Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
File:                     v62CMaRsZBx6swHXv77w3Ams1M4.mft (raw, json)
Hash identifier:          NEND5bzY/WYdp3/iPCJ8YG8QG0x5aiWYgOe/hv/yPGA=
Subject key identifier:   B1:49:ED:96:1C:EF:E3:4E:21:3B:4F:50:65:EE:FE:BE:5D:C6:8F:EC
Authority key identifier: BF:AD:82:31:A4:6C:64:1C:7A:B3:01:D7:BF:BE:F0:DC:09:AC:D4:CE
Certificate issuer:       /CN=bfad8231a46c641c7ab301d7bfbef0dc09acd4ce
Certificate serial:       019D9A06B634FF41AC17BE5FA406CBE9EA87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
Manifest number:          1595
Signing time:             Fri 17 Apr 2026 06:00:24 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:24 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:24 +0000
Files and hashes:         1: v2jnTdk8Ahk3_NZELDsN38q8Dig.roa (hash: At3bpbo91k63f3L/tEszUY99MgueIkIhRgrR03val0o=)
                          2: v62CMaRsZBx6swHXv77w3Ams1M4.crl (hash: HzB1m/foIeRaNxbzAjeIj9esvPjnwy9Y1ddTnoQ/AW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:b6:34:ff:41:ac:17:be:5f:a4:06:cb:e9:ea:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfad8231a46c641c7ab301d7bfbef0dc09acd4ce
        Validity
            Not Before: Apr 17 06:00:24 2026 GMT
            Not After : Apr 18 06:00:24 2026 GMT
        Subject: CN=b149ed961cefe34e213b4f5065eefebe5dc68fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a7:64:eb:e1:e3:4c:36:1d:9c:5b:50:a2:d0:
                    c2:e2:fd:12:e4:93:8b:c6:ac:2f:b4:79:4e:60:c5:
                    10:03:89:f8:da:0d:e1:a6:68:04:50:9e:01:09:c4:
                    c0:4f:a9:35:f8:95:80:94:47:36:3b:e0:af:d7:e0:
                    53:ac:4f:53:9d:2b:1c:56:48:c2:77:8a:8b:f5:52:
                    2f:e1:5c:d4:61:cd:4e:00:7c:a7:a7:93:44:19:73:
                    9b:ec:43:fe:93:92:3c:75:a2:d8:9a:27:bd:bb:ba:
                    08:f1:bf:73:44:eb:29:48:73:13:d0:f3:6d:46:62:
                    7f:66:0a:91:07:01:0e:1f:55:65:b3:8a:70:0b:39:
                    ee:08:3c:35:e0:95:e8:3e:ed:7a:5a:54:ee:32:c2:
                    c4:18:9e:ea:8c:98:da:9b:b0:37:17:37:0c:8f:30:
                    85:7d:a7:34:60:3a:e0:7f:79:fe:42:f9:6c:7c:72:
                    ae:d0:32:48:b7:e4:ca:d3:a2:e1:46:fd:f4:b3:bb:
                    8d:c0:c8:30:27:02:58:4e:b6:10:b6:34:5b:42:1f:
                    a2:ad:ed:eb:11:ee:7f:87:67:25:29:8b:64:5a:ac:
                    63:4f:b8:d7:5c:49:7e:67:4c:ad:47:96:91:c0:00:
                    31:75:5b:a4:a0:81:39:ad:8d:c7:49:dc:5c:ec:dd:
                    ca:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:49:ED:96:1C:EF:E3:4E:21:3B:4F:50:65:EE:FE:BE:5D:C6:8F:EC
            X509v3 Authority Key Identifier:
                keyid:BF:AD:82:31:A4:6C:64:1C:7A:B3:01:D7:BF:BE:F0:DC:09:AC:D4:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:9f:00:f6:ab:d2:01:1c:30:79:9e:cd:05:f3:b4:35:3a:a5:
         f9:1e:64:45:9c:59:30:da:6e:63:07:f5:a2:0c:5c:fd:a4:12:
         b8:41:c0:e2:8d:32:8a:c1:20:72:d7:80:22:38:10:56:4c:36:
         a0:8b:6d:17:39:40:35:24:58:7d:a4:f6:84:e1:59:15:68:76:
         fe:35:49:d6:48:c6:58:70:05:68:82:a5:6d:a1:08:2d:e9:7b:
         c2:ff:d0:3b:9b:4e:b1:ef:cf:8c:9b:d0:4e:b3:3f:8c:8a:76:
         79:ae:03:96:c6:c6:18:f1:4d:a6:e7:65:62:26:29:09:eb:7e:
         af:85:0b:2e:0a:a2:2f:2b:58:3c:0a:bc:14:d0:36:5d:4c:4b:
         ca:25:77:c0:29:8e:28:29:16:9b:86:fc:a8:bd:e0:3e:b3:95:
         4e:e0:cc:06:9d:88:b0:3a:cd:29:3e:4a:03:d3:b3:c5:32:6c:
         3e:52:b5:8c:bd:85:89:cf:2e:7c:13:83:1d:f7:06:ee:83:db:
         5d:ef:af:dc:df:f9:50:6c:39:55:5f:ef:fa:12:4a:fd:e3:70:
         16:b0:11:8c:6f:77:6c:87:48:15:aa:0d:3f:9b:08:62:b6:5c:
         7f:c0:04:8f:d3:3b:45:58:4e:29:6d:fc:3c:1f:8a:2c:b1:fd:
         b5:ed:02:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:21:57 2026 by rpki-client