Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
File:                     SqXjXAXCq1S-dYtshnGGzuFZvWM.mft (raw, json)
Hash identifier:          PE2ii1AQDq4EcqE5BpHwucz0Wfi7G7VZhrja9JKx6Kc=
Subject key identifier:   2A:62:13:A8:44:3E:74:6A:4D:90:80:DC:4D:97:78:0D:67:73:D5:69
Authority key identifier: 4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
Certificate issuer:       /CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Certificate serial:       019D9850AA0B0F5E6F5B76C582442297BF16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
Manifest number:          12BC
Signing time:             Thu 16 Apr 2026 22:01:56 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:56 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:56 +0000
Files and hashes:         1: Gf-9RToHV8wPDoXU7Oara5nxIUM.roa (hash: VsHDJwIPTlkkP+eDBuFbkPtE/oNd7HaXUP1nGykcuDA=)
                          2: SqXjXAXCq1S-dYtshnGGzuFZvWM.crl (hash: QPP0498itgg3ewLi7bGYKkDtUuS1M3mZ5xsVOIg3C6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:aa:0b:0f:5e:6f:5b:76:c5:82:44:22:97:bf:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
        Validity
            Not Before: Apr 16 22:01:56 2026 GMT
            Not After : Apr 17 22:01:56 2026 GMT
        Subject: CN=2a6213a8443e746a4d9080dc4d97780d6773d569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:45:c5:b2:05:5f:aa:8e:a1:cc:f9:9a:64:43:
                    4f:83:44:e1:86:82:59:d6:eb:d4:dd:44:46:6c:df:
                    21:7a:a2:61:5a:dc:3e:05:ab:65:1b:ce:8b:35:41:
                    2a:8e:ea:d2:bf:6e:1d:ba:ca:41:f5:f4:46:eb:ff:
                    68:af:47:bd:0e:a8:00:36:7e:91:91:ff:aa:35:e4:
                    ee:c9:01:cf:ad:6e:43:78:78:0f:6e:32:81:8c:6e:
                    d9:7b:ad:17:13:36:5d:3e:81:23:2b:c8:f5:bd:ab:
                    a2:f9:c9:03:0a:e1:6f:33:61:ce:e1:9d:bd:c1:30:
                    fc:11:58:ca:fd:98:c4:b0:67:b3:75:77:c9:8c:0e:
                    e0:d9:96:23:ac:0b:cf:53:35:a5:0e:52:01:ef:25:
                    fd:46:2e:a9:36:93:5b:ee:31:af:ac:0f:6b:17:8a:
                    a0:1c:d9:46:5e:61:21:45:22:21:03:dd:2c:31:9d:
                    9a:71:4e:32:3c:d7:b8:0a:98:c8:bd:8b:f7:a8:14:
                    5d:65:4d:67:51:a5:4e:1f:12:36:55:2c:c3:60:18:
                    74:fa:d1:22:ab:ae:12:53:33:50:78:06:46:2a:2d:
                    d3:ea:74:4b:9f:4d:4b:dd:91:a7:7b:2c:ec:4a:5f:
                    db:0b:da:eb:6b:cd:9b:77:33:3f:3d:83:c3:58:5b:
                    99:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:62:13:A8:44:3E:74:6A:4D:90:80:DC:4D:97:78:0D:67:73:D5:69
            X509v3 Authority Key Identifier:
                keyid:4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:84:7a:c9:01:91:6e:78:b0:c9:d3:b1:bb:bc:d7:ba:34:86:
         64:43:7c:6f:12:33:7c:b7:27:3c:27:8c:b3:70:b0:16:48:e4:
         34:df:cf:47:3c:49:43:fe:27:b3:cd:79:34:ee:88:eb:25:c7:
         a4:9f:d1:f8:40:bf:c4:27:ef:53:84:47:91:d7:00:e0:09:e4:
         a1:bd:1a:91:73:f9:1c:51:cd:51:9c:f0:71:fe:de:4e:45:87:
         ef:66:c3:1a:1a:6b:19:fc:9d:e5:71:7e:6d:dc:d6:2f:f3:43:
         11:c7:6d:5b:f2:df:3b:97:ce:a5:0b:04:9e:7e:a6:a0:cd:9d:
         09:21:a4:d8:6b:6b:b3:18:d1:1c:ee:f6:2f:ca:51:b1:13:8c:
         91:c3:50:c7:99:de:d3:93:fa:d4:1c:69:29:d0:05:62:c2:49:
         ba:d2:36:58:10:93:93:5f:f0:38:fa:bf:70:1f:79:b3:d0:5a:
         c7:b4:1b:0e:09:24:2e:da:df:9a:71:6e:59:41:60:96:ae:ea:
         18:3d:56:46:fd:88:5f:4d:b6:a2:54:17:09:e2:4a:61:6b:16:
         b9:54:0a:47:1c:4d:23:4b:0a:cf:e8:d2:ff:fb:ed:88:4b:d1:
         dc:a1:35:e2:39:97:7d:01:0f:71:16:6a:b4:2d:2f:43:5f:dd:
         5d:e5:96:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:06 2026 by rpki-client