Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
File:                     pPP3bj7O8kl-ET6ju664U_YvWP4.mft (raw, json)
Hash identifier:          g0tH4fnGmOa23VeynYIeegiy/+icScBE7GCyhTu8XXQ=
Subject key identifier:   57:81:B2:7D:B5:64:1C:F7:53:D1:28:66:AF:45:03:57:D9:62:9E:63
Authority key identifier: A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
Certificate issuer:       /CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Certificate serial:       019D9818BF1353D8621B5E68A28DD5B96569
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
Manifest number:          0F56
Signing time:             Thu 16 Apr 2026 21:00:51 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:51 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:51 +0000
Files and hashes:         1: O4sAh3xkbKW8_1R4ygmeymIKXCo.roa (hash: 3590EWq8UBW+NRuB0qqAJxA1WOGNS1btb/g2MoAacyw=)
                          2: pPP3bj7O8kl-ET6ju664U_YvWP4.crl (hash: BTkkCHmiDEKCBqIrHjDwiYoCL2IdwH9yRKy0PBOvOqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:bf:13:53:d8:62:1b:5e:68:a2:8d:d5:b9:65:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
        Validity
            Not Before: Apr 16 21:00:51 2026 GMT
            Not After : Apr 17 21:00:51 2026 GMT
        Subject: CN=5781b27db5641cf753d12866af450357d9629e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:82:2c:91:ed:65:a0:9c:bd:c6:47:7f:70:19:
                    02:38:42:98:37:77:f8:a1:0a:13:a5:df:20:58:fa:
                    f4:87:e4:89:a4:2b:45:9e:10:1b:96:22:19:10:50:
                    a5:f4:f7:93:ef:ac:6b:4d:01:ef:9d:e7:b2:7a:e1:
                    06:c1:ce:2b:01:b4:5f:fa:6a:eb:3c:c4:d9:db:ef:
                    cf:ba:b8:70:93:b7:8f:7a:69:e5:4b:93:08:87:22:
                    56:08:eb:34:22:15:fe:be:08:c6:70:36:33:d5:15:
                    27:3a:6a:8e:7d:63:45:6a:51:40:6b:ad:c4:d7:14:
                    4a:b2:b4:c1:67:21:80:05:9e:fd:bc:e9:b6:b4:c8:
                    4f:ba:2a:2c:4a:ee:d2:5b:65:09:63:47:6d:a0:88:
                    db:0f:e5:b1:14:35:0d:29:ec:bf:58:e0:a0:11:d6:
                    fc:2b:47:6a:d6:84:ce:90:d3:06:1e:ad:7f:7f:29:
                    4a:1f:e4:66:93:af:3a:57:7f:98:97:99:07:60:78:
                    76:2f:67:00:19:40:27:ae:0d:5b:81:34:91:5d:24:
                    3e:46:d0:03:e8:11:26:71:3c:fc:d1:56:ce:6e:32:
                    29:2b:6d:41:46:a9:f0:19:2b:1f:9d:e0:93:f7:cc:
                    51:c9:7c:e5:66:60:7f:ac:85:7a:f5:51:ec:42:f1:
                    39:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:81:B2:7D:B5:64:1C:F7:53:D1:28:66:AF:45:03:57:D9:62:9E:63
            X509v3 Authority Key Identifier:
                keyid:A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:bb:40:59:21:d7:24:cf:e2:a6:47:43:4e:13:83:46:4b:dc:
         5b:1c:ca:80:c5:0e:56:17:97:2e:5b:e9:f5:4b:25:c6:ca:8f:
         bc:90:2b:89:fc:11:17:51:93:c4:ec:db:d6:1d:07:02:7d:18:
         3e:ce:de:63:44:c1:01:60:41:86:0f:84:dd:43:82:d9:f1:4d:
         ec:c3:ec:32:12:53:47:b3:f7:be:de:0b:07:34:01:7e:57:55:
         a0:1f:46:92:05:ae:c9:46:c2:90:04:c0:e1:62:5c:07:13:d1:
         b5:e2:c6:42:56:d7:0b:79:32:f4:01:fd:a4:76:65:ae:c9:1d:
         42:2e:b5:08:11:6a:9d:6c:26:95:43:24:53:81:e9:e8:f9:5c:
         39:17:27:ee:9c:2d:89:37:ca:a7:c9:76:d5:1c:e4:36:73:7c:
         7a:71:e6:6d:c0:c6:1d:bc:77:a8:e8:2c:dc:fb:b8:11:e5:73:
         1c:d8:d7:ba:e3:e7:4c:4b:d9:86:cf:5b:bd:25:b6:73:a8:7c:
         22:ca:10:91:1b:fa:92:1c:36:37:8f:6b:5a:77:bb:92:a7:d0:
         c4:7a:09:14:db:d1:f3:54:3f:76:83:56:23:3e:60:4a:b9:55:
         bd:97:fa:fc:20:9d:da:bc:c7:c4:8a:86:bb:c9:33:ed:c5:3a:
         ee:8a:a9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:31 2026 by rpki-client