Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
File:                     sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft (raw, json)
Hash identifier:          GxfMQ3/ax7+RImaZ3rFFbsef1nTO/h5NXol8hVC0rCk=
Subject key identifier:   2E:34:78:56:7D:8A:88:86:2F:6B:3F:28:CF:D9:81:35:49:17:05:BF
Authority key identifier: B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C
Certificate issuer:       /CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
Certificate serial:       019DA4C151AF3C75925A8DE6A438B7711D28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
Manifest number:          0D44
Signing time:             Sun 19 Apr 2026 08:00:25 +0000
Manifest this update:     Sun 19 Apr 2026 08:00:25 +0000
Manifest next update:     Mon 20 Apr 2026 08:00:25 +0000
Files and hashes:         1: q0Y1p5XaMB9ViOtAFAUBAb62WEo.roa (hash: Y0brd6EFMahPzlPl3xKPC6MzSQAtYq85BSXJQ3hFrzY=)
                          2: sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl (hash: tzNLdTDGnNy+giEiwB5SSt035lAgQZiZqe+DZEXVLNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:c1:51:af:3c:75:92:5a:8d:e6:a4:38:b7:71:1d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
        Validity
            Not Before: Apr 19 08:00:25 2026 GMT
            Not After : Apr 20 08:00:25 2026 GMT
        Subject: CN=2e3478567d8a88862f6b3f28cfd98135491705bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:34:f7:42:70:17:1a:fe:f4:c6:1f:bd:ef:60:
                    62:e5:65:1e:a9:20:1c:aa:d4:f5:11:7b:a8:d8:96:
                    dd:ec:5e:28:73:5c:a4:73:75:54:3c:10:ec:3e:e5:
                    4c:1c:d6:cd:28:18:2e:2a:69:d9:21:fc:25:5c:72:
                    ed:1b:94:a8:92:4a:6a:9f:c1:9e:a4:60:48:e1:2c:
                    7d:06:c6:9b:94:8c:70:d2:eb:02:52:56:ff:b4:25:
                    9f:f8:28:a7:1a:b7:c1:fa:fd:4b:84:a6:e4:2b:63:
                    f1:5d:2c:03:a1:c0:84:d5:ef:0c:e0:0b:bd:f7:20:
                    fb:97:e5:21:5f:3e:48:ba:03:d3:e1:53:d1:15:d5:
                    69:2d:1c:45:e2:31:33:5f:f2:19:39:c6:ba:bc:2c:
                    31:70:d0:7b:81:9b:c2:1e:c6:cd:62:ad:7b:96:28:
                    1d:1f:af:ff:b4:98:10:d3:22:44:42:6a:aa:eb:22:
                    31:92:76:39:b4:be:3f:f9:25:28:31:a1:57:e0:19:
                    fc:7d:12:29:66:f5:85:aa:3c:a3:d0:09:03:e4:97:
                    a1:ba:12:2f:32:2e:e9:b7:03:56:34:d3:a4:82:35:
                    9c:a3:4d:ac:2e:f9:52:d9:fe:44:05:71:87:94:b5:
                    7e:3e:88:d1:18:cc:ca:d4:b9:2a:b4:c5:bb:1f:50:
                    54:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:34:78:56:7D:8A:88:86:2F:6B:3F:28:CF:D9:81:35:49:17:05:BF
            X509v3 Authority Key Identifier:
                keyid:B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:61:63:d0:37:8c:0e:ad:c3:28:ae:0c:c9:94:c5:9a:e4:a2:
         d3:3c:4d:a9:09:44:3f:54:2b:61:82:8e:7a:b0:a2:8e:fa:61:
         ec:0b:7c:07:f5:f5:ca:6d:39:43:b0:63:2f:36:84:e8:dc:84:
         01:58:79:0e:04:50:f5:f8:54:89:81:8c:4f:e6:c3:3c:82:16:
         45:98:0f:04:cf:dd:37:67:07:06:41:11:6b:2a:95:27:c9:71:
         0c:2a:d8:11:17:dc:d8:91:3b:3f:34:d3:77:cf:2a:74:d1:e2:
         dc:f3:37:75:27:72:d4:69:97:60:72:ab:38:18:4b:f7:8e:a2:
         e1:b7:ef:8f:a7:2a:c2:06:a1:f1:6c:d7:dd:03:07:06:de:0c:
         0a:97:89:70:bb:d9:0b:2f:63:11:9b:b0:a9:ca:8f:2a:bc:a2:
         cd:4b:f9:8c:a0:f2:a7:e4:3d:55:d7:7a:c6:8b:0c:c5:db:b9:
         f8:d8:27:eb:98:bf:e2:4b:77:84:21:68:5b:22:19:39:26:4d:
         dd:5b:d1:37:a3:1e:9a:a1:72:b5:39:d4:22:b6:f1:83:8c:2f:
         22:36:8a:7d:9b:07:84:c8:37:7b:8b:d8:46:e1:8d:ca:84:67:
         f4:f9:02:53:84:8f:37:20:51:86:47:24:42:30:01:51:cd:c3:
         14:f2:09:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:18 2026 by rpki-client