Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
File:                     f_F65Ue58mQeYFd_5VPdtvdJoIc.mft (raw, json)
Hash identifier:          2/Kf+gwu+mcB9o6Cg1C7jyVgZzKHGBTo8nD9suheMTM=
Subject key identifier:   32:F4:65:89:0F:D1:0D:36:AF:D8:D0:9F:2F:8F:9E:E7:DE:AF:39:C5
Authority key identifier: 7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
Certificate issuer:       /CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Certificate serial:       019D98BDEB39D29CD807A5DFD32E996531CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
Manifest number:          0602
Signing time:             Fri 17 Apr 2026 00:01:16 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:16 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:16 +0000
Files and hashes:         1: AjV9A4ZLi-u-GOdqOEKgsz1ISW0.asa (hash: v9lcCxEmXy5ap+uU+kcp2/oOo9Oq8HNH0w1TrzmAgcM=)
                          2: f_F65Ue58mQeYFd_5VPdtvdJoIc.crl (hash: HDoRuhzawI4MCxhqu6aO19P3ZxZEfKkRtctg7tQUawA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:eb:39:d2:9c:d8:07:a5:df:d3:2e:99:65:31:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
        Validity
            Not Before: Apr 17 00:01:16 2026 GMT
            Not After : Apr 18 00:01:16 2026 GMT
        Subject: CN=32f465890fd10d36afd8d09f2f8f9ee7deaf39c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2c:21:c5:ab:01:77:4f:dc:95:c1:f7:a7:f7:
                    71:5b:ea:fc:37:06:5f:74:bf:9e:f6:4e:8b:3a:24:
                    26:8d:bc:d0:b4:69:a5:30:19:d2:b6:f3:46:c2:b4:
                    48:67:9a:ef:4e:c6:4a:fa:90:a8:30:c6:d5:87:b2:
                    0e:d8:f4:53:88:e8:26:20:60:f2:0a:5b:02:44:b8:
                    6d:aa:6d:42:f2:d6:d7:8b:06:bd:f1:2e:8b:34:a7:
                    2e:2d:48:de:28:11:60:4d:22:95:f1:57:35:e1:f2:
                    55:ec:a9:5b:68:19:11:3d:5c:89:b9:e4:ca:70:40:
                    0b:ee:26:67:be:46:fb:e0:73:42:55:9b:dd:41:53:
                    ca:3f:b1:3a:f6:69:7d:27:ec:f1:c6:48:ac:5e:07:
                    4d:e4:de:41:b1:d5:9e:23:b7:14:da:b1:54:29:76:
                    e4:b0:99:14:16:74:d6:c0:e9:0a:de:c4:26:b0:30:
                    57:04:6d:50:d5:2d:ea:e2:48:e5:b2:78:aa:4a:f8:
                    25:39:c6:ec:53:4a:e1:3b:33:72:ee:53:4a:d1:67:
                    33:e3:8b:dc:fd:8c:07:e8:b1:c3:0a:c9:d2:99:3e:
                    de:7d:95:d9:6b:1e:81:86:17:26:38:c2:d1:53:79:
                    bd:2c:f4:58:ef:7b:17:9f:a5:40:ab:10:25:c2:c4:
                    c3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F4:65:89:0F:D1:0D:36:AF:D8:D0:9F:2F:8F:9E:E7:DE:AF:39:C5
            X509v3 Authority Key Identifier:
                keyid:7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:2b:00:00:ec:fa:8a:e5:b7:db:40:f1:5f:2e:12:32:1f:b4:
         55:5f:00:eb:ed:d9:f3:41:3d:b7:b1:d0:28:d4:99:11:78:d4:
         b1:85:06:b1:87:6e:98:59:ea:4d:24:31:b3:6b:b8:43:06:8e:
         7b:a2:7d:2b:7b:ec:30:89:7b:9f:f7:9b:6e:7a:e6:f2:a2:0c:
         75:a6:52:a9:54:a5:18:eb:17:14:59:48:b0:b9:05:12:4a:e2:
         a2:4c:46:4a:dd:eb:ea:7f:ba:f2:39:02:82:ad:58:8c:b7:70:
         c8:e2:6f:17:ce:5b:c0:e3:f4:36:b8:cf:9e:32:ad:07:d8:c1:
         ba:8c:cc:2e:01:32:c5:2c:bc:f5:d2:55:f4:44:16:f7:54:cf:
         e9:d9:15:c9:ce:19:d3:5c:3b:68:91:3d:22:a8:b6:4f:59:b2:
         cb:d5:a0:67:ce:82:ff:23:6e:70:91:81:d5:f6:cd:29:a3:c4:
         03:4d:65:b9:d5:c8:55:2b:e2:39:94:84:3e:44:5d:cc:ed:89:
         5d:8b:be:f5:df:b7:f3:0b:10:6b:8b:c3:28:25:e8:e4:b1:e4:
         5c:b9:22:be:c0:f0:32:51:88:d8:3c:f1:95:c0:e5:ae:bb:a9:
         aa:38:99:f8:1c:16:53:a0:d4:6b:8f:73:a0:31:54:4a:9b:38:
         ad:27:22:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:25 2026 by rpki-client