Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File:                     AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier:          V2XPi7pMROZyvxXjtuaLayb7nKyyPZPEWKqJ8ZFdwKA=
Subject key identifier:   46:0C:3D:2A:AE:6F:44:D6:52:D8:79:44:14:63:08:5B:13:BD:F3:50
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer:       /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial:       019D99628A6C175B40E17E7225D551A9F978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number:          09D9
Signing time:             Fri 17 Apr 2026 03:01:05 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:05 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:05 +0000
Files and hashes:         1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: sp2ZvhxJkkYQtsCwVyPytGZm5QoOkit0WoMCrF5Voo4=)
                          2: D-pDOX5ZXtdIZnyN7bsDrJe1gOo.roa (hash: JQkmlm3wSiHNU9bdVvmkiiM/K5jDVTyxbR5FyQCgkBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:8a:6c:17:5b:40:e1:7e:72:25:d5:51:a9:f9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
        Validity
            Not Before: Apr 17 03:01:05 2026 GMT
            Not After : Apr 18 03:01:05 2026 GMT
        Subject: CN=460c3d2aae6f44d652d879441463085b13bdf350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d0:44:6a:d1:fa:da:2b:b6:dd:61:38:0f:2b:
                    5e:e7:b4:79:15:34:79:44:54:5f:97:b1:13:0f:e8:
                    f7:12:0c:fe:1e:84:12:f7:44:8e:8f:ea:49:9b:38:
                    08:1d:40:61:93:4c:2a:c7:5d:9a:23:b7:6a:2b:16:
                    b3:a5:97:06:a4:cf:88:b3:33:c1:fe:5f:43:f3:4a:
                    be:21:a1:e6:55:21:64:c4:57:44:05:ab:36:c9:f8:
                    7b:55:cb:2d:f4:0f:74:68:d0:3e:6d:87:e1:b0:bd:
                    fa:ec:3a:53:8a:84:44:ba:f6:52:e8:f2:9d:fd:86:
                    a2:52:7e:f1:c1:fe:3d:e9:e2:f0:29:0b:ad:5d:4b:
                    1c:32:d9:24:63:e4:70:ea:ea:98:9e:10:c0:df:6c:
                    d1:dc:51:2b:ab:68:4e:cc:c6:50:97:72:0d:8d:c4:
                    ec:bd:cf:f7:21:cd:82:eb:8e:1f:4b:db:8f:68:5d:
                    d8:12:b0:67:a2:8e:6b:47:96:10:e6:a8:fb:bd:7e:
                    27:f3:3f:92:96:ee:27:a6:50:bc:24:f9:7c:b3:69:
                    a0:2c:8f:ab:ca:02:de:2d:10:ea:b1:d2:ac:aa:64:
                    d6:26:5a:31:e3:46:44:6e:cc:45:b0:73:34:64:1c:
                    28:d5:22:09:e1:be:40:00:e6:ce:4f:57:e3:a8:21:
                    41:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0C:3D:2A:AE:6F:44:D6:52:D8:79:44:14:63:08:5B:13:BD:F3:50
            X509v3 Authority Key Identifier:
                keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:4e:7d:08:18:89:f4:41:fc:72:72:4d:dd:32:2a:02:1c:01:
         34:62:b5:8e:a8:5e:da:0f:f0:93:08:22:19:1e:9c:56:1a:67:
         68:0a:14:08:35:87:74:8a:2d:54:87:60:59:de:94:3c:3e:12:
         21:03:18:cc:e1:56:5d:fd:31:e5:86:2b:71:c5:17:fe:d3:fd:
         f7:1c:7d:fa:02:a6:1d:43:3e:b8:6b:02:29:d4:1a:b6:87:7e:
         02:45:6b:41:d0:0f:b6:59:42:4f:96:e4:34:cf:a4:c9:6e:be:
         24:bc:22:31:c7:14:f4:47:16:91:20:61:8a:25:a5:3e:37:59:
         b3:71:09:41:f8:e2:e1:75:d8:56:f3:1a:a6:d3:c4:68:37:a2:
         e8:f2:0d:b1:15:be:00:6d:d9:67:46:10:a3:e6:35:8e:cf:e3:
         9c:a9:61:9e:fb:52:a4:bf:4e:c0:fa:f2:c3:8f:98:f3:dc:b2:
         1c:91:f7:20:03:7d:1f:f0:ea:ec:23:b1:e5:4b:0c:7e:b8:e4:
         27:53:6f:dc:12:b2:d4:59:3b:23:2c:5f:76:7b:e2:d8:58:48:
         4f:54:6a:d8:4a:70:ac:b6:d0:e4:de:05:92:6b:6b:3e:0d:07:
         c3:35:39:71:4a:b5:88:fd:72:f6:46:b5:68:2a:b5:6a:60:5b:
         f0:52:c5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:36 2026 by rpki-client