Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft
File:                     TyESy_bcyN00ROTs7ShEVzEPcNI.mft (raw, json)
Hash identifier:          Tp01WZmi392Ury6G5PZfv/5/JWVrLUkL+y/5Fj+wzvc=
Subject key identifier:   FD:B6:57:9E:62:27:90:85:3B:2C:16:97:59:83:3A:A3:60:6C:54:4F
Authority key identifier: 4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2
Certificate issuer:       /CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
Certificate serial:       019D9BBECC7805CCF8E26A8C71C9D367E6F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft
Manifest number:          0DF0
Signing time:             Fri 17 Apr 2026 14:01:05 +0000
Manifest this update:     Fri 17 Apr 2026 14:01:05 +0000
Manifest next update:     Sat 18 Apr 2026 14:01:05 +0000
Files and hashes:         1: TyESy_bcyN00ROTs7ShEVzEPcNI.crl (hash: Mno27CQZLZ8fX33O0cqocdReK5iZypeZKpNI9HtvDdU=)
                          2: vAkzuvASkFh_KGqYPQNyZYP0fBs.roa (hash: KpkKu8c+7onfa9Op2gIOjP7LL4+RRO2mfg+8l2jgbPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:cc:78:05:cc:f8:e2:6a:8c:71:c9:d3:67:e6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
        Validity
            Not Before: Apr 17 14:01:05 2026 GMT
            Not After : Apr 18 14:01:05 2026 GMT
        Subject: CN=fdb6579e622790853b2c169759833aa3606c544f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:1f:2b:e7:ae:2e:40:87:f2:14:98:78:c5:
                    49:26:55:c4:39:fb:18:ad:07:0b:01:11:a6:77:b2:
                    8e:10:c2:03:cb:31:4e:9f:0a:b5:00:4b:ba:3a:da:
                    8b:29:47:72:ad:5a:56:db:b8:f6:e3:0c:11:76:d8:
                    60:7d:bc:38:11:92:33:11:8e:a9:ef:b2:09:7a:fc:
                    6b:84:7e:e1:88:49:ab:34:e0:89:47:ff:53:5c:32:
                    9a:24:28:8d:4d:20:3b:01:9d:f3:e4:70:16:e5:9c:
                    e1:79:5e:91:0a:96:3e:3a:6d:ca:bb:3b:f2:e6:a3:
                    a9:a7:bd:de:60:ae:40:36:ef:50:0b:9e:84:22:47:
                    40:0f:2f:55:75:d8:59:66:3c:3b:97:c7:33:0c:26:
                    5f:c1:99:4d:56:4c:10:57:4e:26:0d:d9:9b:7d:ca:
                    46:35:42:ff:d5:c4:19:df:1e:d5:d8:1d:55:07:a2:
                    f5:0d:cc:7d:3a:45:1a:ea:97:96:2f:ec:81:ab:f2:
                    58:24:c9:58:5f:69:f2:1f:e6:2a:e3:97:1f:b0:77:
                    e4:c0:3d:a0:b5:11:36:ec:21:30:34:2d:bd:f9:e9:
                    69:ff:e4:12:2a:c8:af:7f:63:62:1d:cc:a8:55:3b:
                    ac:13:00:c4:bd:35:e6:50:a4:8e:a7:1c:63:e6:5e:
                    5e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B6:57:9E:62:27:90:85:3B:2C:16:97:59:83:3A:A3:60:6C:54:4F
            X509v3 Authority Key Identifier:
                keyid:4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d7:cb:98:ec:bc:0b:05:e5:d3:dc:4b:11:26:b2:91:1b:24:
         89:0d:53:5f:85:07:55:16:5a:5a:4b:98:18:27:07:91:ca:f9:
         2a:38:5e:78:ae:d8:b3:4a:26:40:09:c7:98:1d:ee:0c:8c:c6:
         86:6a:95:27:ab:66:a4:32:6e:a0:a9:bd:7e:b1:11:11:2e:37:
         c6:f6:88:63:7f:5b:4f:e4:ab:6c:cc:bc:27:1f:c7:ef:0f:52:
         50:0e:02:4f:06:77:62:97:82:9b:b2:22:be:7d:b0:52:ac:12:
         9e:ee:c7:95:53:df:71:87:9c:9e:d5:cb:de:08:6c:ce:8f:9a:
         3b:3b:ec:7f:e4:6f:4d:42:5e:79:10:1b:c8:22:6b:9e:53:26:
         7f:84:10:6d:27:6b:28:67:a9:d9:e9:ff:bc:44:eb:5e:88:ec:
         be:d0:5d:3d:c4:18:f3:dc:31:26:18:25:2f:47:ac:7d:7a:49:
         e3:93:bb:34:5e:e5:de:df:73:72:6a:ac:14:28:7e:63:47:f3:
         63:b8:a3:3c:6e:ba:e5:c6:e0:9a:03:00:ad:cd:ba:d3:77:7b:
         06:cf:ff:90:ad:e6:91:90:92:c4:f0:c1:03:3b:62:8d:89:1a:
         b6:df:4b:29:c8:a8:9c:49:d3:51:f6:e4:a4:4e:02:4f:f9:c8:
         38:07:54:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:33:29 2026 by rpki-client