Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
File:                     V1N5OGE9UmjoP0gAEw8fnVafeFA.mft (raw, json)
Hash identifier:          +c05g1MbSASRIwgq+3wY3O314at1+t+nv46dSS2KX50=
Subject key identifier:   C0:DF:BB:67:CC:37:7A:10:E1:E7:DD:1D:8D:16:DD:84:72:65:8D:62
Authority key identifier: 57:53:79:38:61:3D:52:68:E8:3F:48:00:13:0F:1F:9D:56:9F:78:50
Certificate issuer:       /CN=57537938613d5268e83f4800130f1f9d569f7850
Certificate serial:       019D9DE381434862EF174E0BAC50828D1857
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1N5OGE9UmjoP0gAEw8fnVafeFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
Manifest number:          B3
Signing time:             Sat 18 Apr 2026 00:00:25 +0000
Manifest this update:     Sat 18 Apr 2026 00:00:25 +0000
Manifest next update:     Sun 19 Apr 2026 00:00:25 +0000
Files and hashes:         1: JEv-p42MOZ0QrNfVUGr1gTTDu7o.roa (hash: gc04AhUcmWl7QLETDmgumdvIpDyqEnMmC5mWOPsnvmI=)
                          2: V1N5OGE9UmjoP0gAEw8fnVafeFA.crl (hash: mdEgSejBv+3LH4sHPftnai6t7Z/+WSzLal/57RKiJ8Y=)
                          3: mpCz2Btceh8obeRlP3H4XUjWsec.roa (hash: nf7Yud3TW51o07Q7utOXvAePNCDCzrMuynSmG/Ni9pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1N5OGE9UmjoP0gAEw8fnVafeFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:e3:81:43:48:62:ef:17:4e:0b:ac:50:82:8d:18:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57537938613d5268e83f4800130f1f9d569f7850
        Validity
            Not Before: Apr 18 00:00:25 2026 GMT
            Not After : Apr 19 00:00:25 2026 GMT
        Subject: CN=c0dfbb67cc377a10e1e7dd1d8d16dd8472658d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:32:a0:3b:db:94:f0:24:23:7f:a2:99:7d:
                    50:5b:83:66:5b:66:0a:dc:cf:11:47:d3:9a:e6:02:
                    9e:3c:3a:0d:3e:2c:5b:c5:97:ea:87:cd:fa:72:1e:
                    b6:3e:57:42:d0:62:76:44:10:86:a3:e7:1a:08:6a:
                    98:11:6c:75:1c:75:b3:21:4b:67:83:b3:c1:62:8b:
                    4e:93:f8:ad:ae:e8:b4:ff:a9:a4:3b:0d:ff:6d:9f:
                    dd:7d:b3:4d:fd:92:a1:76:4b:b6:a1:d3:7a:d3:48:
                    75:d3:25:5b:f9:f9:88:09:ef:5a:78:0a:8a:ad:5e:
                    07:2c:f8:15:80:0a:6f:b9:6b:cd:35:bc:8e:da:94:
                    0e:3f:84:58:13:73:91:f2:68:b3:3c:6a:42:3a:5f:
                    0e:38:ac:aa:e9:e8:4e:85:b1:1d:4a:7e:de:fd:f9:
                    3f:42:9f:ca:3f:06:4f:2f:f7:ae:68:e4:c4:e5:da:
                    6f:78:76:87:eb:3b:89:0c:2a:1a:ff:aa:2b:15:16:
                    00:b9:5f:73:84:31:aa:40:fe:92:ce:17:97:29:b1:
                    53:2e:db:a9:b9:f0:23:43:ac:61:b2:5f:83:c6:4f:
                    3c:0f:40:3c:a0:d4:f5:21:01:ac:cf:29:af:d0:1f:
                    1a:ae:ff:f0:9f:25:fa:6e:a5:df:17:c0:4a:8e:50:
                    9f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DF:BB:67:CC:37:7A:10:E1:E7:DD:1D:8D:16:DD:84:72:65:8D:62
            X509v3 Authority Key Identifier:
                keyid:57:53:79:38:61:3D:52:68:E8:3F:48:00:13:0F:1F:9D:56:9F:78:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1N5OGE9UmjoP0gAEw8fnVafeFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:94:a9:29:84:c8:34:02:4a:0f:01:0e:68:bb:99:42:eb:30:
         25:b4:24:ce:b2:d9:f8:06:32:07:4e:fa:3b:1f:59:8a:d0:96:
         4f:e2:e5:d5:d6:7a:43:79:2b:91:33:7e:b0:91:b8:cc:70:44:
         55:3c:8e:50:f0:77:b1:95:fe:64:55:44:48:5d:72:59:6b:3e:
         04:f3:71:dc:f9:b1:ef:7e:d9:12:b5:db:e0:b8:1f:73:fe:a5:
         6d:9e:fd:06:f0:6e:60:e2:92:a5:85:ce:2a:b3:ec:47:b6:f9:
         e5:b2:fe:9d:82:fd:ad:db:b1:d9:bf:61:41:35:19:97:1c:48:
         8e:4c:55:89:41:d4:43:0a:1d:c3:83:fb:e5:9d:8d:bd:3a:fe:
         fe:f3:0f:da:cc:19:12:58:54:ac:d9:71:52:b8:c8:32:fb:fb:
         b0:ef:36:c7:8e:43:f4:66:e7:ac:eb:ce:2a:c7:66:55:c4:b3:
         1d:53:29:fd:d6:96:dd:46:07:2e:49:93:d6:45:e9:5a:de:f0:
         5e:cc:9e:3d:be:4a:6e:72:cd:5e:0c:6c:7d:e4:3c:e2:11:e1:
         cb:cf:e1:8d:a3:f6:1a:76:39:a6:62:6a:39:18:6c:a9:c4:b3:
         6c:49:b7:84:72:cf:c3:94:ed:3a:87:7e:93:c6:0e:e3:a8:a9:
         79:b2:dc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:47:26 2026 by rpki-client