Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
File:                     AsSROCOjGf66InDhuiygnkNb1Vs.mft (raw, json)
Hash identifier:          luULTCJVF5iUrcIitnozfQ+DcjhVSFPtoYdlOaRGCRE=
Subject key identifier:   23:2C:B9:D1:55:1E:3F:05:5A:B5:D0:4E:F6:11:B4:90:96:11:35:C3
Authority key identifier: 02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B
Certificate issuer:       /CN=02c4913823a319feba2270e1ba2ca09e435bd55b
Certificate serial:       019D97E2769A766F14501DED2BDE31CCAA2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
Manifest number:          1577
Signing time:             Thu 16 Apr 2026 20:01:34 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:34 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:34 +0000
Files and hashes:         1: 78GH541y_GC91MG56lJ3e17d5jY.roa (hash: i45PmY0T64j48BiGwibORCNORjlWsT5N8M4MLmyvoJs=)
                          2: AsSROCOjGf66InDhuiygnkNb1Vs.crl (hash: J2/iLoTW/SFa9c5D+GoFmryducLzJ8qOe4WvNWrKLf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e2:76:9a:76:6f:14:50:1d:ed:2b:de:31:cc:aa:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c4913823a319feba2270e1ba2ca09e435bd55b
        Validity
            Not Before: Apr 16 20:01:34 2026 GMT
            Not After : Apr 17 20:01:34 2026 GMT
        Subject: CN=232cb9d1551e3f055ab5d04ef611b490961135c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:65:cf:80:29:77:5c:6e:34:1e:47:c3:07:3c:
                    c9:ad:38:e8:5f:f3:20:43:23:f0:da:cf:2b:e6:33:
                    a6:f3:c1:cd:29:d0:61:51:e4:f7:d9:d5:d8:58:f8:
                    f1:13:06:17:16:99:b6:aa:d9:10:2b:48:39:eb:f2:
                    dc:ec:d0:42:52:9c:bf:08:b0:e6:f4:e5:a4:a8:4f:
                    34:0b:20:62:52:b8:8d:cf:63:a1:38:f3:96:21:02:
                    b3:c3:91:6b:e5:fd:a0:c2:0d:17:ec:48:ba:70:9f:
                    30:02:6a:0b:18:44:a2:5d:22:f8:4d:8b:d9:82:74:
                    79:2e:48:f6:8d:8e:c8:b1:62:1f:da:54:7c:71:25:
                    3a:61:44:9a:25:1d:0f:4d:96:70:bf:99:fd:d2:7f:
                    9f:e2:1e:18:1c:e7:67:09:86:2e:18:de:ee:00:34:
                    d1:37:0d:dc:d8:ce:ab:73:88:67:6f:ea:22:37:c7:
                    af:df:6d:61:a7:1d:0f:a4:f1:d8:10:e0:f8:22:72:
                    c9:03:28:44:fa:cc:fd:f7:95:92:ff:18:fd:ed:82:
                    c4:28:cc:82:c0:29:1a:41:bd:0a:1c:3a:d3:b2:8d:
                    08:45:cf:a3:71:53:6a:ef:2b:82:c0:07:2c:b7:db:
                    b4:2d:6d:06:f2:53:a1:b0:cd:89:e7:53:a1:71:7b:
                    20:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2C:B9:D1:55:1E:3F:05:5A:B5:D0:4E:F6:11:B4:90:96:11:35:C3
            X509v3 Authority Key Identifier:
                keyid:02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:5f:c7:00:db:18:3a:8e:f4:69:83:48:a3:e3:3b:07:36:29:
         f9:05:dd:8a:71:27:e3:9d:6b:0c:d1:ef:1e:e8:c4:0b:37:b8:
         5d:4c:98:54:40:61:c0:77:35:68:3f:88:cf:19:ec:60:b7:a7:
         b7:ad:35:95:db:da:02:ff:63:6a:4c:6d:31:8b:25:c5:9d:44:
         d3:a2:e2:ee:e8:ad:d5:8d:fd:c5:61:e1:a1:18:d4:da:ec:3b:
         ab:21:03:80:c5:2f:80:69:87:2c:87:0a:a5:19:90:bb:7c:c7:
         7b:55:c8:9c:6e:64:47:06:10:c9:fa:7e:cf:de:66:47:d3:ae:
         19:6f:3e:ce:be:ec:73:1a:0b:cb:1a:89:74:50:88:73:ac:06:
         23:c0:06:74:71:b7:c1:6a:17:3c:cf:b2:6e:eb:44:6b:7e:7a:
         a3:28:31:78:48:df:78:c6:bc:3f:89:af:c6:c0:fc:dd:94:a8:
         5c:38:bf:22:35:be:dc:a3:e7:69:76:9b:bf:28:7a:81:6c:27:
         61:68:d6:86:a6:b7:94:73:ba:17:3b:2f:70:0b:5f:6d:9c:d4:
         30:c0:d6:a2:36:8b:e3:08:8c:7a:e1:ff:3e:3e:f9:5d:68:e7:
         3a:47:39:1c:a1:de:da:3a:a7:1b:61:fb:75:f7:09:af:07:70:
         21:be:5b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:48:19 2026 by rpki-client