Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
File:                     F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft (raw, json)
Hash identifier:          nc+FTbGn1PrlZpve4x+NWs5e7qpyVIWefSjZQaYAJZk=
Subject key identifier:   62:04:29:E6:25:4E:AF:2E:FC:94:32:73:38:4E:A8:6F:A6:89:B5:84
Authority key identifier: 17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
Certificate issuer:       /CN=17972d43835cd6a66e54e5a5856ce57de282d43a
Certificate serial:       019DA3AED44C57CB712E7D03935D57C34A0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
Manifest number:          0FC1
Signing time:             Sun 19 Apr 2026 03:00:36 +0000
Manifest this update:     Sun 19 Apr 2026 03:00:36 +0000
Manifest next update:     Mon 20 Apr 2026 03:00:36 +0000
Files and hashes:         1: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl (hash: JYl441e+MlQxpwpsdHfuD9q+es39lHidsjmDshNDyKs=)
                          2: zzFYra5xZw5Yy-fz5dClERnnWlg.roa (hash: Wpga3aZynT3QdMPkk/GpaE5YFxq1IKAu5eZho4xu1iU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:ae:d4:4c:57:cb:71:2e:7d:03:93:5d:57:c3:4a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17972d43835cd6a66e54e5a5856ce57de282d43a
        Validity
            Not Before: Apr 19 03:00:36 2026 GMT
            Not After : Apr 20 03:00:36 2026 GMT
        Subject: CN=620429e6254eaf2efc943273384ea86fa689b584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cf:40:97:a5:50:f6:f4:f1:22:c5:73:6a:65:
                    0c:7e:38:bf:81:61:1e:52:f5:af:01:1e:71:60:2d:
                    59:0b:36:70:8d:fb:06:45:91:a3:71:3d:1f:68:8e:
                    a3:eb:42:ba:da:4f:cc:26:2f:11:21:f5:1e:f5:7b:
                    8a:5b:af:c4:fc:14:e4:66:b8:f7:9b:e0:11:76:33:
                    bc:52:4d:26:db:92:9d:d4:59:16:71:03:c6:c0:ca:
                    7a:5b:22:73:4c:47:7c:9f:52:78:c5:f0:85:92:fa:
                    d2:68:d0:f2:3e:bb:74:bc:d2:6b:a9:d2:cc:eb:68:
                    01:02:4d:7d:f9:96:40:91:c1:24:9c:9c:19:73:e2:
                    e4:5e:87:a7:ec:a2:1b:6e:9e:4a:f4:af:b6:f6:99:
                    71:d9:dd:8a:30:d6:42:5d:69:00:1d:39:09:1f:9a:
                    14:d9:61:b7:78:99:d7:c3:d6:89:34:20:e0:b4:92:
                    67:25:44:c5:93:40:57:ea:38:cc:cf:0d:0d:4e:76:
                    6a:07:ed:32:4e:95:9b:02:56:97:d1:ee:68:47:17:
                    43:72:5d:82:6b:f1:88:75:14:d7:78:24:72:61:4f:
                    27:56:73:83:e7:bc:2f:bd:29:d0:7d:41:bf:22:ab:
                    05:19:67:ae:2b:94:3e:50:b1:e6:7f:c7:74:f8:94:
                    4a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:04:29:E6:25:4E:AF:2E:FC:94:32:73:38:4E:A8:6F:A6:89:B5:84
            X509v3 Authority Key Identifier:
                keyid:17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:84:04:cf:35:a7:fe:9f:3d:22:5d:0f:ac:30:6b:df:7e:e6:
         b9:3f:ee:1d:5f:af:b3:44:8c:85:e5:0e:9c:f6:9e:be:83:3f:
         2c:d2:7c:73:e8:6b:f7:e3:90:97:d1:dd:5e:b4:bb:aa:c6:59:
         27:13:9b:4f:5e:63:e8:9b:a2:67:28:34:92:66:1f:68:8f:79:
         08:e6:00:8e:48:28:5d:c4:19:94:c4:b2:87:15:ae:22:7a:58:
         a6:d0:62:88:81:05:94:f7:14:f2:8f:98:94:40:5b:bf:ca:9b:
         76:88:73:54:fd:21:05:34:ee:2c:32:88:e3:8e:5e:c2:75:15:
         79:04:95:e8:86:30:6d:e6:9c:93:b7:84:5c:bc:c1:1f:de:f7:
         37:ae:32:4a:5c:5d:07:80:95:9a:f1:90:c4:e9:5e:c2:ce:a0:
         0c:88:56:59:c3:90:bd:22:3c:15:e7:bc:b7:5f:6d:a5:8d:53:
         62:77:49:f7:81:00:03:bb:3c:49:49:0a:3d:cd:71:c9:4a:ca:
         c2:71:8b:4a:74:34:d6:3c:71:23:ca:e4:ed:6e:5c:50:ed:19:
         ea:ac:fe:90:ae:4c:74:e0:f6:d4:b8:fe:fe:0d:fa:ac:cb:d3:
         64:07:96:76:41:67:2c:ea:89:8f:28:4b:44:e2:79:69:fa:c1:
         f2:99:cd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:14:25 2026 by rpki-client