Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
File:                     9r15bwtjNc_hKKXPm5fudoCC7Y0.mft (raw, json)
Hash identifier:          kVa6gBttASjbAOniUFz/zzbegQvE/6OBFQmeuQNIoFg=
Subject key identifier:   54:09:27:81:24:8A:CC:8A:43:B2:A5:C5:1E:35:C3:F9:0C:A9:C9:C8
Authority key identifier: F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D
Certificate issuer:       /CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
Certificate serial:       019DA59D19D8038E69B38F2495661104CA25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
Manifest number:          03C0
Signing time:             Sun 19 Apr 2026 12:00:29 +0000
Manifest this update:     Sun 19 Apr 2026 12:00:29 +0000
Manifest next update:     Mon 20 Apr 2026 12:00:29 +0000
Files and hashes:         1: 9r15bwtjNc_hKKXPm5fudoCC7Y0.crl (hash: B0e7JxxSrgRgd+LmiOfU4oU8UQsrvCdb1Bgtf7/+H2g=)
                          2: lGujuiPQvSmFHQAKi24Db9fPtPs.roa (hash: yXgFWbLf2xOQ/uIv3drvR9A3/BacWeZUxwc8Zd5w1cI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:9d:19:d8:03:8e:69:b3:8f:24:95:66:11:04:ca:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
        Validity
            Not Before: Apr 19 12:00:29 2026 GMT
            Not After : Apr 20 12:00:29 2026 GMT
        Subject: CN=54092781248acc8a43b2a5c51e35c3f90ca9c9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f4:b9:d5:81:a2:14:2e:4a:90:fb:a2:70:6b:
                    f1:b9:e8:13:d8:d7:e2:b7:2e:30:4e:0d:18:11:41:
                    f5:a6:d0:71:0a:26:45:8e:3e:26:84:97:6c:66:87:
                    22:91:ea:f1:dd:aa:e9:fd:1c:0a:1b:cd:55:e6:6b:
                    a6:8c:db:fd:59:b6:25:a8:9a:f2:11:e3:6d:30:d2:
                    1f:7f:1a:38:36:ba:b9:aa:bf:c0:c9:26:b9:f7:b6:
                    29:03:05:48:d8:f0:6e:74:80:6b:8a:df:28:b2:fe:
                    c6:8a:d5:49:9d:bc:5c:37:38:d4:7b:41:4c:98:cb:
                    55:09:f3:df:a4:7a:12:c3:5c:a9:9c:9e:33:16:4d:
                    75:9c:38:6a:a2:0d:56:d6:01:0f:4b:a3:e0:e4:ad:
                    35:d8:b8:61:39:d6:80:52:e8:44:59:a2:a3:10:84:
                    14:a3:e2:74:aa:96:35:a9:27:ad:d9:c9:83:72:bd:
                    17:04:75:6d:98:d1:43:a3:db:d4:e4:11:6b:86:60:
                    05:87:09:2c:42:4d:bc:8a:4c:ef:ba:cb:59:93:9f:
                    24:f2:5b:2c:b8:71:ff:e6:87:bc:38:f7:f0:3e:1f:
                    7d:cc:8c:d3:f0:ca:1d:ba:48:d6:53:b2:cf:08:1e:
                    11:f2:01:78:fe:15:57:9b:be:42:cd:d7:41:b3:8b:
                    16:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:09:27:81:24:8A:CC:8A:43:B2:A5:C5:1E:35:C3:F9:0C:A9:C9:C8
            X509v3 Authority Key Identifier:
                keyid:F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ff:79:23:f0:59:1f:56:39:ef:41:2d:41:8f:c4:46:5b:dc:
         da:ce:b5:81:27:b6:9f:48:26:0f:7a:ba:9c:c1:95:ec:8a:09:
         0e:99:02:8f:1e:88:d1:64:a3:78:2f:0e:fc:77:1b:ab:37:cf:
         4a:e0:ce:95:43:8b:0b:85:ed:1c:f7:25:b6:18:df:3f:fb:99:
         0b:e2:df:6f:17:e4:a6:6c:4b:28:b7:0f:38:49:03:7c:89:19:
         af:98:e6:3c:1c:5c:67:06:74:50:9b:5f:6b:d2:b0:fc:1a:69:
         ce:74:53:d8:6a:f2:99:d8:63:53:a3:cd:e4:83:c8:f3:fb:48:
         e8:54:81:c2:7d:3c:75:4d:3c:10:fa:b5:48:c6:06:94:5f:79:
         8d:85:8e:10:3d:f9:3a:39:13:4f:f7:7c:2e:14:a3:eb:c1:06:
         43:bc:8a:2b:e8:a5:49:b3:26:fd:82:81:98:0b:cd:87:b7:d0:
         c3:3f:03:0a:09:e7:60:df:be:f4:b7:a1:3a:d7:fe:ee:85:86:
         fa:c0:de:d5:ac:15:61:95:91:fb:98:7c:2d:4e:95:96:58:04:
         2f:52:4c:1f:c0:80:ea:e0:f9:d3:d6:c7:da:44:e5:df:34:aa:
         fa:c2:52:c2:b9:0d:c3:71:45:9c:14:23:ef:6a:68:0f:4a:df:
         aa:b9:7a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 17:57:57 2026 by rpki-client