Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
File:                     u4K408Gw94w6GfYWTrKCHiMM_k4.mft (raw, json)
Hash identifier:          WZworEtaYqD/jEG2kEM5fJc+tQBJxcWCPKS0GctjXkA=
Subject key identifier:   7E:F2:4A:A8:77:A4:EA:1F:42:C0:4A:62:BD:3C:8B:E9:D9:7F:A3:0B
Authority key identifier: BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
Certificate issuer:       /CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Certificate serial:       019D992B77798242D523F65CD6E06A0E7AF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
Manifest number:          12BB
Signing time:             Fri 17 Apr 2026 02:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:55 +0000
Files and hashes:         1: e7qW7ktzFbhQzttwga3E9zXgNCo.roa (hash: ROhx5VIRKogH2P7o1oUw2zoKl8d9a5YmW7HEMyeGDjI=)
                          2: u4K408Gw94w6GfYWTrKCHiMM_k4.crl (hash: E9lqAUmkjw9DCCeHCaSYOgfqXF+CEETcx3mm0iYKD9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:77:79:82:42:d5:23:f6:5c:d6:e0:6a:0e:7a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
        Validity
            Not Before: Apr 17 02:00:55 2026 GMT
            Not After : Apr 18 02:00:55 2026 GMT
        Subject: CN=7ef24aa877a4ea1f42c04a62bd3c8be9d97fa30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:9c:bc:6a:ad:34:fc:48:9a:14:54:c9:74:
                    d4:99:fe:63:27:44:7f:9d:3b:42:8f:64:04:a0:2a:
                    f5:32:52:07:85:d7:d7:0e:81:67:0d:c7:f7:a2:5d:
                    7e:ab:62:da:74:44:bf:9f:a8:30:04:3c:8e:93:10:
                    04:aa:2a:7e:c2:d5:b9:21:31:0a:2e:36:2b:7b:2d:
                    7c:76:fd:25:f6:d4:79:ea:29:96:f6:bc:22:10:ec:
                    ca:8c:6d:6f:9e:68:da:5c:9f:ea:12:00:7f:90:e0:
                    83:ca:fd:ff:65:6d:1c:58:2e:af:2b:b2:cd:8a:80:
                    0a:60:3d:34:64:26:f1:a9:1b:74:9e:49:44:6f:0a:
                    43:f8:50:b1:a1:1f:ed:78:fd:0f:aa:01:5f:bc:55:
                    97:00:0c:9a:c1:dd:73:b8:f9:3b:cc:06:4d:3c:38:
                    2a:85:e6:66:7f:41:f6:da:55:83:b3:03:f3:0e:c8:
                    ad:cb:1d:38:9e:dc:db:f9:71:10:f6:63:71:a7:f5:
                    04:95:6f:86:85:d0:2c:b7:eb:18:84:84:e0:cc:12:
                    1a:63:69:07:c7:a8:51:ee:3e:80:e9:c7:54:2e:41:
                    b4:43:16:ac:28:e4:11:65:b8:18:da:c2:4f:b2:62:
                    b3:40:dd:ad:74:c2:69:02:d5:d4:fb:ef:65:c8:8b:
                    8a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F2:4A:A8:77:A4:EA:1F:42:C0:4A:62:BD:3C:8B:E9:D9:7F:A3:0B
            X509v3 Authority Key Identifier:
                keyid:BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:6e:02:76:5f:33:99:80:94:dc:4d:48:3d:d8:9f:0f:f8:45:
         15:c3:9a:f1:4b:4d:aa:47:9c:c9:c4:ad:40:87:53:69:64:ff:
         0b:65:a8:48:08:42:a2:80:43:42:35:26:7c:c1:e2:ac:14:a4:
         18:c0:b9:8c:85:8b:b6:88:62:8f:fe:54:9b:b5:b6:9c:f8:1a:
         bc:2e:c6:bb:ca:fc:81:20:3d:ec:42:13:44:4f:bf:59:3a:81:
         2a:06:ff:04:7e:15:22:56:8a:fb:a2:61:cb:30:95:b0:3e:38:
         13:61:e3:9c:35:5f:dd:d9:c7:8c:d3:fc:5e:7e:bd:79:d9:44:
         c7:55:04:4d:30:e8:b8:52:60:9e:d3:ec:38:e9:61:fc:ac:33:
         4d:1c:06:44:d3:b5:ae:0e:95:b4:cf:1d:f9:b5:45:3a:73:a5:
         26:75:58:3b:ed:7d:77:66:02:15:78:74:71:d1:20:81:01:a5:
         b2:97:42:13:16:f4:0a:fb:6e:7b:94:09:b1:4c:fc:08:a0:bf:
         5a:de:eb:66:b1:a9:9e:62:51:a6:d8:b5:04:f6:d9:01:aa:2e:
         d3:a7:b1:71:c0:6b:0a:7d:e7:ab:0e:91:16:f2:c6:12:87:09:
         5e:00:4d:31:69:cb:73:4e:d1:e9:7a:03:62:a7:ec:49:af:ec:
         36:e3:a1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:07:20 2026 by rpki-client