Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
File:                     TZRvTfIjdJGmjfpAe-QfroS72mY.mft (raw, json)
Hash identifier:          i0nxc++4LakJcf9CnIKPG3id7LzJHARd4SrjjHJV0iE=
Subject key identifier:   CA:E9:3A:79:FC:4C:46:B1:5C:B8:35:79:20:D7:73:96:BE:66:01:6E
Authority key identifier: 4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
Certificate issuer:       /CN=4d946f4df2237491a68dfa407be41fae84bbda66
Certificate serial:       019D9A074FE9F3CCF56C5B5F9CABC0E001F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
Manifest number:          1224
Signing time:             Fri 17 Apr 2026 06:01:03 +0000
Manifest this update:     Fri 17 Apr 2026 06:01:03 +0000
Manifest next update:     Sat 18 Apr 2026 06:01:03 +0000
Files and hashes:         1: TZRvTfIjdJGmjfpAe-QfroS72mY.crl (hash: fueGMA7J0v2yxOm71//xlFkff3dKJWL0iOvdDcOHAFY=)
                          2: ytSYW9uePGMbZ79Lq_rgcm-M5Zw.roa (hash: Y13kOAlNy0Wbk1bHbXfUJdX2fwgc6gfKxcan1EEpTzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:4f:e9:f3:cc:f5:6c:5b:5f:9c:ab:c0:e0:01:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d946f4df2237491a68dfa407be41fae84bbda66
        Validity
            Not Before: Apr 17 06:01:03 2026 GMT
            Not After : Apr 18 06:01:03 2026 GMT
        Subject: CN=cae93a79fc4c46b15cb8357920d77396be66016e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:bd:b6:ec:cc:e9:bf:3b:db:45:fd:81:9c:
                    38:f7:23:24:54:0f:40:34:34:54:44:4a:f3:57:10:
                    e3:dd:f7:35:32:b3:0a:7c:c1:4d:f0:36:20:22:50:
                    45:c8:11:aa:29:22:e2:8a:ed:21:f2:20:02:4c:32:
                    7e:40:59:25:77:b8:20:8a:08:b8:41:62:a7:7f:2f:
                    2f:49:79:0b:ff:d8:9e:26:84:63:d0:60:81:b4:2d:
                    60:2e:13:54:9e:3d:98:2d:d6:95:75:c2:eb:57:55:
                    70:93:92:22:ef:50:fa:95:cc:9c:bc:5a:57:39:1f:
                    bc:ea:b8:3c:9a:41:ec:27:2a:59:8d:33:23:be:6e:
                    9a:ea:4f:28:a1:83:28:b7:54:a8:98:3e:d3:5e:47:
                    1b:3a:6f:0b:b0:8b:a7:2d:bc:3d:ac:ba:4d:40:c0:
                    b8:14:e9:f2:c5:e8:de:d5:49:4b:ab:bf:a2:6e:cc:
                    41:0d:dc:f8:dc:49:76:d5:b9:06:30:4b:ad:17:48:
                    da:8e:9d:db:82:0f:4d:96:9a:79:33:6c:b6:9d:e0:
                    17:86:6d:12:a7:07:0b:b4:00:6f:b4:63:80:3e:35:
                    b7:86:83:9e:0e:3f:e4:88:88:6f:26:04:db:ed:59:
                    37:27:ff:27:de:86:b6:64:88:40:35:99:79:08:5e:
                    c2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E9:3A:79:FC:4C:46:B1:5C:B8:35:79:20:D7:73:96:BE:66:01:6E
            X509v3 Authority Key Identifier:
                keyid:4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:6f:0a:77:20:23:0a:3e:e4:9f:3b:c4:71:36:34:dd:62:6e:
         15:d3:c9:43:6f:95:ae:25:2a:ea:18:51:93:8f:e8:94:69:0a:
         f5:65:b2:db:d7:50:44:65:b4:a0:60:4b:cd:65:13:03:d1:05:
         53:93:3c:37:07:3a:16:d6:e2:8c:b7:ad:ed:5c:aa:40:a3:81:
         fd:99:93:88:45:1e:b6:39:b2:fa:ab:2c:bc:2e:2e:8a:4f:b3:
         b7:47:c6:70:20:5d:e5:73:9a:8f:80:48:1b:2a:cf:cb:a1:75:
         3d:68:31:c9:08:f2:77:79:1f:66:e9:cb:46:45:0b:ae:44:3e:
         5d:13:19:59:15:03:94:e4:21:a5:c8:e1:c6:64:86:7d:01:3d:
         42:98:1b:c7:b4:13:3f:be:7e:45:d9:91:d2:55:0f:e2:0e:70:
         cc:f9:ba:9f:55:6b:65:dc:95:ae:53:a9:19:4e:f0:d3:4f:3d:
         b0:1e:80:3b:78:75:65:2f:47:ba:f1:3d:ec:ea:32:7f:f1:61:
         2b:1d:5b:e5:e5:65:a9:6d:74:ad:62:13:cf:d3:25:b3:ae:73:
         25:46:a5:6a:fb:e2:79:dd:17:81:d5:1b:84:23:b0:95:72:e1:
         8b:26:2c:e3:63:8f:01:94:71:68:2b:d9:63:0f:d0:0d:1e:25:
         ea:2d:70:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:40 2026 by rpki-client