Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
File:                     TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft (raw, json)
Hash identifier:          TK35Nj1BEmnvtGPoSaHnojz2nziGSiwDkABRmEbL+50=
Subject key identifier:   91:90:D3:5C:5D:1F:69:1E:E4:AB:1D:D8:98:AF:3D:F4:21:6F:1A:8B
Authority key identifier: 4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
Certificate issuer:       /CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Certificate serial:       019D9A753EF408CEEC86D4CBC426DCA32C9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
Manifest number:          12BC
Signing time:             Fri 17 Apr 2026 08:01:08 +0000
Manifest this update:     Fri 17 Apr 2026 08:01:08 +0000
Manifest next update:     Sat 18 Apr 2026 08:01:08 +0000
Files and hashes:         1: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl (hash: dPJxlaSX9Q8ZzSB3ePqLi0AvgyHcjX3cirA5NNe49Co=)
                          2: ayBRUQ4XFp8ceqFrnVdH8JT32Pw.roa (hash: ydKdrH0HwWllY5B18eol6PUwxMhU2Jq/931IBDQs9IM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:75:3e:f4:08:ce:ec:86:d4:cb:c4:26:dc:a3:2c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
        Validity
            Not Before: Apr 17 08:01:08 2026 GMT
            Not After : Apr 18 08:01:08 2026 GMT
        Subject: CN=9190d35c5d1f691ee4ab1dd898af3df4216f1a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6c:c1:af:5e:70:55:d2:be:cc:78:d7:26:f4:
                    6a:28:25:73:23:d7:f4:96:64:02:18:d4:5a:c0:4c:
                    82:4f:93:68:20:4a:52:20:d3:dc:7d:7d:5e:e6:53:
                    48:b2:ea:15:2d:ad:e1:bb:df:38:25:fa:36:e3:45:
                    b3:38:a1:7b:45:dc:3f:3d:76:ba:37:5c:47:a2:6b:
                    f7:ff:82:1e:75:71:d0:1a:39:80:b6:a9:50:b5:3d:
                    f4:c1:b1:10:f4:a1:b9:03:bd:93:6f:cb:ad:73:ad:
                    27:ae:01:9b:8a:a0:0f:18:f8:15:67:a5:70:d4:4e:
                    0f:84:ca:c6:f1:5c:46:d8:ed:71:40:4b:09:2b:69:
                    e3:41:0e:48:40:29:d7:b2:84:1b:be:c3:76:80:67:
                    c8:79:f8:7e:79:03:1f:00:6f:5e:3b:a6:07:60:6e:
                    88:94:d0:ae:b6:1f:a8:11:12:1d:91:ed:69:40:9a:
                    11:83:14:f2:5c:53:4e:c4:34:70:d6:55:17:88:39:
                    24:2c:2b:0b:b2:29:36:3c:05:b0:2d:4c:bd:fc:d3:
                    0d:10:0c:53:34:bc:53:0b:54:7e:2e:aa:f0:83:e7:
                    ef:0a:1d:23:ca:cc:16:0f:14:66:ae:57:e3:09:57:
                    3f:81:85:21:8f:88:a0:7c:e3:95:73:3c:16:2a:69:
                    38:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:90:D3:5C:5D:1F:69:1E:E4:AB:1D:D8:98:AF:3D:F4:21:6F:1A:8B
            X509v3 Authority Key Identifier:
                keyid:4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:cd:67:4d:7c:f8:c8:e7:3d:6e:b6:17:67:e2:9d:41:c1:7e:
         6c:31:bd:19:6b:bd:37:09:b4:df:6b:70:7f:80:6a:77:64:73:
         d4:57:88:85:f6:8c:d8:ec:71:ae:53:f1:68:2f:a4:49:dc:ea:
         15:dc:f1:be:b5:3f:ff:53:37:71:ab:8e:94:da:b5:b1:d0:ed:
         20:e2:d1:e5:73:28:30:96:ad:8d:f7:d0:0b:c2:df:d6:31:2c:
         2f:46:e1:5c:50:bd:9b:c3:e9:7e:3a:f1:91:3a:ed:7c:45:eb:
         cf:87:ad:3f:96:dd:e9:04:26:aa:a6:6c:97:76:c4:ab:42:56:
         42:bf:94:af:e3:f8:0c:86:e5:7b:9f:6c:47:97:ae:39:af:10:
         80:95:86:b7:d9:de:0c:68:87:e9:69:c8:01:cb:c6:fe:80:07:
         64:69:92:b0:86:db:d3:5d:2d:2a:cc:be:21:70:13:a2:1c:78:
         7f:ed:ac:5d:0c:5b:7b:73:6c:56:7c:59:07:b7:64:8d:13:c7:
         11:50:30:37:03:52:40:b3:3e:98:7c:0a:8d:a7:be:db:a1:b0:
         6a:de:be:c8:f7:78:d6:05:e4:52:d1:34:43:33:dc:0f:6c:bf:
         fc:6c:1e:0e:4d:6b:2d:ea:b7:85:b1:19:4f:cf:b1:7f:52:0e:
         8e:81:f3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:33:23 2026 by rpki-client