Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
File:                     mQYOLer_6n1iLdkVgP-QFfJVdYs.mft (raw, json)
Hash identifier:          tKzkC2KWO1Adw6MSA7fsM+9YNU1lTbtsBcg8MFoV9Uc=
Subject key identifier:   F2:52:39:F1:FA:FB:0B:5D:FC:CB:47:20:6B:56:34:20:DC:F2:34:1E
Authority key identifier: 99:06:0E:2D:EA:FF:EA:7D:62:2D:D9:15:80:FF:90:15:F2:55:75:8B
Certificate issuer:       /CN=99060e2deaffea7d622dd91580ff9015f255758b
Certificate serial:       019D98F516F7489A1EFCEC31C4D37C6CCDC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
Manifest number:          08F4
Signing time:             Fri 17 Apr 2026 01:01:32 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:32 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:32 +0000
Files and hashes:         1: 1-T1FXLyA3VlKdfnCiBGA8u0xGgE.roa (hash: goExnID3vYdULmlOxq4g1dk8QxfW8xHG+c6+SFscKsg=)
                          2: mQYOLer_6n1iLdkVgP-QFfJVdYs.crl (hash: zqLZ4YD94PX6YN4oztvOSBoEY0RcgScCvlQqwOqqmDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:16:f7:48:9a:1e:fc:ec:31:c4:d3:7c:6c:cd:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99060e2deaffea7d622dd91580ff9015f255758b
        Validity
            Not Before: Apr 17 01:01:32 2026 GMT
            Not After : Apr 18 01:01:32 2026 GMT
        Subject: CN=f25239f1fafb0b5dfccb47206b563420dcf2341e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a7:bf:bf:b4:ad:2b:ef:5e:c9:42:fe:84:6e:
                    b4:b8:7a:e0:2f:34:dd:a8:78:26:9d:9a:39:96:36:
                    d2:c9:8e:ef:df:ee:5d:46:be:db:b8:0d:26:f5:e8:
                    aa:dc:e0:48:72:18:c2:19:9d:a4:ce:bf:95:bc:1b:
                    05:72:de:e2:c2:bf:1e:f4:35:05:11:0d:5f:f2:e6:
                    d1:7c:29:08:92:86:d7:03:29:27:8b:f3:34:f5:b0:
                    46:55:1b:66:dd:e4:fb:9e:d3:d7:54:3f:f9:9e:b7:
                    b3:22:3a:7b:c2:19:91:da:ec:14:3c:11:44:fb:a7:
                    16:75:57:c1:57:af:11:09:7f:84:93:48:20:23:3f:
                    c9:78:2c:19:04:a2:f3:ac:3a:7b:b2:98:ff:37:8b:
                    dc:c3:cc:5b:d4:26:49:dd:83:f6:4e:81:9e:e0:17:
                    db:3c:65:78:d0:0c:3d:cf:c7:05:c5:69:8a:62:7e:
                    a6:9f:37:1f:79:91:88:87:6c:cd:fd:33:ea:df:98:
                    9a:a0:df:1e:52:57:94:fb:8b:2d:c5:ca:10:cb:47:
                    c6:0d:f8:5a:85:96:0c:94:60:e2:df:ea:15:92:0a:
                    2e:30:b3:12:e2:1e:2f:02:bb:64:de:a9:a6:8d:8c:
                    62:ae:a6:f0:50:7b:b6:48:39:64:36:b9:87:5b:38:
                    00:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:52:39:F1:FA:FB:0B:5D:FC:CB:47:20:6B:56:34:20:DC:F2:34:1E
            X509v3 Authority Key Identifier:
                keyid:99:06:0E:2D:EA:FF:EA:7D:62:2D:D9:15:80:FF:90:15:F2:55:75:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:77:d5:8d:9c:81:20:58:88:b4:a5:8d:ea:eb:1a:12:fa:c6:
         9a:27:c6:33:61:ff:b8:ec:5e:25:ac:bc:a5:e6:73:21:11:a1:
         0c:43:13:db:0d:9d:ff:89:b1:0e:e5:5b:0f:c6:a5:a9:f3:36:
         b5:51:07:cd:da:2a:de:ba:ba:fd:24:10:de:0b:3b:3e:3d:b8:
         09:4d:03:63:90:50:97:44:a3:a8:6c:79:fe:14:da:ed:c9:f9:
         12:39:66:a6:1b:0c:b4:c6:db:2f:01:4e:97:b5:90:64:76:47:
         0b:b2:c9:74:1c:ba:d7:58:28:b7:8d:b3:d8:78:85:e4:64:48:
         4f:f5:ba:36:db:85:0b:16:0d:90:2e:5f:e7:82:c5:21:5e:a8:
         0b:f2:78:01:09:7e:1e:1c:5e:1d:5c:36:0f:ba:44:b7:db:73:
         28:6a:65:bd:34:ae:07:e5:ff:73:04:31:64:51:74:d8:0e:58:
         9c:4e:d2:ca:22:ad:80:7e:49:5e:c7:17:41:3a:9c:93:a6:34:
         d8:50:74:47:fb:9f:57:7e:fb:be:f1:b5:f0:97:f0:38:39:cb:
         3a:cd:b9:a5:27:83:d3:63:ab:a8:5a:8b:85:26:ee:3c:b8:49:
         15:d4:a3:14:07:a7:a3:26:ee:3e:7a:8a:c2:32:1a:1f:fb:53:
         14:5d:b7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:36 2026 by rpki-client