Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
File:                     q22oNLMssSxL2uM_Zy80jZg_MXY.mft (raw, json)
Hash identifier:          PlUKmS9ZpzJm5NuEGHTSfE6Oj8t6d9NGv7SuMvejeBY=
Subject key identifier:   4E:4C:4C:5A:56:3E:C2:9F:E4:16:94:F6:BA:5F:6C:4E:FB:D3:FA:88
Authority key identifier: AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
Certificate issuer:       /CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Certificate serial:       019D98BD8858F23B8E350BDFF0631DFA7C2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
Manifest number:          1129
Signing time:             Fri 17 Apr 2026 00:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:51 +0000
Files and hashes:         1: a8dxxiPCuafVW1pqgQGmv3vqh6s.roa (hash: rc0rV/NjxsPC/BhNPsXHclt7GZGOVjNNBw3HxehbP5Y=)
                          2: q22oNLMssSxL2uM_Zy80jZg_MXY.crl (hash: yQwTfq+gKw/xcAW+sb62CIG3Gi/I7S5oQOM9j6zO3vs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:88:58:f2:3b:8e:35:0b:df:f0:63:1d:fa:7c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab6da834b32cb12c4bdae33f672f348d983f3176
        Validity
            Not Before: Apr 17 00:00:51 2026 GMT
            Not After : Apr 18 00:00:51 2026 GMT
        Subject: CN=4e4c4c5a563ec29fe41694f6ba5f6c4efbd3fa88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:45:f6:4b:47:2d:4b:b2:92:d6:bf:54:59:
                    84:bf:39:e4:2f:95:b3:20:90:5b:d2:ca:01:7c:de:
                    4e:de:02:12:88:50:de:47:9a:2b:b0:77:35:6f:a1:
                    4e:1e:9e:b4:a2:d5:e6:24:6d:06:d4:50:55:6d:79:
                    bf:81:3d:aa:61:27:05:a3:16:97:e4:06:32:89:4d:
                    fc:2e:46:5e:f5:51:99:98:01:2f:80:75:27:46:0d:
                    ba:ba:fc:42:2a:e8:c6:b0:ee:f3:67:41:87:80:12:
                    a0:17:80:56:3a:9a:33:4a:d3:a3:1b:24:04:d9:d4:
                    25:e3:84:97:04:3b:d3:11:91:e9:21:e5:3f:ce:5f:
                    80:f0:0b:00:f1:41:6d:4e:39:25:f1:86:a3:c8:8f:
                    19:44:e8:be:64:c1:19:b7:05:1e:93:a9:32:56:d7:
                    f0:bf:fe:76:87:19:b7:7e:23:58:9f:1a:1a:e5:82:
                    f1:60:b3:86:e1:34:87:b3:10:58:33:05:fa:59:3f:
                    0c:6d:85:6b:29:e7:67:4e:f6:1b:04:2e:f8:e9:a4:
                    54:70:02:a3:4e:a2:f1:8d:61:8b:2e:90:68:71:fc:
                    31:21:06:c4:9f:92:0c:ad:d6:a2:68:c7:59:c9:06:
                    f2:f8:20:33:33:2b:f9:c0:f1:8e:c0:33:26:d3:ba:
                    1b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4C:4C:5A:56:3E:C2:9F:E4:16:94:F6:BA:5F:6C:4E:FB:D3:FA:88
            X509v3 Authority Key Identifier:
                keyid:AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:87:f4:d7:02:bb:38:98:e3:46:de:aa:da:b2:a6:70:cb:62:
         d5:c6:85:18:f4:b0:08:54:a8:1b:d6:e9:ea:d8:bd:29:c0:d2:
         ff:84:64:4d:06:b0:6c:38:bd:0d:cd:43:dd:b0:85:55:9c:94:
         32:66:2d:8b:8a:c7:93:70:28:5e:4c:80:e3:aa:1d:98:f2:a9:
         a5:8f:d9:78:c7:5f:13:8c:8c:4a:48:58:36:e5:9f:b8:25:91:
         b5:46:32:ae:06:e2:6e:04:be:98:26:e6:25:80:9a:af:f0:4a:
         90:65:c6:9c:dc:41:72:fb:1c:4b:ba:6c:82:1b:c4:44:ef:61:
         8e:0d:ac:6c:a7:fb:06:dc:5c:da:db:00:b3:0b:19:d1:26:7e:
         b0:24:e0:1e:34:3c:1e:dc:29:66:fb:d1:56:72:65:07:e2:03:
         17:76:85:4e:64:a7:4e:4c:59:bb:d8:6b:1e:cd:85:a9:30:f8:
         80:1e:86:df:85:bf:8f:d5:c1:a3:e6:75:e7:9d:29:e5:1f:2b:
         fb:a3:5d:28:cd:ee:99:84:6a:04:93:42:94:7f:de:2c:3f:39:
         b0:e4:d2:5b:72:94:e6:9f:21:71:1d:c7:90:61:c9:00:36:b1:
         fb:ed:bb:e4:63:dc:c8:39:e3:0a:8f:6c:0f:c1:a3:d7:51:fb:
         6d:ff:c9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:03:52 2026 by rpki-client