Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
File:                     IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft (raw, json)
Hash identifier:          ct+6eVn8ZZh0DksFl6aNJRt7Lvt4sbOZd8EmLLpTdZs=
Subject key identifier:   76:B9:5C:1D:DA:35:10:A2:20:47:12:9D:44:2F:34:E9:D6:63:AA:B3
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Certificate issuer:       /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial:       019DA3E6912AFF5A971F4F6B9B29E1D95B7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
Manifest number:          179C
Signing time:             Sun 19 Apr 2026 04:01:29 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:29 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:29 +0000
Files and hashes:         1: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl (hash: SSKGBTybV7FXcoHyVRACvEbuPpbOyNF/WI6RHjgirCQ=)
                          2: VND09LSiHkpjSOuhfnkKXr1ycfk.roa (hash: EuKqokjCANLNooQ3HgGRZe/o74jjpFvSm4Mcmm5yRzA=)
                          3: a8PSnoMbEUhv4Faq7MVolsfXT_Y.roa (hash: BPdIhgn9ulm4J7RgTCmSDSsMLRstDEKHEvI4iWcZR7s=)
                          4: u26fRlT_magCXskBSsLbW-Zc4HE.roa (hash: 9IYpduU01RzT9y1ftFaznGYathxT6zXqQawir2B1XDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:91:2a:ff:5a:97:1f:4f:6b:9b:29:e1:d9:5b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
        Validity
            Not Before: Apr 19 04:01:29 2026 GMT
            Not After : Apr 20 04:01:29 2026 GMT
        Subject: CN=76b95c1dda3510a22047129d442f34e9d663aab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:fc:1c:11:a7:98:3d:f6:4a:a3:78:8f:aa:
                    e3:c9:e8:d8:b4:b5:52:b5:2d:bb:39:26:70:c4:aa:
                    34:28:f2:87:e4:51:b1:c0:af:7b:b2:b5:58:3c:7a:
                    35:df:e1:d2:be:ea:a2:f3:f8:44:a4:04:f0:0c:de:
                    b6:4b:a3:15:1a:ae:73:43:c4:6c:a2:3d:2b:38:dc:
                    f9:6e:9e:61:ca:2b:44:99:a7:c6:3f:69:50:70:56:
                    2e:11:ad:41:35:78:5a:11:a8:c9:23:55:f0:ef:9a:
                    e3:dc:61:07:4a:fb:2f:c8:72:a8:26:f1:04:c2:04:
                    13:de:0e:34:26:df:0e:8d:91:ec:bf:33:ec:71:b1:
                    77:3b:80:d5:de:9f:36:dd:9c:54:fd:ac:2c:2a:0b:
                    a6:44:95:9b:a4:f9:30:54:fc:3e:1f:1f:44:63:61:
                    01:aa:80:70:38:f5:b2:34:0c:bd:59:9e:0b:05:97:
                    4b:3b:c4:ec:a6:19:d1:9e:41:9d:5f:a3:c7:bd:1b:
                    02:85:46:57:9c:ed:61:5c:b3:b8:bf:c4:e3:a3:04:
                    d5:16:23:78:93:8a:6e:d8:11:b9:5e:90:30:7d:26:
                    5a:18:fe:b3:68:66:97:c0:dc:8f:39:4e:a9:98:94:
                    32:f0:fc:88:09:b3:de:53:68:8f:91:94:0c:25:19:
                    b2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B9:5C:1D:DA:35:10:A2:20:47:12:9D:44:2F:34:E9:D6:63:AA:B3
            X509v3 Authority Key Identifier:
                keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:12:56:f4:b4:f5:b2:e3:6b:37:57:a9:9b:fc:8b:0b:56:e2:
         92:a1:f5:03:67:85:27:8b:e0:cb:03:77:a7:cf:0b:bd:26:f1:
         49:c4:c3:b7:5d:27:43:ce:8c:99:6f:a8:a7:ca:d2:93:07:87:
         b5:03:aa:30:59:24:df:3d:de:25:3a:d8:ef:df:50:3a:33:d2:
         1b:db:07:f5:4d:73:84:4f:fc:74:fd:6c:08:23:19:8b:fa:bc:
         b8:14:d9:77:78:04:9d:0d:7d:74:18:37:7d:88:fd:ca:14:d2:
         e4:18:19:5d:2a:cf:2e:6d:ac:ef:52:9b:69:bf:32:e7:e8:f2:
         61:4b:62:c2:54:8c:6c:1b:9a:55:b7:6c:38:8b:21:f3:44:00:
         8f:e1:c8:9f:08:60:e8:1a:85:9b:c2:4e:33:0e:ba:ec:ce:6a:
         d6:17:3c:ba:60:5f:d4:40:63:12:02:4d:6f:a5:ac:9c:a2:f5:
         e0:b2:41:c5:3e:41:97:17:d3:c7:3c:7f:28:9e:f4:f1:e7:f2:
         bb:8e:3e:fe:3b:d7:ed:ec:07:1c:98:23:c7:c4:69:b7:12:03:
         1c:10:11:f7:82:de:1e:cc:31:68:7c:e5:00:3e:2e:71:c6:ec:
         c3:6e:97:8b:b7:c1:99:2c:7b:1f:38:12:20:f2:c3:8a:25:8f:
         c4:42:0c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:50:34 2026 by rpki-client