Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
File:                     V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft (raw, json)
Hash identifier:          oMS3H5igOWUXGWib2d8uB0YzMxDswJCLy6SnZPqSEFI=
Subject key identifier:   FE:1E:63:5A:E2:77:6E:3C:8A:11:C4:A8:C0:C1:89:A2:68:65:ED:E8
Authority key identifier: 57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34
Certificate issuer:       /CN=57db143c17fb051944426a79f24334c25cdbc234
Certificate serial:       019D9DAD216A5FA31454609F4008E858E252
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
Manifest number:          0399
Signing time:             Fri 17 Apr 2026 23:01:02 +0000
Manifest this update:     Fri 17 Apr 2026 23:01:02 +0000
Manifest next update:     Sat 18 Apr 2026 23:01:02 +0000
Files and hashes:         1: T5e0TgseHoV5T0D1V0ELGlI9FBc.roa (hash: Q9H/hI7Y9VsQ4ugMF8ryTSl2yPuCfHdqE0UId9QIWbI=)
                          2: V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl (hash: 4G2F4e8qZxH11kcfr/FcaQWfhOQ+RgTzpFonrvi2EMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:ad:21:6a:5f:a3:14:54:60:9f:40:08:e8:58:e2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57db143c17fb051944426a79f24334c25cdbc234
        Validity
            Not Before: Apr 17 23:01:02 2026 GMT
            Not After : Apr 18 23:01:02 2026 GMT
        Subject: CN=fe1e635ae2776e3c8a11c4a8c0c189a26865ede8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:aa:e5:24:34:7a:74:16:89:c7:73:18:c9:42:
                    c8:6d:b5:09:3d:15:ec:53:20:58:02:18:b0:84:3e:
                    f3:aa:87:a4:79:63:af:dd:16:1c:1e:9c:e9:06:c6:
                    92:cf:c0:f1:98:84:cb:50:e7:75:2e:4f:f9:29:eb:
                    ec:94:e3:42:ad:1c:28:f1:08:7d:cf:e3:6c:c1:cb:
                    35:09:e9:7b:43:f5:88:8e:47:49:84:0e:75:24:80:
                    b2:e1:bd:68:bf:f8:72:c1:dd:2c:3a:47:79:43:1c:
                    75:0b:c4:85:e7:3a:5d:4e:0a:65:42:f2:4f:ec:33:
                    b3:68:63:82:d6:a9:3d:12:2c:1d:b6:6d:5e:2f:fc:
                    29:1c:35:70:0a:01:15:2c:3c:a4:0e:da:e7:b9:72:
                    9e:bd:cc:b3:f5:1c:a1:49:de:1b:e0:f5:c7:d0:e6:
                    db:6b:b6:a2:4b:63:63:8a:71:02:58:87:fd:b1:42:
                    d8:24:bd:b6:61:4e:1f:cb:35:af:1a:f0:2b:35:74:
                    b1:d6:cc:34:d2:d0:d6:6f:d1:cd:3f:2a:ad:54:5d:
                    fc:0c:2a:4c:f4:61:05:ff:36:df:31:20:c7:88:85:
                    f8:b9:8b:80:30:cf:d5:41:cc:6b:2e:98:32:71:2c:
                    7b:0d:c0:f4:77:98:d7:67:f2:ef:a8:39:11:d7:93:
                    b0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1E:63:5A:E2:77:6E:3C:8A:11:C4:A8:C0:C1:89:A2:68:65:ED:E8
            X509v3 Authority Key Identifier:
                keyid:57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:29:6b:16:aa:eb:0a:ec:46:de:c1:24:6c:56:e9:6e:af:e5:
         65:2a:2e:96:2e:4a:15:6e:58:f0:cd:52:c1:c4:65:88:17:f3:
         cb:65:be:76:74:bb:90:f5:5a:24:67:93:0c:85:52:cb:62:c3:
         a8:93:a7:59:18:dd:42:4a:3d:ad:8e:c9:fa:47:79:f8:90:05:
         48:8f:b8:06:64:09:65:42:78:09:82:a2:03:07:3b:cb:91:fd:
         7e:ed:d5:3b:fd:e0:0d:50:7e:c0:fb:14:3e:f6:da:ab:5f:b2:
         ca:e9:43:fb:2b:0a:92:dd:35:a4:8f:6d:b5:a0:66:4d:54:0d:
         ff:18:da:76:4f:63:ed:ec:48:2b:6f:f7:97:67:4e:41:5a:76:
         ac:ad:ca:4d:5c:3b:0c:3b:74:70:26:49:15:51:0e:7f:85:67:
         dc:e0:c0:f7:f1:cb:b6:35:6b:fc:32:e6:42:6c:43:3c:23:c4:
         82:e1:57:b4:53:ae:ef:4f:b2:24:07:b8:bd:ec:43:34:f8:b0:
         22:13:2b:89:7d:c1:44:61:aa:a4:1f:a3:26:de:99:75:cb:94:
         31:bf:c2:4e:19:45:79:d3:63:b4:41:63:12:f0:d0:7f:43:34:
         01:3d:78:e0:6e:ff:ab:c9:c2:47:40:ed:f6:c1:1d:5d:e7:c4:
         db:2a:64:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:38:05 2026 by rpki-client