Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
File:                     Rzd55qd8flghMZh2TOKsDmvuYjY.mft (raw, json)
Hash identifier:          UlR5Sq4sKsiXnxA5VuUQFYifz2YChbZ4YqpIKgyCuo4=
Subject key identifier:   21:74:D0:87:A8:23:9E:38:62:4B:99:80:63:20:F1:17:CE:C8:22:49
Authority key identifier: 47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
Certificate issuer:       /CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Certificate serial:       019D9B504AA4278F9C55B56472585224E265
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
Manifest number:          03A1
Signing time:             Fri 17 Apr 2026 12:00:23 +0000
Manifest this update:     Fri 17 Apr 2026 12:00:23 +0000
Manifest next update:     Sat 18 Apr 2026 12:00:23 +0000
Files and hashes:         1: 2z-c3MpGdlvNK98wFJ-FhUpQXTk.roa (hash: jD+P5ccWJZqhrEzl8gpwfaAxbm2916uuSP5OIhhxw0M=)
                          2: Rzd55qd8flghMZh2TOKsDmvuYjY.crl (hash: IOykbse01hvvdkle2WHAr4Mgb3zVj4wufJ3iA3Ldd3s=)
                          3: nLrwE_Xuj7FEwaVr2PMMyDOjcsM.roa (hash: CdwJHzzCL/DT7oBvlE4BtdzceymGADOR4McXAN25EBU=)
                          4: zyBvK059nS2Wwp2gBqWo7Jx-YsI.roa (hash: YgqvlJooFLvwv+N90i8hB60uaCFF3pjZWTtq+9rP5ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:4a:a4:27:8f:9c:55:b5:64:72:58:52:24:e2:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473779e6a77c7e58213198764ce2ac0e6bee6236
        Validity
            Not Before: Apr 17 12:00:23 2026 GMT
            Not After : Apr 18 12:00:23 2026 GMT
        Subject: CN=2174d087a8239e38624b99806320f117cec82249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:37:7d:ca:b7:30:f8:ff:d5:2f:f4:42:6c:d2:
                    28:11:e7:70:19:a9:f5:d4:5a:71:c2:b5:e1:0f:96:
                    0c:e8:9a:e2:07:e5:f2:1b:fa:3b:76:1c:1f:58:5f:
                    e7:92:c1:eb:07:7e:f8:7a:2d:b7:a6:e3:9c:b1:10:
                    5e:14:72:e7:9f:8f:2e:a9:5d:09:0f:44:51:77:5d:
                    27:6b:de:02:b5:18:c8:67:ba:e0:56:45:ed:57:5a:
                    f9:6b:48:5a:ad:8e:1d:9a:37:6d:9e:f8:fc:be:ac:
                    5e:50:5b:6f:85:fd:4c:3a:78:19:df:cb:d0:6e:51:
                    35:7e:3b:90:76:10:d9:34:2c:3c:07:bd:aa:6c:15:
                    1d:c9:cb:2c:4c:9c:9b:fc:62:71:05:08:3c:9d:fa:
                    bb:95:38:9a:8e:b9:64:53:d9:90:3d:ed:ee:49:26:
                    4a:4f:1e:07:2c:19:17:af:c6:ff:d9:98:33:0c:79:
                    2c:1e:11:38:85:28:6a:d8:dc:e7:41:b1:5c:06:c5:
                    d1:67:5b:c5:1d:7c:e5:9f:92:6a:82:c1:85:40:61:
                    81:b0:4f:c6:d1:bf:fc:80:e7:83:6e:db:f8:f5:ce:
                    3c:b5:4f:0c:6b:c7:cc:f9:41:89:b3:ae:4d:5f:91:
                    0e:4a:20:dd:b4:b7:21:29:54:77:31:05:3f:6e:48:
                    4f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:74:D0:87:A8:23:9E:38:62:4B:99:80:63:20:F1:17:CE:C8:22:49
            X509v3 Authority Key Identifier:
                keyid:47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:90:a8:33:e2:30:81:c2:41:a1:db:70:1e:1b:ae:a9:20:f2:
         e8:5b:0e:44:4a:90:4d:a0:5d:77:60:83:99:cd:29:ac:2f:58:
         a1:1d:c9:56:07:87:fa:54:44:bf:98:4f:4b:f1:bb:63:e6:38:
         01:98:71:6a:a8:5c:a2:a8:de:17:40:4d:c7:af:3c:a3:61:65:
         c1:3c:78:6d:9b:72:79:0f:9a:91:52:43:01:c1:55:14:80:45:
         79:67:a2:7a:d0:3b:00:8e:f0:ee:8d:cc:c1:b7:73:02:52:df:
         cb:bf:52:5b:c9:a7:b3:ad:b4:bd:dc:fd:2b:58:e7:db:1d:16:
         69:c8:7d:b4:c6:5d:6f:4d:af:d1:59:a2:6e:e6:12:6b:5e:e9:
         32:1a:13:41:55:02:30:c6:c2:6b:86:8f:24:b2:06:3f:8b:c7:
         a7:2a:c5:f1:12:12:a4:af:46:e4:85:a0:bc:d4:8a:3d:da:77:
         3a:2a:35:27:c4:23:af:5b:eb:66:15:1e:52:a3:42:1e:f0:72:
         1b:4f:fa:bb:f6:3a:7c:05:4a:be:ed:52:3d:23:d0:7e:60:38:
         a2:05:34:92:17:a0:c9:9a:21:f7:a7:c6:e6:d3:ef:61:3e:37:
         38:0d:6b:f1:2b:1d:11:90:2d:9a:d2:c6:80:dd:1a:1a:82:77:
         ed:e1:fb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:14:56 2026 by rpki-client