Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
File:                     9VW6bis9tVIdvHBipYwW3aG58i0.mft (raw, json)
Hash identifier:          g3Fxd7OMumBWcNeZ9wZ7ivAqs6whob4xDXyS0gpeXcA=
Subject key identifier:   92:A4:08:6D:86:2E:88:B6:28:B6:3F:DE:32:FE:56:A4:8B:40:31:56
Authority key identifier: F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
Certificate issuer:       /CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Certificate serial:       019D98BD1C5A1680D68AA88EAC3C1DFA568E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
Manifest number:          0682
Signing time:             Fri 17 Apr 2026 00:00:23 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:23 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:23 +0000
Files and hashes:         1: 9VW6bis9tVIdvHBipYwW3aG58i0.crl (hash: 8u2oSLIjPYWfhpflHynmaI4doshkt9gq3ZlvCzeTAl0=)
                          2: cyWhzyh3zLHJFuzJ5qvmESBkuxg.roa (hash: nSoHpM2xTBolqQJtZsO8W8SsMxuMlo/mxOm1BoRL8ec=)
                          3: zlPMF36fK507KHhaEr_DLJ54RXA.roa (hash: kLxUmeXAHI9feHJRDQlAlUFvp1o7+yM0NCeSQpcomMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 00:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:1c:5a:16:80:d6:8a:a8:8e:ac:3c:1d:fa:56:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
        Validity
            Not Before: Apr 17 00:00:23 2026 GMT
            Not After : Apr 18 00:00:23 2026 GMT
        Subject: CN=92a4086d862e88b628b63fde32fe56a48b403156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3e:b0:92:25:98:3b:46:62:fb:dc:fa:4d:59:
                    8c:61:3f:e7:a9:bf:74:c8:15:46:5b:40:1e:65:2f:
                    29:80:69:ba:2d:1b:a2:c4:a3:55:81:f8:5c:68:56:
                    bc:5f:6c:46:1e:05:e6:81:9e:3f:78:af:65:40:a9:
                    40:be:9f:3f:47:87:9d:07:10:bb:3b:a2:f9:6d:ec:
                    cd:6c:1b:a2:d0:d3:96:65:a5:84:ce:db:c5:49:a0:
                    a8:45:01:4e:43:dc:82:13:1d:9f:3e:ae:9a:6b:75:
                    58:92:9b:1a:bd:fd:cc:fe:ab:25:35:ba:ce:04:92:
                    18:0d:42:24:65:c2:28:08:24:83:75:e7:57:3f:7e:
                    e0:86:a6:09:4c:c4:44:95:86:82:5a:d3:8e:10:28:
                    72:0e:d2:f5:3f:42:ec:ac:4d:b6:c5:14:d3:06:46:
                    e0:19:09:1c:f9:fe:85:4d:84:b7:8f:57:bc:e5:b6:
                    42:b3:46:c6:67:88:39:3a:28:d2:e2:2b:2e:c3:05:
                    ee:24:f5:09:22:db:7f:39:1f:e2:b7:7a:e2:bb:c7:
                    8d:ee:d0:24:f4:9b:38:b7:9e:f7:59:9f:ae:05:81:
                    65:bb:56:98:38:38:28:45:9b:58:17:40:34:eb:81:
                    7a:67:a5:23:46:c7:ff:87:c4:2c:7e:b3:e9:0a:fc:
                    6a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A4:08:6D:86:2E:88:B6:28:B6:3F:DE:32:FE:56:A4:8B:40:31:56
            X509v3 Authority Key Identifier:
                keyid:F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:00:60:86:1d:c9:c6:f8:36:f2:03:38:ef:a7:e1:e7:21:d3:
         e2:83:98:1d:90:63:66:37:ba:7c:ca:cf:ef:ca:22:d8:da:5b:
         c7:89:68:a2:3a:38:7f:9a:9f:2f:c6:5d:77:4a:1d:f2:e3:ad:
         80:6c:0f:1a:e5:a9:f3:ea:f0:8a:2e:1b:44:7d:9f:63:3c:13:
         ee:ee:94:33:21:80:5f:2b:c8:18:91:4b:cd:a1:d7:0a:8f:12:
         71:f8:b6:b3:ed:18:1f:51:8e:eb:92:b0:59:da:be:81:24:a4:
         b3:ad:2b:bd:b7:da:43:80:ec:ec:90:12:5d:81:32:27:94:64:
         3e:53:aa:86:f7:0a:81:1b:f4:d2:5b:0d:22:6e:d7:60:6e:eb:
         dc:49:33:dd:91:01:48:d4:d7:25:19:b3:2e:d2:32:b3:7d:e2:
         84:44:19:5d:55:83:62:48:4a:c5:b8:ee:67:fc:e4:56:c9:75:
         17:08:2c:6f:d0:b9:aa:f5:ad:1f:7f:c7:29:a4:a1:78:35:f5:
         e5:87:e7:c1:a1:b9:1c:10:6f:a8:77:d9:3a:74:f7:d4:12:43:
         fc:70:ba:c9:dd:40:e1:85:22:40:84:25:24:a4:a7:a7:46:ec:
         4d:6f:79:ba:8a:6d:25:17:a9:72:1f:5f:11:7d:11:10:d0:ad:
         fe:58:b6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:15:49 2026 by rpki-client