Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
File:                     rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft (raw, json)
Hash identifier:          Xeg1lTDnNJT29R5OYm5azc6rY6W2+ZnK/DMa9Vq9GT0=
Subject key identifier:   ED:6A:55:05:49:5A:48:D4:5B:1C:E6:03:5F:15:ED:86:92:9D:7A:1E
Authority key identifier: AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
Certificate issuer:       /CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Certificate serial:       019D99D0856EDC712D5A948F35495DF68988
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
Manifest number:          14E0
Signing time:             Fri 17 Apr 2026 05:01:12 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:12 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:12 +0000
Files and hashes:         1: 5BqcS5YAd2CqG1Bqr1DMz14XLBs.roa (hash: hc3I67ClpXYlhmM2IyIqXgYM+yQAnq3AX4m72or+MyQ=)
                          2: rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl (hash: GTXNdayAdmOwGEhyMnH6wJb0vK25G6BqJJKY+md6X7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:85:6e:dc:71:2d:5a:94:8f:35:49:5d:f6:89:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
        Validity
            Not Before: Apr 17 05:01:12 2026 GMT
            Not After : Apr 18 05:01:12 2026 GMT
        Subject: CN=ed6a5505495a48d45b1ce6035f15ed86929d7a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:19:1e:9e:ee:3d:2c:76:f9:43:ca:da:20:e2:
                    b2:3e:be:c6:e3:c6:72:d8:22:8c:1f:d5:c0:65:dc:
                    cf:0c:83:9d:19:89:b3:4b:18:61:c0:b2:8c:b5:7e:
                    8e:78:22:75:21:c6:e9:3e:aa:8c:c0:75:ce:52:e0:
                    7b:25:67:8a:6b:d5:fe:7e:3f:4e:63:05:cd:1c:c2:
                    b9:01:31:24:cf:44:fc:3a:16:95:a6:47:09:aa:72:
                    0e:e4:e0:03:28:5a:f0:c7:b0:1c:84:21:c3:79:f5:
                    ce:bc:99:bb:85:8c:55:47:34:2d:84:4d:26:f3:9a:
                    e7:6c:56:18:92:bb:e5:f9:fb:29:eb:7b:b4:d5:13:
                    80:da:6b:bd:ba:3e:10:8b:f9:33:da:81:14:1e:6e:
                    1a:7e:57:7a:64:da:e5:c9:a6:c0:d8:bc:ec:a3:3a:
                    23:ed:94:c5:43:1c:a1:a7:65:a2:93:2b:08:13:e6:
                    b0:cc:1a:68:65:8a:9d:6c:d8:40:84:a0:cf:cd:81:
                    6d:6e:51:64:78:0e:f6:41:d6:33:c1:41:f9:f3:4c:
                    2e:b0:10:72:a6:95:85:ca:8b:69:dc:cb:75:75:b3:
                    07:92:4b:7a:47:aa:98:45:a3:cf:d8:53:4c:0b:52:
                    e8:7c:7c:ce:c3:c3:23:75:dd:cd:dd:86:3f:5d:32:
                    f7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6A:55:05:49:5A:48:D4:5B:1C:E6:03:5F:15:ED:86:92:9D:7A:1E
            X509v3 Authority Key Identifier:
                keyid:AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:db:03:49:7e:e2:03:d3:89:d4:17:b1:de:d4:74:b9:ba:47:
         71:72:cf:a2:a1:21:a2:b3:78:ec:e2:76:da:b5:9d:45:4b:66:
         18:eb:6c:d6:a9:07:ba:e0:b6:00:7d:4f:1b:99:22:cb:6a:2a:
         68:2c:7d:7a:c9:9b:a8:2d:ed:fd:52:db:14:b6:51:eb:81:49:
         b5:f3:82:9a:a2:6f:34:77:f3:92:a4:ba:c8:1e:7c:6b:a2:46:
         bf:54:a8:cb:86:e1:c7:ef:03:f3:b1:29:ed:a0:aa:66:e0:62:
         04:f2:12:4b:89:fc:b8:bd:90:e6:96:f0:ff:dd:0e:f6:b7:fe:
         b5:b9:53:2a:52:c1:63:9d:cb:c4:30:ce:ef:98:db:e1:1c:86:
         46:6d:8d:08:2d:15:6e:94:15:14:5e:f1:46:6c:da:25:1d:64:
         fd:5e:f0:d2:c9:51:a2:5c:be:09:b7:d4:bd:63:5c:46:d5:6c:
         6e:8c:32:89:4c:2e:2b:f2:f9:9b:54:d9:04:e1:83:81:1d:af:
         d8:48:a2:13:f8:1e:1b:f4:18:8b:a5:9e:ee:63:f7:1b:21:64:
         12:2b:7d:6e:8b:05:c3:4e:d2:8a:5e:2e:ef:6b:0c:7b:b4:94:
         ec:a7:15:84:59:74:64:b8:3a:bb:a5:9b:1b:f6:5e:a0:86:c8:
         2a:96:33:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:18:25 2026 by rpki-client