Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
File:                     mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json)
Hash identifier:          O6vYc8myfOTd2TEq3XgTl17Hehq3UVr4pWhrqMqQ+Vk=
Subject key identifier:   83:FE:11:8D:B2:19:80:B8:40:FE:B9:2B:26:21:6C:4A:88:EE:D2:98
Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Certificate issuer:       /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Certificate serial:       019D9B19BE82252266993DB551C4413257E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
Manifest number:          032B
Signing time:             Fri 17 Apr 2026 11:00:48 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:48 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:48 +0000
Files and hashes:         1: 7iabnlFmeCBBjsLFJN99I8--_-4.roa (hash: XEo4P0carZV4gE6HMO4BcJUELgS7un1lJ1bRLna274A=)
                          2: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: 0pCbpuVknUCspHmejJU9hqcncgQ22k1Ir4yks8QkC6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:be:82:25:22:66:99:3d:b5:51:c4:41:32:57:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
        Validity
            Not Before: Apr 17 11:00:48 2026 GMT
            Not After : Apr 18 11:00:48 2026 GMT
        Subject: CN=83fe118db21980b840feb92b26216c4a88eed298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:43:8f:bd:3f:1d:ca:2b:35:58:a7:d8:d8:ec:
                    d1:16:e6:0c:73:e8:f5:f6:bf:ac:af:2c:51:a3:d2:
                    bd:53:45:ca:b1:69:5c:b4:30:bf:35:34:f6:f7:a2:
                    c8:03:d4:d7:bd:0f:d8:fd:38:e2:60:a7:0d:12:7c:
                    b8:1a:2a:3d:63:f7:e6:8c:7a:a1:2c:83:31:1f:f6:
                    20:02:7c:c9:71:ca:a6:6c:40:2e:be:fd:5e:43:65:
                    71:b6:d2:60:50:3e:59:cc:7a:f2:c7:49:19:e0:08:
                    15:63:9d:7f:c5:59:5e:d2:43:00:ef:a1:3d:c9:b8:
                    40:f2:26:e9:4d:53:a4:74:a5:6d:5c:be:e9:84:70:
                    ae:f2:d9:84:b8:1d:24:b1:9e:af:27:55:d7:51:07:
                    cb:d9:a6:ba:69:7a:ce:3d:57:8c:1a:dd:78:01:2d:
                    14:b3:97:a4:f0:f3:f3:74:e5:00:21:af:3f:44:5b:
                    9d:d4:3f:c0:c7:f4:12:80:b6:5c:ba:d6:48:dd:ed:
                    4d:f5:d5:16:2d:ec:b4:84:04:c8:31:4f:f3:7f:ed:
                    9e:d2:90:12:a1:29:12:d1:77:0a:90:bd:be:ba:53:
                    a1:94:24:f1:97:ba:f9:c1:86:24:fe:83:58:0d:b5:
                    ed:b6:94:a7:6e:a7:04:b4:1c:6c:4e:6a:1b:2f:c0:
                    d7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FE:11:8D:B2:19:80:B8:40:FE:B9:2B:26:21:6C:4A:88:EE:D2:98
            X509v3 Authority Key Identifier:
                keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:38:e9:71:7a:04:d9:9b:5a:1c:76:55:fa:1a:71:08:d8:83:
         6b:ac:c3:08:b8:46:48:12:63:46:ca:9c:54:fe:b7:cf:38:a9:
         6c:b3:81:e6:22:e3:0f:f3:ce:8f:b5:ad:8d:9b:82:dc:cc:b0:
         48:bb:a9:15:43:43:4d:40:ff:6f:12:19:1c:a2:de:ee:53:ef:
         f6:fa:3e:63:21:55:3c:a9:42:14:11:6e:91:52:2d:0f:59:f9:
         78:7b:ad:14:df:92:e2:46:e2:06:a9:bb:37:5c:dc:56:d7:36:
         51:cc:4d:e7:c0:87:34:da:b7:3e:8c:ac:b6:6c:ee:86:90:7a:
         44:81:97:01:88:c9:72:fe:53:e1:76:f8:90:4b:54:3e:ae:50:
         19:97:75:9f:ca:2c:bc:fa:09:e3:93:03:08:22:37:16:73:1e:
         03:fd:17:f0:16:99:14:20:77:60:e4:24:21:b3:82:66:94:1e:
         b4:f1:23:3a:42:7b:ff:6c:c5:91:70:43:ce:54:7c:60:54:08:
         c1:8b:00:d5:fd:14:d5:d1:84:2e:f5:c3:5a:3d:73:37:7f:7c:
         76:43:ee:d3:8a:39:57:d6:75:b7:1a:a2:fa:29:84:65:58:6a:
         cf:a1:57:6f:86:b8:b5:59:9f:1b:8d:58:ca:5a:1c:c6:78:8f:
         84:e0:21:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:13:46 2026 by rpki-client