Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
File:                     B94YU-WWYfkI4iaVDL3FK5f2IRM.mft (raw, json)
Hash identifier:          EYGjwUGL8VyqKY6WYVCh1aMsjuLS8Vdz1ChOmwmo1AU=
Subject key identifier:   89:E5:8E:8A:1C:24:C5:E2:92:7D:BD:EF:33:D8:D0:75:EF:DE:2B:2C
Authority key identifier: 07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13
Certificate issuer:       /CN=07de1853e59661f908e226950cbdc52b97f62113
Certificate serial:       019D98F45826DA86352F135FBAC4174307EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
Manifest number:          057A
Signing time:             Fri 17 Apr 2026 01:00:43 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:43 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:43 +0000
Files and hashes:         1: B94YU-WWYfkI4iaVDL3FK5f2IRM.crl (hash: 4ASuI1ulSy7VlrR83CAriflp2Dl9Tpie9y/swnI3Otk=)
                          2: BtnTg3UVtCotLWbUTHeLsZgdhVE.roa (hash: Sz+ixKVwiOEIj7coiYEtqiN5kz/+2rKd3V8d+a0dElE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:58:26:da:86:35:2f:13:5f:ba:c4:17:43:07:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07de1853e59661f908e226950cbdc52b97f62113
        Validity
            Not Before: Apr 17 01:00:43 2026 GMT
            Not After : Apr 18 01:00:43 2026 GMT
        Subject: CN=89e58e8a1c24c5e2927dbdef33d8d075efde2b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a2:fd:cf:f5:5f:9b:10:44:45:fb:49:8d:41:
                    df:6b:12:dd:a0:d0:2b:b4:b4:74:e8:55:e8:a6:eb:
                    11:ae:32:24:18:fe:27:ca:00:70:d6:6b:54:9c:ee:
                    a2:a9:5a:45:05:94:49:62:a2:32:c3:ed:59:7a:08:
                    8f:db:70:af:de:1d:e2:88:6e:3b:fa:15:33:e3:b7:
                    bb:cb:44:74:7e:c4:49:1c:e3:bf:2d:ed:64:bf:90:
                    8a:2e:39:f4:a4:1c:72:c5:54:50:34:4c:96:ef:6d:
                    e5:97:59:04:be:38:27:d0:31:bb:fb:b0:af:19:2f:
                    53:ea:b6:c0:05:eb:d1:bd:c9:48:cc:aa:be:ed:e5:
                    81:c4:1f:72:67:a8:82:f6:a0:c8:63:61:ec:25:d6:
                    99:8f:8e:94:08:7e:23:a4:2b:af:4d:08:e9:2a:a4:
                    c3:8d:0d:42:9f:cf:75:c7:f5:77:dd:0d:c8:cc:47:
                    5c:f4:a2:49:d5:d4:66:fa:a7:c2:e1:d8:6a:fa:7f:
                    88:3f:2d:db:7c:36:82:62:d5:25:15:be:d0:48:42:
                    1e:0e:62:a0:03:e9:ce:77:a1:fa:74:3d:67:d3:51:
                    f4:c2:de:ab:93:7c:0b:9c:10:29:0a:9b:2f:af:b5:
                    71:01:6e:e6:ed:13:4e:cc:f5:11:06:97:cc:23:d4:
                    a7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E5:8E:8A:1C:24:C5:E2:92:7D:BD:EF:33:D8:D0:75:EF:DE:2B:2C
            X509v3 Authority Key Identifier:
                keyid:07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e3:00:56:23:4d:13:05:e0:80:64:ef:d7:ad:0b:a5:c2:76:
         48:4a:48:eb:2f:d4:fc:ff:f6:f4:16:cc:bd:48:42:1a:e4:af:
         08:27:2e:12:4c:55:9e:d7:27:63:a2:f6:e0:b0:d1:17:54:b6:
         9d:f0:3c:e8:ca:ca:aa:1f:a3:46:65:3a:c0:57:1a:01:ce:a6:
         9b:fc:24:c4:3e:40:18:82:ff:83:bc:af:51:8b:2a:e2:ec:27:
         29:62:44:89:c3:08:3e:2a:79:e6:5b:1d:f8:28:e3:19:fc:df:
         96:19:a6:45:95:35:4e:b9:b5:23:df:bc:71:f3:56:0e:4b:f6:
         85:60:24:bc:e2:44:4c:e7:59:c4:ed:74:90:9f:d8:86:0d:55:
         2b:b3:b2:91:c5:e3:52:f8:79:96:1d:25:6c:52:53:a9:ec:58:
         33:de:2d:d3:b0:7e:65:15:95:b7:5f:3f:c7:ff:dd:d8:bd:23:
         19:b0:e1:2c:9f:90:ac:f2:d2:3e:ab:7c:8f:6c:c1:84:aa:0e:
         de:db:2d:80:8e:60:b3:31:77:55:c8:d8:58:0c:e7:f1:72:f7:
         ee:e7:cc:2a:9e:db:a6:93:38:85:6d:ef:26:3b:79:46:96:fe:
         cc:f4:da:1c:31:f5:85:a7:a2:41:12:76:8c:2a:2c:38:8f:2b:
         72:5c:ab:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:47:41 2026 by rpki-client