Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
File:                     F42BIe9wTXqXcMPs4eIFYUeQrDk.mft (raw, json)
Hash identifier:          conQf+fdlf+LhDSzNWz+To4Mx23de/nT2vaUcTWs2yg=
Subject key identifier:   D2:46:4C:AC:72:03:34:D0:79:37:27:EE:D6:15:D1:CF:EA:39:42:54
Authority key identifier: 17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
Certificate issuer:       /CN=178d8121ef704d7a9770c3ece1e205614790ac39
Certificate serial:       019D9A3E3E23507E20DDF49D1FE0D9C5BA25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
Manifest number:          081A
Signing time:             Fri 17 Apr 2026 07:01:03 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:03 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:03 +0000
Files and hashes:         1: F42BIe9wTXqXcMPs4eIFYUeQrDk.crl (hash: WKoAmC5UwNIcw8juG5qW0B8uZFfFkhniGXxZodgT9jw=)
                          2: SbtU24bKXJzT0r_Edu3hABMBFRg.roa (hash: uhs0gjYBAZV/9eh8e1DZS32viLByYHa3Altj0TI5SN0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:3e:23:50:7e:20:dd:f4:9d:1f:e0:d9:c5:ba:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178d8121ef704d7a9770c3ece1e205614790ac39
        Validity
            Not Before: Apr 17 07:01:03 2026 GMT
            Not After : Apr 18 07:01:03 2026 GMT
        Subject: CN=d2464cac720334d0793727eed615d1cfea394254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2a:20:32:e5:08:f6:92:cb:53:15:46:43:47:
                    24:d3:3a:c8:4d:f3:e5:81:e0:d4:da:fe:43:f4:ee:
                    b3:ce:82:66:21:e6:37:e0:9b:63:79:49:d3:74:51:
                    f8:24:44:9f:60:5f:79:8b:32:14:2a:c3:46:ac:48:
                    c7:96:0f:b3:0e:29:ab:f4:6a:38:d6:cc:90:16:f0:
                    de:e8:8d:a4:44:34:29:bc:14:0f:89:a9:1d:cf:40:
                    10:9a:0d:a3:2a:a3:90:cf:33:22:87:19:ca:10:43:
                    d5:73:1a:5f:e3:3e:57:a2:8f:c5:bb:d6:f7:2f:c8:
                    49:d6:7e:62:11:d9:84:d8:e0:ba:cb:88:1b:65:90:
                    b2:ff:48:59:68:c7:72:f8:34:10:80:e8:35:4f:af:
                    a3:92:67:12:c8:2b:c1:5c:b4:ac:5d:7e:82:9e:a3:
                    5d:df:05:18:92:77:ed:19:8a:31:95:4a:37:8f:46:
                    dd:a0:00:7d:87:40:c7:5b:03:ca:3a:0f:30:31:d9:
                    5c:5b:01:1e:69:1f:06:be:cd:82:0d:1d:b1:05:02:
                    a7:9c:b8:b3:35:99:6c:a9:12:5c:6a:32:cc:f7:eb:
                    ab:5b:b6:61:57:d7:72:f3:ae:68:d2:dc:f0:ba:fd:
                    f8:e3:30:01:bb:d3:01:e2:2f:ce:ce:0e:ef:18:8a:
                    43:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:46:4C:AC:72:03:34:D0:79:37:27:EE:D6:15:D1:CF:EA:39:42:54
            X509v3 Authority Key Identifier:
                keyid:17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e0:67:ef:ec:7e:84:1c:4b:a4:68:ce:70:f0:07:cc:e5:02:
         72:3a:8d:1f:32:2a:43:08:15:55:67:fb:b2:24:c8:25:54:18:
         f5:a0:54:c4:e3:c1:82:d0:fc:c2:2c:64:56:46:e0:f3:60:92:
         12:b3:62:2e:05:81:80:4f:cd:3b:e9:8a:50:b8:66:fb:80:28:
         fd:0e:0b:af:62:c3:57:d2:ba:78:be:23:73:f5:d8:ce:18:28:
         a7:15:61:c1:89:47:e3:05:88:d0:b2:3b:fc:a7:af:13:8c:9d:
         fd:4c:1a:bf:d7:e9:28:2d:b0:6c:94:d3:ec:54:a9:d2:29:8e:
         b2:83:28:fa:e4:8d:a4:9c:79:7f:dd:83:4a:93:32:b4:a9:43:
         df:fd:6e:6c:16:97:c0:d8:a3:13:49:a3:f3:3a:c5:63:e1:93:
         84:88:b4:db:01:6d:9f:32:0c:68:80:e2:c8:19:95:81:10:11:
         3b:86:96:fd:16:0a:fc:d8:3b:ff:37:0d:8f:3f:82:b3:0a:c3:
         9b:75:59:22:d0:06:70:17:ec:5c:6a:d0:df:7c:a8:c3:41:dc:
         4f:84:31:78:1d:cf:96:31:ad:eb:42:9f:c4:c6:7f:84:14:4d:
         30:9e:f2:fe:7f:28:3a:52:7b:49:55:5b:f1:92:19:07:17:37:
         50:f0:8f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:40 2026 by rpki-client