Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.mft
File:                     V58iewJgDmAu_FEmBensZlrR-C4.mft (raw, json)
Hash identifier:          yCrkICpGkGVSWCh2BhV6tIhHEnZWUPWpPDSLX1n12Vc=
Subject key identifier:   4F:15:BA:04:51:29:8F:41:28:62:D7:13:A0:5E:76:7C:E1:94:66:14
Authority key identifier: 57:9F:22:7B:02:60:0E:60:2E:FC:51:26:05:E9:EC:66:5A:D1:F8:2E
Certificate issuer:       /CN=579f227b02600e602efc512605e9ec665ad1f82e
Certificate serial:       019D99D04611DA0A44501A173E51259AED34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V58iewJgDmAu_FEmBensZlrR-C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.mft
Manifest number:          9E
Signing time:             Fri 17 Apr 2026 05:00:56 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:56 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:56 +0000
Files and hashes:         1: V58iewJgDmAu_FEmBensZlrR-C4.crl (hash: wlFNtyQaI6xbbINwifEs5bbgmmZzpnOBMsblDS9OLDQ=)
                          2: _W45yWZbF0IW6tEuWrtSE9T4T4U.roa (hash: LUpLsmmYWa7Qa/cjp3HgkJS6f328ddsso8MNmbggimo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V58iewJgDmAu_FEmBensZlrR-C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:46:11:da:0a:44:50:1a:17:3e:51:25:9a:ed:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579f227b02600e602efc512605e9ec665ad1f82e
        Validity
            Not Before: Apr 17 05:00:56 2026 GMT
            Not After : Apr 18 05:00:56 2026 GMT
        Subject: CN=4f15ba0451298f412862d713a05e767ce1946614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:26:08:31:0e:9d:0b:24:7f:e2:c7:30:a2:20:
                    73:bf:7d:d0:7c:c1:7d:01:d8:79:5a:83:83:0e:f4:
                    cd:31:b4:c3:90:4b:a4:88:ac:d1:c7:6b:17:56:b5:
                    d9:fd:ce:c9:a2:3f:72:d4:d5:2b:0e:46:64:ae:dc:
                    86:4c:10:53:cc:e0:d5:3c:97:45:d7:73:49:ed:22:
                    e1:be:e7:91:b7:a5:44:f7:ab:8b:ff:3b:b0:90:39:
                    b0:c6:40:54:a1:cf:b3:bd:1c:e7:ea:31:8b:63:5a:
                    38:0f:72:8a:b8:04:5d:68:c1:7f:98:f4:4b:a8:69:
                    35:f1:9d:01:97:ef:97:a6:fd:8d:8a:57:33:08:33:
                    23:b5:38:a1:a3:77:df:7c:5d:59:ab:64:bf:84:61:
                    8a:b9:b3:3f:16:3f:ed:19:de:c3:54:73:d2:03:20:
                    53:b0:f3:52:d0:d1:dc:32:98:99:d3:2c:90:b0:e4:
                    bb:84:c7:d8:c4:af:0b:07:1e:a0:a2:79:3c:aa:a6:
                    18:27:c4:9f:8d:2d:7c:d9:3f:f4:b2:ce:c0:95:95:
                    2c:e6:96:6e:aa:56:07:cc:a2:37:d9:0b:b4:1e:ad:
                    80:03:b4:49:6e:a6:d1:b8:d5:87:f8:89:1c:dd:74:
                    40:ae:ed:b7:1e:b2:89:43:ef:4e:5a:06:16:86:ed:
                    07:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:15:BA:04:51:29:8F:41:28:62:D7:13:A0:5E:76:7C:E1:94:66:14
            X509v3 Authority Key Identifier:
                keyid:57:9F:22:7B:02:60:0E:60:2E:FC:51:26:05:E9:EC:66:5A:D1:F8:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V58iewJgDmAu_FEmBensZlrR-C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:2d:ab:87:06:60:62:91:45:97:4d:17:ac:ab:dd:f8:f4:cb:
         15:8b:23:7f:90:fd:4d:b0:17:f4:0f:3e:4c:1f:7c:d3:28:0d:
         cd:b2:14:8c:0d:83:9d:12:7b:99:34:d1:94:8f:35:c9:1e:85:
         35:e7:b1:fe:30:b9:6e:70:8f:c9:25:74:79:ba:f5:dc:c5:1d:
         32:55:95:6a:1b:2c:fd:e0:5b:d4:7d:9b:f7:c8:74:2a:11:d8:
         48:d1:0a:99:cb:bd:72:3b:03:53:bd:97:c3:1e:3c:f3:b3:7f:
         52:cf:3d:eb:f3:c4:db:c0:9d:68:05:33:2d:3f:ab:f7:e5:6c:
         14:53:b3:7f:ec:cf:41:68:19:2f:a1:c5:17:fc:0c:24:e7:b3:
         bd:90:76:f1:d9:6a:d2:82:c0:7f:ac:14:a3:84:7a:5c:b4:82:
         da:45:c1:a3:1c:97:0e:1b:7a:09:41:94:92:b0:bb:a6:88:da:
         c7:b3:ee:8a:a1:8d:92:8d:b4:6c:5a:e6:4b:b3:32:f2:36:c7:
         07:2c:42:8f:3b:03:5f:43:fc:8c:cb:30:4d:ab:db:b0:53:ef:
         d5:d5:82:65:f6:e0:dd:99:3d:cf:f4:b8:1c:a0:c4:ef:f9:4c:
         e8:c6:5d:3a:fc:1b:ee:69:af:5e:30:1e:42:ef:b2:a5:3e:bd:
         00:95:5c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:25 2026 by rpki-client