Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft
File:                     1-RZH5UfEr05b3GWeTBT5H_nOigU.mft (raw, json)
Hash identifier:          etJWcivJyFTKSM7bm0X8cSncDij1lrhdHNTMem7Q/I8=
Subject key identifier:   FD:E4:47:AF:73:71:07:3B:EB:68:C9:8F:AF:84:9B:40:E8:3F:E4:95
Authority key identifier: F9:16:47:E5:47:C4:AF:4E:5B:DC:65:9E:4C:14:F9:1F:F9:CE:8A:05
Certificate issuer:       /CN=f91647e547c4af4e5bdc659e4c14f91ff9ce8a05
Certificate serial:       019D9EC03EF356017C013040AE1A478C0B33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RZH5UfEr05b3GWeTBT5H_nOigU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft
Manifest number:          020A
Signing time:             Sat 18 Apr 2026 04:01:32 +0000
Manifest this update:     Sat 18 Apr 2026 04:01:32 +0000
Manifest next update:     Sun 19 Apr 2026 04:01:32 +0000
Files and hashes:         1: 1-RZH5UfEr05b3GWeTBT5H_nOigU.crl (hash: Mxo0+C4G7MraPR/yDfQecD0xYB/8SDb3LGI8QvhxfFA=)
                          2: ZSSuDxoCE3_eFwdfTUSWnRDPsE8.roa (hash: PPIOgp4NjFXsYuOWxQoSBUarq2WQUEJtAkW510E33lI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RZH5UfEr05b3GWeTBT5H_nOigU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9e:c0:3e:f3:56:01:7c:01:30:40:ae:1a:47:8c:0b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f91647e547c4af4e5bdc659e4c14f91ff9ce8a05
        Validity
            Not Before: Apr 18 04:01:32 2026 GMT
            Not After : Apr 19 04:01:32 2026 GMT
        Subject: CN=fde447af7371073beb68c98faf849b40e83fe495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:15:23:f0:f8:f8:9d:de:6a:05:97:e9:a1:c5:
                    dd:29:e4:78:4e:bb:cf:c3:b9:10:14:08:5b:86:32:
                    b2:c9:9f:01:5f:2e:c6:b2:38:bc:ca:65:f8:ee:0d:
                    31:4f:4b:bd:4c:95:b4:eb:35:eb:64:8e:9b:ed:3a:
                    23:d8:93:27:69:77:2b:56:6e:52:04:1a:0d:b0:ef:
                    ea:5e:f7:e0:33:da:f8:99:b2:d2:16:12:c1:90:c3:
                    9c:7c:01:3b:d0:c3:dd:b4:0d:7d:fe:c0:32:47:f6:
                    d7:9a:57:27:bc:b3:52:f5:15:18:57:3c:50:7e:1f:
                    f5:a6:b0:d2:11:1e:c8:a6:90:58:07:ef:e0:99:6b:
                    bf:fc:58:16:b3:5b:55:3a:1e:a0:b7:2e:25:25:b7:
                    29:86:5a:36:6e:19:11:38:8a:c3:d8:28:05:da:5c:
                    05:67:0a:83:b0:c1:7f:7a:bc:d2:89:ce:47:1f:5a:
                    54:ab:02:cb:38:a9:0d:ae:4a:f6:a2:f6:d0:86:36:
                    21:bb:6d:0d:36:25:06:76:ab:e7:ca:1a:d9:4a:ea:
                    13:04:03:88:30:00:52:1f:7a:15:51:36:e6:95:6a:
                    8f:47:b5:5d:79:39:43:f3:c5:1d:85:89:29:8d:19:
                    86:d0:a3:77:87:2f:41:c4:41:47:a6:95:d1:de:31:
                    e5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E4:47:AF:73:71:07:3B:EB:68:C9:8F:AF:84:9B:40:E8:3F:E4:95
            X509v3 Authority Key Identifier:
                keyid:F9:16:47:E5:47:C4:AF:4E:5B:DC:65:9E:4C:14:F9:1F:F9:CE:8A:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RZH5UfEr05b3GWeTBT5H_nOigU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f9:f6:68:a4:8c:49:7f:35:e6:d5:9d:a8:46:4a:db:6a:99:
         77:88:22:04:a9:72:38:19:c5:b2:bf:75:a7:c7:5f:bc:6f:2c:
         56:9f:b9:a1:2e:1d:41:28:95:06:55:e9:1d:3a:50:e7:bd:52:
         f4:7f:92:5f:28:41:9a:55:3f:f4:7e:c2:ab:0a:cd:e3:ce:bd:
         15:ac:fa:3a:5a:4d:1e:6d:09:e2:c1:a3:bb:1c:20:1b:b1:8e:
         8e:aa:26:db:ed:d1:5d:8d:6a:76:85:79:cf:2d:f7:f5:92:19:
         b8:71:75:b2:67:28:54:e9:16:01:cd:b3:20:a0:2b:4a:9d:6d:
         e3:7d:79:19:66:67:e3:20:1d:69:d2:b4:9f:04:fd:f7:de:00:
         c8:22:4b:4c:d9:32:ac:3f:4b:72:17:a0:ae:3f:6a:e2:eb:7b:
         d1:1c:85:b1:19:5d:83:98:a3:1f:a9:85:3e:31:98:84:68:db:
         be:e2:86:d0:43:b9:f5:da:81:6c:87:ce:8a:0f:44:e2:8d:92:
         03:96:b0:2d:5b:53:54:12:ea:19:9b:70:e6:e8:0c:07:e6:83:
         15:89:9c:34:5f:da:c2:12:86:5a:0b:66:80:65:2b:00:f2:fe:
         9b:9f:d0:48:4c:28:6e:a8:20:9d:7f:fd:2c:35:d9:f3:aa:88:
         48:32:2b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:27:24 2026 by rpki-client