Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
File:                     pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft (raw, json)
Hash identifier:          Bu20Nie3DTxJbPQacY+Qldw8O4AR2uMxFPW/dsj94iQ=
Subject key identifier:   E5:C3:70:B3:B9:65:51:3F:05:04:91:43:B5:CC:2E:54:47:13:3D:56
Authority key identifier: A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
Certificate issuer:       /CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Certificate serial:       019D9DE3CBB9648A85602BF4E295FB02C435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
Manifest number:          02EE
Signing time:             Sat 18 Apr 2026 00:00:44 +0000
Manifest this update:     Sat 18 Apr 2026 00:00:44 +0000
Manifest next update:     Sun 19 Apr 2026 00:00:44 +0000
Files and hashes:         1: 6phx-w5UIxjdX_HJEdkzEKdfgmU.roa (hash: SGPInug9Hk9CwPLCuVMV05j3spVvBaapQvXlXlYZ4gY=)
                          2: pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl (hash: EhOpUO/aDi6y5v1dE/r0GEOkljWpl7mPrN0IQcvaUSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:e3:cb:b9:64:8a:85:60:2b:f4:e2:95:fb:02:c4:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
        Validity
            Not Before: Apr 18 00:00:44 2026 GMT
            Not After : Apr 19 00:00:44 2026 GMT
        Subject: CN=e5c370b3b965513f05049143b5cc2e5447133d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7e:64:06:db:d2:9b:b0:44:df:09:e3:54:89:
                    97:96:fe:42:8d:1b:75:47:a8:31:4c:fa:ac:27:83:
                    3a:81:37:45:20:a4:22:7c:ec:6c:1b:ed:fd:14:51:
                    67:21:cd:67:ff:fc:5f:e1:da:b8:26:cb:8e:b1:46:
                    cf:6a:39:28:73:ed:e7:a7:0b:54:8a:c9:50:e0:f7:
                    73:18:fe:b8:1d:2d:98:0f:b2:0c:e5:80:0e:20:8a:
                    8a:15:ac:2e:10:66:74:32:25:14:af:45:10:48:53:
                    dd:ec:da:6b:d9:e5:ef:2e:87:1e:5d:c1:21:7a:2e:
                    a7:47:88:4e:26:5f:e3:0f:02:81:69:ff:44:9c:cb:
                    23:2a:8f:81:50:0c:7b:49:29:71:14:58:e9:10:04:
                    62:2e:5b:cb:46:d2:ea:d7:49:28:90:b9:24:51:fc:
                    70:75:c1:73:7b:6b:09:03:15:7c:02:0b:b2:7d:49:
                    14:b6:bf:38:3f:a5:94:44:79:cf:b6:3c:74:aa:60:
                    0d:1b:a2:8d:3c:ce:b3:d8:e9:b3:e2:60:1a:67:24:
                    34:8e:1b:34:6c:99:bc:0a:b6:39:04:7c:d3:1d:08:
                    e2:80:2b:d8:3f:95:b9:62:ff:bd:33:fc:9d:1e:f2:
                    5d:76:05:b8:c4:79:96:c3:be:0c:79:36:ef:3e:38:
                    14:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C3:70:B3:B9:65:51:3F:05:04:91:43:B5:CC:2E:54:47:13:3D:56
            X509v3 Authority Key Identifier:
                keyid:A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:98:41:0f:7f:c9:6a:53:21:26:68:18:1f:57:ea:49:25:83:
         ea:b2:5d:0a:4f:91:29:51:83:93:46:3a:17:0a:80:dc:6c:17:
         e4:33:e3:26:64:91:48:bd:68:d4:cf:4e:b0:70:6a:35:2e:99:
         33:75:d6:67:00:6e:a0:03:95:7f:02:69:f4:9b:62:af:9a:58:
         97:03:91:cd:ee:0f:ca:4d:c8:55:1b:1f:30:73:18:8f:2a:90:
         72:7f:b8:f4:46:9a:30:a2:4b:35:c7:0f:ea:d4:8e:61:50:a4:
         4d:ba:21:ae:61:1d:b6:29:49:86:b6:3d:7f:56:62:07:cd:41:
         16:8a:9b:41:be:e4:e0:48:83:cb:4e:30:b6:91:91:e7:5e:62:
         b0:8e:96:75:64:13:79:a9:f0:db:3c:f3:8a:e9:9b:f5:29:45:
         f4:a9:8b:72:45:e7:ef:f7:8c:48:56:2e:58:3d:aa:66:78:06:
         dc:62:76:af:be:3e:ec:8a:3d:5f:5c:af:0b:d2:9f:83:7d:88:
         1f:d7:c3:53:6a:b7:d6:1f:2a:84:82:9e:9d:94:02:5d:91:f0:
         23:31:32:af:7f:14:00:e3:9b:22:d2:86:4d:3f:36:d7:0c:7d:
         ed:d7:c7:81:7d:29:10:c1:03:d1:51:d6:6f:d2:bb:05:23:24:
         c2:5f:bf:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:49:57 2026 by rpki-client