Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
File:                     4Wjja6V37UfmkocpaRmR5OfyNdo.mft (raw, json)
Hash identifier:          JiPu23ROk/Mx4oD//37kWoCqzBn1P+kcqBDN1LIKoW8=
Subject key identifier:   D4:51:9D:FE:65:27:1C:69:D7:99:F0:5B:E4:40:20:D4:06:00:87:68
Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
Certificate issuer:       /CN=e168e36ba577ed47e6928729691991e4e7f235da
Certificate serial:       019D99D04EE82E95EB14935934AC0197E667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
Manifest number:          0F58
Signing time:             Fri 17 Apr 2026 05:00:58 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:58 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:58 +0000
Files and hashes:         1: 4Wjja6V37UfmkocpaRmR5OfyNdo.crl (hash: IiMjW5Pb+1cN0WZONlmbHCCl9E/jAuhjgNm483sNVYw=)
                          2: DXNfK9iDbAyacvGKo8OhC8gh6Ws.roa (hash: ie8rWldwV9B67n5/EffGRxDtlu39UUHKQ/tSe/j67xQ=)
                          3: OD1vu1xvYZtuVSOWeWsoiRek5JE.roa (hash: wh893NwS229KIBxcphoahE5rVlzAGosMJTAhq3iAiRg=)
                          4: kpJpjf8DEZUzbeocou67-xPbGzs.roa (hash: 6kfdp9N3WAjBikoQRDTNTZ1g1ptesnrFillaOS+4UCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:4e:e8:2e:95:eb:14:93:59:34:ac:01:97:e6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da
        Validity
            Not Before: Apr 17 05:00:58 2026 GMT
            Not After : Apr 18 05:00:58 2026 GMT
        Subject: CN=d4519dfe65271c69d799f05be44020d406008768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cb:84:b1:7f:8e:b0:36:f4:b8:d8:be:f4:14:
                    f3:8b:f3:28:6d:82:fa:d7:87:de:c4:a0:c4:35:3f:
                    3e:b0:86:9e:8e:3d:34:71:4d:15:82:0f:66:0d:c6:
                    8d:d0:58:12:be:b9:58:48:aa:0f:82:23:2c:8e:e6:
                    75:30:fb:65:92:dd:dc:d2:09:58:c0:35:b5:93:f3:
                    0d:6d:01:e4:f9:03:42:10:d9:5a:85:3d:64:58:e3:
                    22:9a:9d:12:af:ff:fa:76:c3:a7:a7:fa:65:63:b0:
                    83:68:89:49:5f:c8:6a:f5:bb:54:09:27:55:40:3f:
                    a9:14:ad:bd:25:9a:fb:fd:5a:b7:d4:1b:2e:4b:da:
                    55:14:d7:b8:19:3d:b3:18:13:d8:47:37:b6:2e:1d:
                    25:b4:4b:bc:ce:db:c3:bd:59:25:fd:b2:12:d7:68:
                    38:da:9a:26:85:9f:d0:8b:54:bb:32:18:9f:1f:50:
                    a9:87:37:36:7a:90:84:17:b2:40:76:37:94:8e:82:
                    c6:d3:a1:99:08:28:74:ec:03:a8:9f:f8:05:3a:8b:
                    bd:da:41:3c:f8:c7:89:08:c6:36:05:83:93:e0:4a:
                    fe:f0:3e:e8:0c:cb:3a:52:bd:90:ce:23:d2:0f:c4:
                    87:78:38:b1:85:9a:16:d8:bd:f2:a6:cf:0c:c4:3a:
                    43:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:51:9D:FE:65:27:1C:69:D7:99:F0:5B:E4:40:20:D4:06:00:87:68
            X509v3 Authority Key Identifier:
                keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d2:64:a8:7d:07:93:d7:0a:56:1a:7c:ee:13:90:26:e7:8d:
         2e:44:51:0e:d1:4e:27:23:da:a8:64:54:8c:b7:01:96:c0:8c:
         a7:53:9f:3b:53:52:5e:e7:8b:4d:89:92:ed:bc:36:0d:7f:5f:
         ea:d7:7a:f4:99:4d:e7:17:3f:41:9b:10:ac:0a:f9:08:99:8a:
         53:a0:16:57:17:89:a6:90:d5:d2:da:68:5f:15:09:9c:1d:3a:
         21:27:77:e6:4c:eb:ef:dd:d7:f4:38:80:2b:52:98:6e:63:03:
         0d:7d:23:31:80:5f:af:c1:79:87:2b:fb:75:d0:68:db:a1:32:
         67:6c:30:1c:ae:5c:b3:90:46:1a:b3:c8:ce:12:10:16:5a:d3:
         b4:4c:a8:f3:e7:35:64:78:e4:42:11:81:af:c1:6d:30:27:ab:
         16:49:51:f2:66:ac:e9:05:66:c3:5c:95:3d:53:c1:0b:d5:8d:
         4a:14:f2:b2:0a:a8:75:9f:b1:bb:40:97:da:22:0f:a0:fc:0e:
         31:16:2a:a9:c9:23:97:07:90:b3:a1:2f:4e:42:0a:68:7c:de:
         97:cf:12:f5:72:01:5a:77:20:86:c1:bb:e0:39:9b:43:81:cd:
         4e:82:52:3b:b5:98:d1:4c:4d:cc:13:1d:4c:f4:95:ad:59:73:
         e5:47:60:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:18 2026 by rpki-client