Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
File:                     1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json)
Hash identifier:          icR9zAudaFBoUOA967EKql6ssoXs06GEOcO3j+/ZChc=
Subject key identifier:   4E:8F:E1:86:63:07:1A:64:4A:03:98:5A:9D:A0:FF:4E:D7:C5:68:F2
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Certificate issuer:       /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial:       019DA3AF26F9A4E2A57C875610D73F7825A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
Manifest number:          13CC
Signing time:             Sun 19 Apr 2026 03:00:58 +0000
Manifest this update:     Sun 19 Apr 2026 03:00:58 +0000
Manifest next update:     Mon 20 Apr 2026 03:00:58 +0000
Files and hashes:         1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: FQW8rmIK8KUf/P6JOupF5Spkw9uvI+vHh9lOnYN+O6M=)
                          2: L-k_SL_s92jHONTQ4_qtQMQ0hCo.roa (hash: Ktu7W01HQP3w+NwclsoGu7pxp+ATVr6cehyCqENMhvY=)
                          3: OyDJxa-IKI9M6DEab_QdT2ZiPxM.roa (hash: TllnG1yiPkW1Kik3L852N3VXwGZ/qaH7M72QCj3GUaE=)
                          4: UZ7ePce2V0p3ZbzWXJ1ZgbnwDMQ.roa (hash: 3DbxDok/x0GzcOvaTUOPhPb4K0GtiOZj5rAjknMwnN0=)
                          5: itgGpKuGu8APbN-2Z-lODrOdXgc.roa (hash: RvzpB5HrikZyt7XKBGBF/LebdVemHKHKwl6PufhR200=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:af:26:f9:a4:e2:a5:7c:87:56:10:d7:3f:78:25:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
        Validity
            Not Before: Apr 19 03:00:58 2026 GMT
            Not After : Apr 20 03:00:58 2026 GMT
        Subject: CN=4e8fe18663071a644a03985a9da0ff4ed7c568f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:02:01:96:29:3f:8b:ea:fd:d5:6e:0a:8a:a2:
                    21:80:13:85:76:a8:94:b3:dc:f8:23:46:64:24:11:
                    49:58:8b:60:e7:f9:38:ec:b4:f2:5e:04:5e:5b:ac:
                    a5:14:3f:43:70:9b:e2:78:4b:74:db:e8:97:e0:5c:
                    ae:5d:46:15:d7:8c:04:cb:e3:9d:4c:ef:5a:02:9c:
                    44:a4:ce:a5:d9:44:90:a7:ac:a4:73:a3:41:d4:96:
                    14:39:ad:1d:0a:78:d9:33:7a:9d:42:db:18:3b:a3:
                    61:9f:a9:46:02:3e:bf:a7:42:66:82:6a:0e:39:92:
                    8b:c0:96:fa:4a:88:17:2b:7b:ee:1a:3f:73:7d:8e:
                    ec:10:43:c5:0d:b2:85:17:fc:46:af:91:74:78:66:
                    6e:71:53:a3:56:4f:e8:b9:4b:6c:76:a6:c8:7d:72:
                    8f:20:fc:83:2d:fb:55:0a:31:16:e3:3b:67:b1:5b:
                    89:cb:18:34:34:48:fe:56:96:3a:f1:5a:52:95:ab:
                    42:7a:7d:5d:dd:62:32:5f:9f:8f:73:25:73:b0:19:
                    13:14:c4:13:8c:0f:17:2b:25:23:c1:4c:2c:5a:41:
                    07:94:2b:ef:68:86:7e:2c:74:07:81:2a:63:b9:28:
                    97:cb:35:64:88:5a:66:ef:3e:49:a5:27:f0:c1:30:
                    b5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8F:E1:86:63:07:1A:64:4A:03:98:5A:9D:A0:FF:4E:D7:C5:68:F2
            X509v3 Authority Key Identifier:
                keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a6:50:b9:99:f1:b1:75:1e:52:85:c5:6f:0d:5d:52:3a:d0:
         48:7f:4a:d8:c6:1d:e4:af:46:0b:cb:30:64:44:b0:81:72:0f:
         91:86:a8:9b:8b:9d:87:ab:ad:6a:b4:26:91:7d:f0:24:7a:34:
         18:35:1a:e6:59:bc:df:8f:c8:2a:bb:dc:1b:7b:5f:82:d1:d7:
         96:cb:0f:2c:1c:d6:82:54:ba:09:f3:c0:b5:45:e1:bb:27:0c:
         c9:fd:26:d3:3d:8a:17:ec:ed:7f:e7:04:70:e1:b5:16:25:ae:
         e6:27:cf:13:46:4a:54:c2:cb:e2:84:64:f8:4f:6f:dc:ba:3e:
         15:3e:46:0d:3d:da:52:a7:51:ab:79:cc:20:f9:df:ca:fb:34:
         07:2b:d6:6c:bd:cb:97:33:95:21:3e:52:f0:78:ca:c2:24:ae:
         ea:a9:a3:d4:e4:bc:04:1e:57:65:b6:a2:ec:82:23:1d:02:e8:
         c7:44:8c:d2:d3:da:f8:dc:eb:d0:b3:f3:3d:78:1d:3c:e6:e4:
         dd:2b:7e:38:c4:d0:99:13:7a:11:03:5f:cd:55:82:17:4b:b5:
         a3:c3:7a:65:27:37:e6:00:0d:92:fc:e2:c8:7c:43:71:b4:97:
         7b:28:70:a2:00:6d:90:b3:65:b9:c4:63:29:cb:4c:f4:b9:74:
         63:20:e5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:46 2026 by rpki-client