Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
File:                     sMmblRxqb2rcyGjYhalArfAFGhk.mft (raw, json)
Hash identifier:          1Fdv4RIYWOnxnDEzl/yTPPBxrWh1k117wrcd04DOt2g=
Subject key identifier:   B6:81:1C:34:03:1B:AF:71:CF:BD:C4:DF:5E:84:DA:FB:9A:8E:E9:86
Authority key identifier: B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
Certificate issuer:       /CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Certificate serial:       019D9998E4FFB26E36203FDC3F294E2981D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
Manifest number:          0F53
Signing time:             Fri 17 Apr 2026 04:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:27 +0000
Files and hashes:         1: CFu9oBncqnpNmNRX4mjTnLjrg88.roa (hash: B2878+aNIHIe1LVscKgla2xHXSTcQOkvuEd8azDazoE=)
                          2: sMmblRxqb2rcyGjYhalArfAFGhk.crl (hash: H3BZIHG3JepSec11Palj6DzFFM+B8KDjUd0T/0LIu1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:e4:ff:b2:6e:36:20:3f:dc:3f:29:4e:29:81:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
        Validity
            Not Before: Apr 17 04:00:27 2026 GMT
            Not After : Apr 18 04:00:27 2026 GMT
        Subject: CN=b6811c34031baf71cfbdc4df5e84dafb9a8ee986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1a:24:80:18:43:c1:d5:05:ab:10:c8:08:36:
                    35:73:cc:02:c7:3d:f6:15:34:c5:1c:84:82:4f:2c:
                    b2:41:d2:4f:b9:a6:10:f8:62:a7:9c:93:3d:98:cf:
                    78:bb:eb:9b:25:bb:38:fb:9a:cc:f7:03:ce:7b:20:
                    d1:4e:9b:6f:b9:cf:01:1c:04:71:ca:c0:20:21:8b:
                    0c:1f:4c:ca:4f:c8:89:29:2a:65:fc:e3:17:57:39:
                    95:1c:13:f1:e9:23:0e:a2:22:81:03:32:bd:0e:7d:
                    18:6b:12:c2:8f:1d:4a:ee:2e:82:b7:6b:e2:f1:37:
                    79:59:94:2a:84:dd:4c:1f:16:5d:f1:6e:fa:1e:39:
                    7b:ae:ee:3b:81:73:58:18:8e:a5:e8:8d:30:01:a1:
                    9a:ec:2e:38:40:89:38:77:80:b0:5d:66:a3:4b:ac:
                    55:f3:e1:da:98:bc:08:07:32:72:16:5c:84:c0:c7:
                    ba:84:71:4c:ed:cc:3b:f8:c6:de:cf:92:a3:2f:bc:
                    25:7d:5f:52:c1:5c:27:5b:db:23:9f:9a:f9:5b:6a:
                    cf:69:43:1f:0c:7f:4b:73:b7:0b:71:78:60:12:bc:
                    05:89:e0:1e:80:66:69:7e:f1:eb:e4:ee:4d:89:e2:
                    55:5c:33:79:98:a1:cf:ed:28:fa:56:4f:5b:54:84:
                    58:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:81:1C:34:03:1B:AF:71:CF:BD:C4:DF:5E:84:DA:FB:9A:8E:E9:86
            X509v3 Authority Key Identifier:
                keyid:B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:15:e3:d8:cb:99:15:c3:ca:78:79:6f:19:8b:a4:72:42:0b:
         74:16:5a:ec:23:5e:52:ac:91:ef:82:ea:d7:ec:40:12:68:d3:
         8e:73:c1:bb:aa:73:37:0e:58:fe:97:31:85:9d:5d:26:ba:3b:
         b4:bc:f6:ba:c4:18:3a:8e:eb:4f:87:b6:27:ce:37:d6:d3:0f:
         af:2c:8e:a4:3d:c2:c7:7b:2c:e5:3c:65:eb:64:0f:63:c0:ab:
         be:5e:67:90:99:de:ec:6a:ac:2b:ae:bb:d2:34:e4:63:22:45:
         c8:cc:6c:58:1d:04:73:8c:de:e5:5f:39:7c:02:63:7e:7f:fc:
         02:ee:8a:a2:e8:28:da:5e:7f:3d:da:e9:5b:ea:cc:c0:03:90:
         10:cb:8c:bb:ce:e0:42:6c:1d:d4:33:55:ae:20:c7:48:aa:81:
         b5:03:ff:73:ac:e5:29:19:3f:30:ee:d5:b0:81:cf:a7:b4:7d:
         e9:30:97:32:da:e5:eb:d4:fe:24:48:c0:be:83:4b:9c:47:1a:
         d5:e4:59:66:ad:27:90:cc:25:b9:95:2d:11:d3:1d:25:be:fe:
         b7:0e:f1:5b:bf:31:3a:0b:ac:a5:14:31:75:ee:df:0f:72:b5:
         5b:9c:54:78:6a:19:8f:c2:c9:3a:d5:21:be:91:4a:84:21:74:
         6e:46:09:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:40 2026 by rpki-client