Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
File:                     8PPwSfPyhFHj4b9ouXT_28jEFMc.mft (raw, json)
Hash identifier:          Cgiti0yAQRi5szFpP+X6hAvzTymRVD/65UH+jolfm8A=
Subject key identifier:   A6:91:8E:6A:92:44:4E:2A:AE:64:0B:75:90:0A:02:B3:0F:4A:D8:76
Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
Certificate issuer:       /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Certificate serial:       019D9962E997174A134EEC7A44B738C5C484
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
Manifest number:          1443
Signing time:             Fri 17 Apr 2026 03:01:29 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:29 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:29 +0000
Files and hashes:         1: 8PPwSfPyhFHj4b9ouXT_28jEFMc.crl (hash: lzCwRJJZyBN7KFf9VFkrjXikMc2mbo8nN4Ha0y/SidQ=)
                          2: bPDQL4TDwBKyo0KglJ1jUDcS2mA.roa (hash: gTJOIMiebmbjMQAf62eTV7rVcUuFKkthtF5Z6hyFDNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:e9:97:17:4a:13:4e:ec:7a:44:b7:38:c5:c4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
        Validity
            Not Before: Apr 17 03:01:29 2026 GMT
            Not After : Apr 18 03:01:29 2026 GMT
        Subject: CN=a6918e6a92444e2aae640b75900a02b30f4ad876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:50:ca:8b:7f:0f:72:ff:7d:07:e6:72:a6:7c:
                    33:f3:ec:e8:53:60:11:c8:e8:62:94:b6:fd:56:a4:
                    e5:50:4b:ee:d8:12:14:cb:e7:45:b3:a0:14:8e:d2:
                    0d:0b:26:00:4a:91:b4:61:fa:8b:5b:cb:88:3f:f5:
                    b3:9e:55:b2:cf:41:ea:73:70:e9:c6:61:c1:37:ef:
                    82:7d:14:94:75:c3:7a:03:c4:97:4f:22:60:b0:6b:
                    43:99:f6:4d:00:53:b6:71:c9:c8:3b:4d:94:ef:11:
                    a9:61:c8:bb:c8:bc:1e:8a:b1:7a:4a:f1:71:4a:46:
                    be:8a:71:1c:88:96:4a:51:f5:1f:03:85:2a:4a:64:
                    f3:73:84:14:f0:93:28:00:f1:02:f6:f6:9e:f1:47:
                    a1:84:cf:3f:7b:62:6a:fd:e2:26:d7:1f:d2:32:98:
                    44:82:23:79:a8:49:ee:6e:65:07:94:83:f3:02:59:
                    11:47:95:e9:97:a2:7e:fa:1c:5e:94:76:95:7f:71:
                    b0:92:dd:34:06:2a:c5:27:75:8f:6f:42:18:67:41:
                    8e:f1:32:0d:db:3c:32:88:e4:87:9a:f5:8b:b8:cf:
                    d2:80:3e:45:0d:7b:6d:ef:72:e7:ea:3c:58:dc:9c:
                    7f:8d:31:6a:dd:65:8d:2b:9f:cd:06:08:72:00:f0:
                    81:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:91:8E:6A:92:44:4E:2A:AE:64:0B:75:90:0A:02:B3:0F:4A:D8:76
            X509v3 Authority Key Identifier:
                keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:92:9a:8d:96:47:e2:8c:27:44:de:49:5d:bd:b7:2f:d9:36:
         f0:4e:15:10:75:01:5e:a0:99:e1:fe:e2:db:c3:a2:ad:fd:f0:
         75:62:73:59:de:6e:f5:be:dc:a0:8f:8e:41:2f:df:3d:2a:a1:
         7e:a9:29:da:5c:9b:2a:84:f2:ab:5d:0e:56:62:1b:8e:5a:42:
         2b:1a:e1:c8:19:27:f4:6d:4c:2c:be:de:97:d1:db:d0:13:61:
         88:db:2a:ad:4c:0b:8a:f6:40:9d:2d:b4:85:b1:e9:9d:5f:67:
         cb:a3:ca:4b:5d:33:1d:1a:29:54:f7:54:9c:04:10:ab:20:bb:
         3e:a0:ef:a9:4e:a8:29:99:44:03:28:4a:b7:16:60:d2:43:56:
         40:49:ba:4f:0e:eb:8d:e8:34:db:53:59:4e:00:e0:58:03:c1:
         99:54:e4:43:60:ec:7f:7f:b1:46:58:14:5f:39:6f:e6:69:c5:
         a1:07:44:fe:cb:e5:81:7e:b5:7f:7f:6c:a0:53:1a:c7:25:ee:
         9c:b8:ec:c9:a4:68:c2:15:78:8f:08:b1:2f:01:8d:fb:0d:5e:
         b9:cf:81:64:8d:32:6e:94:cb:d2:15:5b:82:ad:bb:c4:7e:80:
         64:58:a4:20:14:49:67:ea:19:c1:b4:53:0b:a9:d8:aa:fd:5b:
         34:56:8a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:49 2026 by rpki-client