Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
File:                     xvU8A9L05_B6geqQPs7wHWjGgTc.mft (raw, json)
Hash identifier:          9pf/uor+wZqqKFuiktagbV0+xtXE+OxzXZNR5oLVMiI=
Subject key identifier:   D7:37:10:1A:6C:15:F0:91:63:81:B1:57:D5:61:C9:3C:08:85:6E:7D
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Certificate issuer:       /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial:       019D9AAC49879EE205F2791932FB39D8857A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
Manifest number:          09F4
Signing time:             Fri 17 Apr 2026 09:01:15 +0000
Manifest this update:     Fri 17 Apr 2026 09:01:15 +0000
Manifest next update:     Sat 18 Apr 2026 09:01:15 +0000
Files and hashes:         1: DBxRlw6IhMH5NUq70pzr0bbq4w8.roa (hash: QenFQF90vxZckg2RZFWlAslYI5ZZf31kvjU2F0kLhfs=)
                          2: WArGNGelr1r7NS84iUickHFqYnk.roa (hash: F549c5qhlHTdQg1HJuYk5UKg7MGhA9lxMR7V6QvPJBo=)
                          3: sWuhYoiSmA6tnujQsYnkZ5MAhAk.roa (hash: ZVA4MvGdgvPLSJ8Vi9YqZCQSkNRcAKBUxh0NO1bCuj0=)
                          4: uQzutUAf-r2QuULAJhXjnmwt7ng.roa (hash: 1veFTEsZ6F5oDeCmJlGSZOhtEnYT9oSi6cqBPJz1hiY=)
                          5: ua-SYQJ09JP0CrjN-4qrwgoyzC0.roa (hash: o6Eyyurglw8wGzE15d5TZBGXiOCrJZh1nJgMRDhcRpA=)
                          6: xvU8A9L05_B6geqQPs7wHWjGgTc.crl (hash: I5c/0YILtS8bMrAZ/uniINoC1mdwRlE30IFFyyBpbgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ac:49:87:9e:e2:05:f2:79:19:32:fb:39:d8:85:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
        Validity
            Not Before: Apr 17 09:01:15 2026 GMT
            Not After : Apr 18 09:01:15 2026 GMT
        Subject: CN=d737101a6c15f0916381b157d561c93c08856e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1a:45:d3:06:c0:75:65:38:b5:81:a7:ae:92:
                    54:a7:f4:25:9a:cc:de:97:1e:24:ac:d1:7c:5e:db:
                    36:a6:6b:91:d5:31:fc:46:a3:59:95:cc:4b:86:0e:
                    67:28:c9:a7:ad:f0:d7:f1:9b:be:72:db:0b:19:af:
                    79:94:60:da:e5:84:3f:db:c3:22:5e:3f:06:7d:03:
                    d7:d0:48:41:79:01:18:b1:90:4c:be:29:de:2f:b9:
                    8b:f7:30:b2:d3:3e:87:99:d1:49:94:d2:53:65:fe:
                    22:9c:2b:f5:9d:84:82:a1:b1:1b:77:60:35:fd:fe:
                    10:3b:f9:5f:b1:e1:98:65:5f:9c:73:41:7f:04:4d:
                    73:24:17:7b:3e:71:73:02:8a:76:d4:34:9f:69:ce:
                    b7:5a:e8:99:a0:5c:2e:ca:d8:1e:f0:2a:16:ed:30:
                    a5:db:b2:53:6b:df:45:6e:70:e6:b4:dd:47:5a:5f:
                    af:cb:1f:19:bb:e5:05:f3:9c:db:c4:67:6e:c3:7c:
                    5b:9f:6d:dc:a3:87:0b:09:15:f0:5d:04:ab:26:d6:
                    bc:0d:cb:2a:44:10:de:73:3b:32:3e:7a:18:1d:47:
                    c1:7c:35:6e:18:fa:a6:8d:37:6c:cf:58:c5:3c:31:
                    96:4e:0a:cd:dc:ad:d0:17:04:cb:22:d9:46:67:53:
                    6d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:37:10:1A:6C:15:F0:91:63:81:B1:57:D5:61:C9:3C:08:85:6E:7D
            X509v3 Authority Key Identifier:
                keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:bf:ca:0c:4b:8c:49:28:ae:ae:4c:5a:f3:10:b5:23:e7:dc:
         05:1b:d0:56:e0:33:b5:d9:9b:15:f7:d4:f1:84:13:55:03:be:
         c4:9e:8a:f2:f3:83:e1:db:a8:56:87:2a:34:c3:6c:0c:15:59:
         63:f4:cf:3b:e7:82:24:d7:7b:e9:58:fa:42:58:00:23:b9:62:
         d2:53:02:1e:87:d0:46:e9:26:43:42:28:51:16:40:5b:0e:f3:
         33:85:c9:57:ce:70:ac:43:cc:44:17:d6:4d:dc:43:56:bc:4d:
         d2:da:3b:be:1e:57:65:2e:46:99:41:87:a7:f6:b0:cf:52:c4:
         b5:8f:a0:18:94:3f:f6:84:37:f7:50:6f:27:67:a0:ff:da:8c:
         cc:fe:22:0c:68:a8:88:86:41:05:b9:55:41:d0:fa:18:66:cb:
         fd:e9:31:d3:20:59:10:22:e6:12:ba:3f:37:8a:27:5e:73:6d:
         8d:e6:96:07:dd:e9:ab:d2:6a:dd:2f:22:b1:4c:dc:e2:66:f8:
         41:02:45:86:f9:95:80:fc:2f:50:32:a6:4b:17:d9:dd:83:5b:
         a0:01:89:de:0e:ea:3c:67:2d:e2:24:1b:e9:1f:14:5e:d4:d8:
         51:5f:46:ed:3e:11:3c:a2:87:29:d4:df:40:83:22:9e:a3:26:
         51:6b:cd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:58:15 2026 by rpki-client