Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
File:                     RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft (raw, json)
Hash identifier:          4yHIVJGQdW0ssTLgDokNzXXAr0fEqShH+8gH0T7kdK0=
Subject key identifier:   C3:73:10:91:C7:A3:51:E4:6B:E4:7A:BA:58:2C:04:05:BE:D2:DE:1C
Authority key identifier: 44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
Certificate issuer:       /CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Certificate serial:       019D988643DD28B6CDD2D9C5937D784A3B70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
Manifest number:          063F
Signing time:             Thu 16 Apr 2026 23:00:29 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:29 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:29 +0000
Files and hashes:         1: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl (hash: aNkaM+8/Dcg3FFJlFa34TsPs3PNBY5USpnmfkrvOQNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:43:dd:28:b6:cd:d2:d9:c5:93:7d:78:4a:3b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
        Validity
            Not Before: Apr 16 23:00:29 2026 GMT
            Not After : Apr 17 23:00:29 2026 GMT
        Subject: CN=c3731091c7a351e46be47aba582c0405bed2de1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:67:83:4d:e1:d7:1f:bb:43:fc:f1:57:c4:3f:
                    f4:77:91:79:b3:9e:2f:1c:22:7d:b3:1d:c6:20:32:
                    35:ac:ca:f4:c3:14:2d:ab:20:a1:8e:e8:c5:8d:7d:
                    90:5c:e3:eb:67:d1:17:9d:66:e2:e5:bb:bc:e7:6f:
                    5e:3a:56:65:b7:93:df:16:56:aa:2a:3c:d9:18:bd:
                    71:f0:17:ee:65:7a:6d:9a:44:ad:4a:81:3c:43:0e:
                    a9:3c:d8:49:d9:b6:9e:0f:58:a4:6e:94:e6:9d:6f:
                    cf:63:7e:2d:6d:4b:9a:ae:77:ae:d8:9d:a1:85:41:
                    fa:9d:dd:01:b2:ad:ae:4b:34:9c:aa:41:5c:cd:b1:
                    94:e7:4e:1f:5e:2c:32:ac:67:27:16:29:79:8c:a6:
                    dc:9b:d0:b2:53:83:14:40:07:c9:62:f7:02:53:a4:
                    e3:40:34:de:ad:5e:82:eb:a1:a7:92:d3:77:f2:17:
                    9c:db:16:90:73:1b:fc:38:d1:26:79:69:bd:e6:55:
                    dd:18:98:3d:fe:d8:93:82:75:19:12:2a:94:d5:b5:
                    fc:d2:bb:68:18:95:c5:1e:61:04:c3:0a:4d:b5:d0:
                    b2:14:e0:e2:6f:10:01:24:5f:b2:ca:75:fa:8c:e1:
                    20:e0:d0:80:76:15:30:ef:0b:16:a8:aa:61:73:86:
                    b1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:73:10:91:C7:A3:51:E4:6B:E4:7A:BA:58:2C:04:05:BE:D2:DE:1C
            X509v3 Authority Key Identifier:
                keyid:44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c6:19:0b:a2:e6:49:e1:b5:b0:ec:19:28:33:e0:1b:fe:f3:
         f2:2f:7e:23:04:e2:a6:35:1c:09:57:55:76:5c:1a:32:89:77:
         1e:3c:eb:e5:86:14:90:29:6b:8d:26:53:73:69:00:28:08:ae:
         d1:46:2c:a0:98:6c:27:ad:31:34:b3:8b:bb:a4:7f:8f:19:ab:
         a9:09:f5:ba:9f:d3:3a:fe:9a:62:e0:9a:81:e0:7a:7b:19:26:
         fe:82:73:74:1b:34:f6:ba:67:d2:f4:8e:92:d4:d1:5d:03:d7:
         ce:8e:3b:97:3a:0c:2e:87:8b:01:23:62:6d:2d:95:67:34:4f:
         bd:9e:a5:65:a4:de:78:5c:d1:a3:50:f1:bb:d8:d4:2d:f8:3f:
         03:f3:1e:b1:b9:1e:fc:95:4b:3a:69:66:b4:87:a1:96:4c:60:
         59:c7:3a:7e:43:df:30:36:c8:56:e5:0b:06:0a:45:da:3a:c9:
         a3:50:31:11:81:15:2c:eb:af:00:10:eb:57:ed:cc:64:f0:ea:
         81:f3:19:94:d8:df:47:04:5b:de:c5:2c:ae:e3:6a:37:d5:06:
         5a:31:f1:d4:ad:af:4f:99:a1:05:f2:19:ae:f9:32:22:70:8d:
         8a:ac:92:fd:48:8e:3f:52:81:94:e9:e5:3b:20:9f:6c:39:70:
         fc:13:cb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:21 2026 by rpki-client