Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
File:                     k4otcueQJvUr9WV-l__RsRvohkE.mft (raw, json)
Hash identifier:          GoNO5nVNjR3Hl6OemHn3qtEIeZjpkoU3qHnzSjxBTqM=
Subject key identifier:   E0:28:42:53:2B:1E:18:AA:E6:C9:16:EB:1C:7B:CC:27:95:8D:09:EF
Authority key identifier: 93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
Certificate issuer:       /CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Certificate serial:       019D99992C77B8ECBE76913922393DBC1D45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
Manifest number:          0A21
Signing time:             Fri 17 Apr 2026 04:00:45 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:45 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:45 +0000
Files and hashes:         1: ILa8ZoCJZMkNP3VlFiAUG63QFj0.roa (hash: ithiJooqYNVv+hqIuWx9pXDq5+Ysuyh5ujkHJJ0K2Hg=)
                          2: k4otcueQJvUr9WV-l__RsRvohkE.crl (hash: LvDeA9j41OCLMjWZcXGi/3DgVZpjp+TPQhijf3HCm0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:2c:77:b8:ec:be:76:91:39:22:39:3d:bc:1d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938a2d72e79026f52bf5657e97ffd1b11be88641
        Validity
            Not Before: Apr 17 04:00:45 2026 GMT
            Not After : Apr 18 04:00:45 2026 GMT
        Subject: CN=e02842532b1e18aae6c916eb1c7bcc27958d09ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2f:3c:1e:56:16:31:b9:11:72:2f:47:6d:ef:
                    ad:c3:c8:99:d4:08:2a:b6:9f:f2:e8:96:40:47:5e:
                    b0:d3:d0:ac:ff:96:6a:8d:c6:b2:c7:ad:f7:18:ca:
                    cc:52:11:55:d9:62:58:c7:2b:6a:42:84:8d:da:d0:
                    4e:c9:a4:85:40:1f:73:9d:68:e2:2c:3b:6f:ed:b7:
                    a8:a0:52:54:cf:18:7e:1b:0f:ea:52:9a:09:3c:ca:
                    80:0c:1d:8f:79:c5:64:c1:2e:1b:cf:14:d1:46:82:
                    4c:fb:b8:99:e7:b3:b7:d4:5e:6d:4b:b2:94:65:d5:
                    d5:12:6b:a0:a8:38:05:e7:c3:30:54:a7:a8:24:2b:
                    dd:78:12:5e:2b:fa:f2:53:85:0f:25:7e:6e:18:42:
                    fc:88:af:6f:a5:1a:8d:f6:cd:96:85:34:6a:e9:88:
                    08:e4:5e:95:dd:79:67:13:f1:d6:6a:5b:f8:53:93:
                    7e:90:80:5d:9e:1e:f4:47:3e:d1:7c:26:14:fa:e4:
                    a3:2d:1d:a0:a2:10:b0:28:5f:3d:e5:9d:45:c1:e1:
                    ac:08:2a:49:7d:ab:21:5a:d3:d7:be:59:54:58:25:
                    0a:ca:1b:ab:3e:2a:16:5a:9a:92:f7:3b:37:85:ad:
                    0e:80:96:42:14:e5:f8:72:d7:3a:83:47:0c:19:86:
                    f5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:28:42:53:2B:1E:18:AA:E6:C9:16:EB:1C:7B:CC:27:95:8D:09:EF
            X509v3 Authority Key Identifier:
                keyid:93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:76:07:01:66:e2:6e:e3:d6:c3:26:a1:07:1e:16:80:e8:c6:
         cd:4c:e2:c0:b3:e3:7f:d0:5f:0a:7f:0a:a5:ef:1b:27:09:09:
         69:e5:3d:68:cc:f1:2a:67:0a:68:27:36:d4:33:0c:d4:51:92:
         b5:15:2b:d5:d9:89:ca:1c:5b:6d:1e:9a:c4:12:37:b3:e4:ef:
         39:bd:29:d7:ba:dc:c2:73:27:e6:2e:83:a5:9f:99:59:7c:ea:
         6c:75:69:71:9d:97:aa:a9:c3:80:f5:76:11:c3:f9:25:90:71:
         96:79:89:25:49:5e:8c:79:ae:ea:99:09:72:3b:85:59:8d:41:
         aa:b1:78:9c:0f:0c:2e:2e:02:ff:14:64:e5:80:b2:38:e2:7c:
         13:8d:d3:bb:51:98:8a:8c:75:55:bd:e5:81:b1:91:74:74:39:
         83:40:ed:04:61:ff:0d:39:6e:13:85:4e:fc:a7:1e:c9:cb:18:
         6f:a6:a6:60:d0:b3:61:03:58:90:8f:18:9e:43:81:fe:bb:97:
         62:52:67:68:b2:01:a2:40:65:22:6e:fc:d1:30:fa:7f:78:e0:
         4b:5d:d5:af:1d:cf:69:e1:05:9c:65:7c:ac:8f:27:c0:97:ce:
         ef:e4:76:d9:95:14:85:56:ae:35:75:41:2f:80:9e:d4:5e:98:
         a7:72:25:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:40:12 2026 by rpki-client