Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
File:                     sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft (raw, json)
Hash identifier:          cxkFDu7RWW8Y73J4tEv4lEgcvvtdbd9rIahIujeLdDQ=
Subject key identifier:   E4:18:09:9A:B7:0E:10:F9:59:FB:E3:4F:82:75:84:07:D3:51:55:8C
Authority key identifier: B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
Certificate issuer:       /CN=b092425ab7d66bab711fbaa22757377807834159
Certificate serial:       019D9850D8E51ACE702128A6E900937B639F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
Manifest number:          1402
Signing time:             Thu 16 Apr 2026 22:02:08 +0000
Manifest this update:     Thu 16 Apr 2026 22:02:08 +0000
Manifest next update:     Fri 17 Apr 2026 22:02:08 +0000
Files and hashes:         1: ob4RLJ_y_7wEvkHKUSSog54LQNw.roa (hash: Jads8EK5VWX+m/AfmuiROvWcFDNzh7waaTO1j/WWRvo=)
                          2: sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl (hash: DnsbT5iKohuXt6rVvCtyPb3/opvQTOEMVweVoNvFUTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:d8:e5:1a:ce:70:21:28:a6:e9:00:93:7b:63:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b092425ab7d66bab711fbaa22757377807834159
        Validity
            Not Before: Apr 16 22:02:08 2026 GMT
            Not After : Apr 17 22:02:08 2026 GMT
        Subject: CN=e418099ab70e10f959fbe34f82758407d351558c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:57:2f:3d:dc:bf:16:ea:d4:7e:76:2f:00:79:
                    52:ff:f1:d1:52:cf:92:dc:41:be:14:cd:a1:40:31:
                    80:a8:5a:54:b1:af:d5:8b:4d:ad:58:52:be:ec:5c:
                    7e:1c:7c:74:60:15:de:5a:bb:ca:ac:fb:1b:f0:d9:
                    f8:39:5a:25:d3:9a:8e:ef:4f:44:99:1e:67:5c:6a:
                    fb:d7:66:5f:0e:57:19:18:b5:2c:3c:6a:84:da:24:
                    75:5c:c1:c5:d0:dd:42:87:db:ba:9f:40:be:c8:52:
                    4a:8e:9b:a3:8f:49:9c:67:99:dc:c7:97:b1:79:9f:
                    db:67:61:f8:b2:b9:22:3b:8f:14:7f:76:38:ec:5a:
                    b3:72:e0:85:d4:25:2d:77:08:6d:a1:1c:66:c4:e6:
                    96:90:06:53:be:ca:ce:6d:14:49:a1:2b:be:af:d2:
                    02:2a:39:c5:03:2d:03:76:d3:65:c3:54:82:f1:38:
                    59:4d:8d:dd:0a:c3:f9:8c:b8:63:ad:a3:d0:f3:ed:
                    9c:3c:a7:52:80:80:af:02:47:33:7d:12:db:d1:05:
                    ac:8f:3f:59:03:8c:69:27:33:9f:b8:29:e8:b2:e6:
                    df:c1:f0:4c:e2:f8:fa:5e:16:47:6a:48:2a:98:ad:
                    c5:e8:16:9c:1e:81:5c:29:ca:7a:ee:13:4f:10:50:
                    ff:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:18:09:9A:B7:0E:10:F9:59:FB:E3:4F:82:75:84:07:D3:51:55:8C
            X509v3 Authority Key Identifier:
                keyid:B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c4:8c:04:15:7f:b7:5f:03:67:11:3d:04:08:9b:9e:ba:4a:
         6f:a1:04:34:6c:ce:59:59:a7:ec:e7:4b:c0:61:af:62:51:9c:
         e7:94:50:64:a0:08:78:76:21:23:ce:1d:79:ab:32:d6:96:f0:
         1b:cc:13:b5:15:41:a2:11:3b:86:65:86:07:0d:c5:f0:b3:db:
         54:27:41:4f:b6:4e:cc:53:46:94:13:c5:41:cb:36:6a:92:30:
         39:b7:72:09:d0:58:1c:85:d3:44:a3:1e:8a:15:ed:76:6e:37:
         a8:c3:48:44:77:92:94:02:a8:3d:af:28:3e:08:3f:30:10:d4:
         af:cb:27:2f:7b:d5:f4:d2:11:2d:e5:82:00:b9:2a:3a:89:08:
         7c:6c:1a:04:37:20:af:bd:bf:f3:35:9d:23:01:c8:c1:c9:a9:
         c7:b3:52:f2:1d:72:a7:89:d4:d4:0f:fe:55:a3:44:6f:bc:64:
         bf:05:42:93:02:1c:d0:b9:b8:df:cc:b4:80:f0:4d:d8:47:2a:
         01:65:34:a4:5a:f1:94:3f:47:f3:84:c6:c0:63:12:97:bc:48:
         c3:b8:80:37:6e:dd:bd:b2:d9:6e:07:fa:79:a4:43:d3:72:44:
         c9:5c:42:b8:48:9a:92:3c:1c:64:9e:11:58:60:47:e9:b7:b2:
         c0:bc:f7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:48:26 2026 by rpki-client