Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
File:                     Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft (raw, json)
Hash identifier:          2NpwhIa3BggyqqJnhpCuAhh/9Vb7sxt5MCZtztjBGHA=
Subject key identifier:   BC:BD:28:15:3F:F3:B5:14:38:6C:8B:9C:8F:C4:E7:66:A8:D3:61:E5
Authority key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
Certificate issuer:       /CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Certificate serial:       019D97AACC7D77530D5BBAB09074B3626970
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
Manifest number:          145A
Signing time:             Thu 16 Apr 2026 19:00:46 +0000
Manifest this update:     Thu 16 Apr 2026 19:00:46 +0000
Manifest next update:     Fri 17 Apr 2026 19:00:46 +0000
Files and hashes:         1: 24FTYWICcL1IJMQzkDfWg_xAqy0.roa (hash: wR9QeEuSdjQ+0/1YXf2bsDaKWqR9jJk06EOJ2Q73fWE=)
                          2: DuCPfh0BtVEkEb46CmQmkJTEoiA.roa (hash: 4H+ADRlPO/G+o1dwkSRBoJP9og9DDlqIZuQkG2ZaHhA=)
                          3: Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl (hash: N+zIwSaXLWBlhuAHvME+w62ODbMRvxozgWhynHY/cS8=)
                          4: wqS_wfIdBlK7kC9o4zizHf0FBlk.roa (hash: Dvd4isDlS6MYBBiZdCyk9gJMQ1pHNGRCGxx3yyLp9qE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:aa:cc:7d:77:53:0d:5b:ba:b0:90:74:b3:62:69:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
        Validity
            Not Before: Apr 16 19:00:46 2026 GMT
            Not After : Apr 17 19:00:46 2026 GMT
        Subject: CN=bcbd28153ff3b514386c8b9c8fc4e766a8d361e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:54:62:b3:0a:2a:35:f3:8f:96:06:fe:80:
                    3e:e4:31:fa:ff:44:6b:cc:a5:c5:a9:9f:5b:b7:6c:
                    fd:a3:f9:1e:2d:9b:80:0b:02:05:89:b0:f7:18:30:
                    29:ea:bc:50:ff:fb:38:c8:6f:10:57:a0:4d:75:1e:
                    15:67:12:a7:e8:08:d3:9b:c9:61:32:37:cb:a5:84:
                    bd:86:af:bf:ea:9e:81:2a:f7:1d:1d:0b:ee:1d:dc:
                    20:08:05:d6:67:6b:6e:72:57:a6:0c:70:a5:71:61:
                    ce:8e:7b:fc:ef:78:ee:a8:f1:ef:36:71:f0:50:bf:
                    97:a8:c5:b6:25:6d:1f:1f:1d:f9:46:51:87:3f:ff:
                    8e:53:38:7a:27:5d:67:8d:b5:08:a4:ef:f9:f2:80:
                    bd:fc:42:b4:e3:d0:b1:bd:b8:2b:fd:07:90:ca:dd:
                    94:ec:c9:98:50:84:94:82:9f:e6:86:f4:18:9a:96:
                    d0:bf:66:df:c8:3c:f5:6e:28:5e:09:07:13:84:a3:
                    5a:be:21:7f:60:c4:f9:78:df:03:cf:a0:e4:2a:42:
                    e0:79:d1:a2:77:8c:e8:44:9a:13:46:31:c2:b0:5d:
                    0a:84:0a:db:35:68:e2:a7:6e:e2:9f:0b:3a:48:3f:
                    20:9d:eb:d7:3e:6d:14:d8:f8:d0:24:9f:14:eb:4a:
                    ad:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BD:28:15:3F:F3:B5:14:38:6C:8B:9C:8F:C4:E7:66:A8:D3:61:E5
            X509v3 Authority Key Identifier:
                keyid:4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:0f:81:ce:8b:ee:b7:00:8c:69:93:00:1e:a6:91:6d:27:ec:
         f2:5d:cc:95:fe:ee:49:78:84:bd:35:94:5c:79:27:7d:d3:13:
         7b:a6:d4:ff:fa:f9:32:28:e4:0f:a6:99:a5:39:8f:54:09:37:
         21:e7:17:c3:1d:a1:f6:ea:6e:c9:db:e3:86:38:62:35:e4:8a:
         3e:8f:b5:a0:b7:96:13:07:f4:9e:94:ae:e4:75:1f:58:7b:e9:
         b0:81:a1:29:a4:57:3b:ac:92:a7:39:a8:6d:da:87:93:94:5a:
         17:10:52:a8:85:4a:97:47:44:48:93:10:56:ce:9a:62:0a:1e:
         f5:99:f4:27:ba:93:e9:68:73:6d:a3:c3:44:3c:fa:6d:19:88:
         e0:fc:49:59:6b:fc:7a:b8:a3:de:45:c2:6d:0f:75:ac:93:43:
         16:35:ac:99:5a:72:e0:34:46:fd:1c:c3:81:07:08:d2:b2:cf:
         ef:fe:f1:a7:ff:eb:b9:3d:47:a5:17:37:b7:ef:8d:e9:63:63:
         88:68:66:c3:58:3c:ef:e6:0e:05:27:a9:c5:47:07:30:a9:6c:
         e1:9d:11:6f:07:74:28:68:20:aa:86:80:ca:09:55:32:8b:a0:
         7d:69:60:a0:3e:9f:90:29:42:46:ef:82:1f:d3:5b:05:83:e3:
         7e:c5:ab:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:17:20 2026 by rpki-client