:87:a4:52:cc:8c:40:ec:63:
                    7f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:10:36:59:A1:EB:E5:02:8D:40:83:78:12:E9:3C:26:04:F6:BB:13
            X509v3 Authority Key Identifier:
                keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:42:df:90:1b:f9:dd:4a:2e:35:68:d1:91:23:a7:59:40:ca:
         c7:e1:c8:57:f7:de:e1:ed:38:14:27:e8:47:3d:61:e9:94:92:
         89:1f:29:d9:1b:f2:dd:bc:41:48:47:c4:5f:aa:2d:71:98:8b:
         34:b9:23:e5:98:aa:d1:6f:71:bc:03:f2:34:ab:18:be:4c:c7:
         29:60:04:67:9a:b3:66:ec:6b:9a:9f:51:82:09:51:33:d5:88:
         8d:3b:f9:98:22:1d:51:c9:20:34:e0:79:38:60:ac:95:19:a2:
         6d:bf:98:5c:88:21:df:c1:50:98:8f:57:04:9f:ab:54:e8:63:
         1f:cf:a3:c6:d5:ca:34:5c:0e:7c:4c:81:f9:63:bf:50:2a:31:
         e2:5f:63:fa:c4:e2:6d:62:e4:2d:92:ec:ec:e6:04:9a:b7:2d:
         8f:cc:10:b9:c8:47:0b:e5:bb:28:f6:00:2b:8b:ad:72:3e:ba:
         ae:9a:bb:94:99:86:35:1f:7a:57:42:6d:a9:37:25:d7:2d:be:
         aa:9b:1c:87:58:f5:d4:e0:55:e0:43:15:d5:5c:a5:e9:76:5b:
         ed:53:af:bc:43:40:32:9e:e3:41:c5:22:dc:79:b4:34:f4:32:
         ba:ce:b4:4e:08:e5:7f:f7:0d:37:d0:e9:4f:5b:bd:5d:cb:0a:
         7d:05:93:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:35:54 2026 by rpki-client