Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
File:                     c2fEkER_UEXAI2fbjSG04IdJ-nY.mft (raw, json)
Hash identifier:          i+jcHZMK72smUZ1gByy8QKYpl1AS5aBQkofZcV4CW1c=
Subject key identifier:   A5:8C:33:12:47:A1:63:5F:26:CE:40:9E:DD:DE:E6:69:92:62:E5:26
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Certificate issuer:       /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial:       019D9B87DA33F785DDBF6690D462F4220102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
Manifest number:          0ABC
Signing time:             Fri 17 Apr 2026 13:01:04 +0000
Manifest this update:     Fri 17 Apr 2026 13:01:04 +0000
Manifest next update:     Sat 18 Apr 2026 13:01:04 +0000
Files and hashes:         1: 4WS4fKXpNyEuxVS40X3lIN34tqc.roa (hash: YL9+Lx3OpU65I5snabdkjLNWRqNS9J0xl+AZwvIsmMk=)
                          2: c2fEkER_UEXAI2fbjSG04IdJ-nY.crl (hash: 04cTiMRP1Cv3imV17iN9kqXa3bI4U45iUkCa+SelqnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 13:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:da:33:f7:85:dd:bf:66:90:d4:62:f4:22:01:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
        Validity
            Not Before: Apr 17 13:01:04 2026 GMT
            Not After : Apr 18 13:01:04 2026 GMT
        Subject: CN=a58c331247a1635f26ce409edddee6699262e526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:21:34:8e:2b:a6:08:9c:b0:8d:11:e0:4a:cf:
                    03:5f:fe:47:74:ef:1b:37:9c:80:64:22:60:35:34:
                    ab:b0:66:a9:b0:76:7e:64:dd:18:d2:9d:4c:17:fa:
                    b1:78:f6:cb:18:cb:ae:9d:26:f7:0f:a0:1a:99:c6:
                    d6:1d:a1:ad:20:df:1a:83:ff:f7:79:c8:9b:6f:16:
                    eb:e7:0c:42:45:c2:31:0c:b1:1b:f8:0e:44:8e:17:
                    3c:3a:23:9e:33:51:80:da:76:bc:4a:e3:7b:a7:36:
                    a5:41:35:e4:8e:45:82:35:64:b2:17:09:27:56:1c:
                    7c:05:43:7d:28:b3:83:ba:1a:50:fe:4b:8e:de:ad:
                    5b:87:c9:e6:8f:f6:8c:80:d2:cd:3c:a9:b3:02:4a:
                    00:ce:b8:68:26:4a:0e:74:44:fd:13:63:7b:68:3f:
                    db:f2:81:6f:c6:29:4d:99:13:fa:b9:aa:9b:93:03:
                    74:e4:a6:29:24:56:49:99:26:41:64:28:2e:ff:00:
                    7c:b9:c1:30:a3:d1:7d:74:20:5b:07:8e:97:ca:8f:
                    ee:a4:d8:a3:33:7b:92:4e:de:b4:4b:1b:b5:ff:72:
                    9a:9c:a8:44:75:37:14:dd:6f:c5:c4:be:fa:de:98:
                    5e:92:e4:5b:22:fa:4f:cb:cc:65:77:61:b3:b3:ac:
                    87:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8C:33:12:47:A1:63:5F:26:CE:40:9E:DD:DE:E6:69:92:62:E5:26
            X509v3 Authority Key Identifier:
                keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:7d:43:a3:44:f0:b9:57:c6:9a:7a:19:17:80:da:27:12:06:
         6c:8a:6f:e4:ac:51:38:d9:bc:e2:b5:04:c7:5b:11:3f:d0:f0:
         c2:b7:0f:01:18:28:1e:97:e5:ba:43:e0:ab:b5:68:ad:a3:ed:
         51:4c:11:a0:17:b1:1a:b0:0d:d4:38:f9:cb:d7:8d:ad:47:d9:
         60:29:50:41:8f:a9:03:55:fa:47:50:e3:da:b6:ff:54:31:a4:
         6b:89:1f:00:f1:f4:51:0d:e6:97:38:0d:06:8b:6b:f7:bd:5a:
         30:aa:37:0f:89:cd:06:e5:39:70:6d:35:7b:75:aa:15:5a:0b:
         b5:df:10:7e:6a:9d:74:45:b5:b3:8e:aa:5e:4b:4a:29:62:74:
         0a:81:58:f4:5f:6a:40:26:5b:58:9b:fd:a9:f0:90:6f:60:77:
         ce:cf:74:d6:ba:84:7c:d1:44:7e:31:d3:c7:6b:a1:f6:20:7b:
         a4:09:02:71:4f:c8:d9:0b:a9:7f:f9:df:65:45:86:7f:52:df:
         43:d1:0c:94:e7:4e:52:86:bb:18:f5:1d:3e:b8:84:76:f9:c6:
         a5:fa:0a:6a:15:87:c4:1d:94:25:ce:87:8f:58:fe:c6:d6:50:
         61:76:cc:b0:4d:05:0c:3a:02:6a:e0:fe:70:21:e9:a3:45:fe:
         07:45:71:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:39:31 2026 by rpki-client