Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
File:                     mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json)
Hash identifier:          CCy7MfdmbOQizKedpq3TmfOnov6yErLD4s3JKAMukxc=
Subject key identifier:   A5:9E:79:7D:13:81:8D:EF:A9:C2:73:54:E5:F6:D2:69:81:F7:0F:EA
Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
Certificate issuer:       /CN=984b690d6dd3b0faece03bf208f0030e338c2216
Certificate serial:       019D98F40F47583729CC0CE4CB0ACDEC05DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
Manifest number:          1044
Signing time:             Fri 17 Apr 2026 01:00:24 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:24 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:24 +0000
Files and hashes:         1: G8esPcMzQ9AFE_Fw8xl_QXTlOTU.roa (hash: 3RDVfSY7ZJX5UewWPelwEVlTR7B8w1TOwr419YQ9XiI=)
                          2: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: GPV3tGOaTqF3VW7Okjz+6xnnFQji0AkdQXjd8H87hJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:0f:47:58:37:29:cc:0c:e4:cb:0a:cd:ec:05:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216
        Validity
            Not Before: Apr 17 01:00:24 2026 GMT
            Not After : Apr 18 01:00:24 2026 GMT
        Subject: CN=a59e797d13818defa9c27354e5f6d26981f70fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:18:77:e7:66:6a:09:8e:e9:f2:6a:a9:9b:2d:
                    52:fc:37:1d:55:f1:34:83:33:98:9a:85:b5:96:d6:
                    9d:f8:1d:25:27:b8:03:eb:94:bd:1c:7b:04:0e:de:
                    6c:b2:ca:6a:33:23:54:55:57:10:b6:f1:44:f3:73:
                    cf:da:c8:3a:1e:34:7a:5d:7f:57:40:27:02:8a:ce:
                    aa:73:46:fd:0b:89:7b:72:24:35:45:6e:3c:63:a9:
                    3c:08:de:71:b4:3a:67:71:20:a6:b0:c8:4a:87:9b:
                    9e:9e:e5:36:c9:2f:e0:b5:2e:9b:b3:66:11:1c:0c:
                    99:a7:b1:3d:ea:d7:92:f6:53:7c:bb:2b:a7:b8:5b:
                    85:4c:60:a1:8d:68:00:6b:8c:30:4c:65:bc:a2:7e:
                    51:93:8f:6d:10:e7:a8:33:d5:6e:b2:f9:4f:f2:a1:
                    3b:85:71:28:7d:89:28:b9:de:7b:89:06:88:6b:48:
                    17:7a:a9:f8:b3:f7:64:a0:ab:1f:96:fd:72:d5:dd:
                    23:41:1d:24:18:8d:b4:c5:e3:35:b3:98:2d:72:fe:
                    11:e8:ae:4d:2a:c8:41:18:68:e9:7f:9a:ed:dc:df:
                    71:4b:61:2e:30:90:40:00:f4:fa:0a:94:a1:05:13:
                    5d:55:4b:fe:ed:da:bc:91:ce:94:87:bd:f2:2a:43:
                    51:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9E:79:7D:13:81:8D:EF:A9:C2:73:54:E5:F6:D2:69:81:F7:0F:EA
            X509v3 Authority Key Identifier:
                keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:8b:12:d5:27:0b:29:f5:c9:7b:b6:75:44:5c:51:e9:dd:8f:
         3c:06:f3:ad:a1:9f:ab:c5:b6:e9:d5:f0:ee:a2:5d:3a:67:b1:
         a0:f7:c8:de:42:74:15:c6:77:0d:a5:d8:9a:15:36:36:07:42:
         03:be:20:22:e3:9a:46:2f:f4:9a:7c:72:d5:5c:32:3d:ad:89:
         db:09:0c:3e:ca:44:cb:bb:d9:00:b4:e2:cc:ec:1f:e4:56:84:
         74:94:ae:7c:92:34:06:be:9b:27:3d:fc:05:83:15:ce:d8:46:
         0f:c1:d1:f8:33:14:9e:7f:04:4f:42:83:9b:30:97:b3:f0:9d:
         9b:fc:55:0d:f8:1d:3f:69:18:59:6f:a6:81:27:a1:dd:18:14:
         11:cd:65:e3:80:ee:20:50:2d:30:90:e5:9d:61:21:66:66:bf:
         63:80:1f:a1:ce:67:e2:dd:42:5a:7d:3c:4a:f0:a0:77:78:fa:
         a3:a9:2e:e0:1f:d0:a1:f5:cb:75:7e:49:1d:75:fa:d3:76:5e:
         7f:ef:44:c3:40:db:8b:98:c0:3f:6c:d0:1c:35:c6:b6:ae:72:
         b1:fe:6c:7d:b8:c4:1b:2c:b0:c1:d8:5e:b3:46:3a:5d:ae:1a:
         ab:ba:00:b2:eb:50:24:a4:c1:aa:57:5f:a5:44:52:21:00:cb:
         60:3c:30:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:01:26 2026 by rpki-client