Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
File:                     fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json)
Hash identifier:          XVPW9FiRP1t/4KcOEPXBo7ZU5sN/pqBu+UxrA0ZLHso=
Subject key identifier:   18:45:D2:E6:5C:87:0F:8F:08:43:31:FF:8B:B5:61:9D:00:21:B2:AD
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Certificate issuer:       /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial:       019DA4538C52D7B06109F1762EAA3744B9AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
Manifest number:          087D
Signing time:             Sun 19 Apr 2026 06:00:31 +0000
Manifest this update:     Sun 19 Apr 2026 06:00:31 +0000
Manifest next update:     Mon 20 Apr 2026 06:00:31 +0000
Files and hashes:         1: JuhHdC_-wskYknvP7LIY1ggd8So.roa (hash: Qx3w+8OYL4pNm6xzXbZj9QOdHwp0WRkNESd9pe1uoik=)
                          2: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: +6nSDzejZbWwBkoGB4Hr61Z5yJmg9u1SMEe0/XdZ4D0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:53:8c:52:d7:b0:61:09:f1:76:2e:aa:37:44:b9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
        Validity
            Not Before: Apr 19 06:00:31 2026 GMT
            Not After : Apr 20 06:00:31 2026 GMT
        Subject: CN=1845d2e65c870f8f084331ff8bb5619d0021b2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:45:8e:73:9f:b8:99:0c:7d:9a:4d:6d:dd:
                    24:63:45:ac:2f:c9:82:39:db:33:d9:2f:84:9a:d7:
                    7b:d3:95:83:84:65:ab:65:9d:96:63:88:a0:7c:4c:
                    84:86:5a:cf:66:f2:26:c1:76:5b:76:8a:ef:16:dc:
                    7b:75:71:17:b1:9d:74:5e:13:f6:44:40:40:b9:e9:
                    78:1b:61:61:f4:5f:61:88:f0:8c:c5:46:4e:b3:79:
                    13:f9:cd:89:1c:c5:b7:56:13:8a:03:0b:16:81:55:
                    9b:d9:c0:40:7f:08:6e:d4:98:af:58:bb:7d:e4:b3:
                    6e:a7:a0:1f:0a:45:dd:5d:01:3b:f3:bf:8f:01:8f:
                    53:a5:47:d3:18:4b:a7:6c:68:0e:b6:a8:2a:84:61:
                    c2:ad:bb:98:1e:27:1c:d4:59:3d:d9:9d:e1:6e:2f:
                    97:85:6a:5f:d1:22:5d:0d:e3:6d:cc:9a:bb:15:40:
                    97:e1:64:e6:eb:eb:6f:b2:1b:af:f2:2d:64:25:9f:
                    e1:ac:a0:b2:c6:96:f9:d2:ff:11:02:fd:88:26:f6:
                    e3:c4:ad:3e:e9:3c:f3:9b:db:a6:f7:76:d3:36:45:
                    21:b3:b5:1e:23:c0:d8:83:09:68:ef:3d:21:12:ac:
                    2d:3d:db:a7:60:bb:8e:5f:f9:d4:0e:16:95:f8:71:
                    87:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:45:D2:E6:5C:87:0F:8F:08:43:31:FF:8B:B5:61:9D:00:21:B2:AD
            X509v3 Authority Key Identifier:
                keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a6:4d:7e:1d:8f:ec:65:03:1f:bf:c1:9d:a6:7a:92:2e:2c:
         77:0e:27:11:26:b6:9a:a5:65:75:68:89:4f:a7:0e:10:08:bd:
         3e:6e:bf:1b:ba:c0:4d:55:55:16:85:88:c7:d7:af:1a:33:3a:
         4a:0a:c4:f6:c2:57:fd:4d:88:80:1a:f3:d8:11:c6:38:88:f1:
         86:eb:81:bf:5e:d7:f5:b4:32:ab:a4:65:22:a4:f5:13:32:ec:
         f5:d7:96:87:c9:42:70:eb:92:55:6c:0f:05:4a:56:81:06:68:
         19:5e:38:18:77:e8:d7:cb:70:96:74:0f:d9:4e:02:a0:3c:fa:
         a3:9f:97:e6:4a:d4:5b:6b:aa:eb:f3:6b:a0:a1:ed:7f:ed:26:
         fd:31:07:5b:91:6e:a8:d5:64:71:74:de:87:34:77:a2:ba:e3:
         9e:be:cf:0a:70:88:06:b1:25:d1:b7:82:53:83:8c:96:7f:4f:
         6f:d1:ec:1f:56:78:49:25:9e:0d:c1:4a:63:ab:a3:11:12:eb:
         d5:8d:4b:1a:04:eb:05:c1:f8:05:51:20:fa:ef:d0:5c:56:de:
         5a:c8:db:75:41:67:6f:33:11:0f:cf:6d:90:87:74:91:2a:ce:
         11:3b:c4:2e:33:b1:e5:5a:98:5a:25:61:04:8e:6f:8a:17:f4:
         e0:ce:99:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:29:31 2026 by rpki-client