Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
File:                     srQdL319OFfgdfKk8vnT4ETy5TY.mft (raw, json)
Hash identifier:          crkIklE08SKeyqKwsar664UIe2uo+Qj5KX3+8kUNqJs=
Subject key identifier:   7F:D1:7C:24:18:4C:40:BA:FC:66:CE:FC:FE:70:CB:9F:98:E3:4C:9A
Authority key identifier: B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
Certificate issuer:       /CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Certificate serial:       019D98BDA35600EE7454D00BFE9EF978C837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
Manifest number:          08B6
Signing time:             Fri 17 Apr 2026 00:00:58 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:58 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:58 +0000
Files and hashes:         1: Spy7lYm24U3zdnyHMnurxfa2T6k.roa (hash: JcDra+5Gb+YXgz7R5LBtufPmpQV8nA+XRnuojSfqw4U=)
                          2: srQdL319OFfgdfKk8vnT4ETy5TY.crl (hash: 34m48NgeLjt9AeJCXc4kE2uMRDVITytidpibh1XrIas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:a3:56:00:ee:74:54:d0:0b:fe:9e:f9:78:c8:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
        Validity
            Not Before: Apr 17 00:00:58 2026 GMT
            Not After : Apr 18 00:00:58 2026 GMT
        Subject: CN=7fd17c24184c40bafc66cefcfe70cb9f98e34c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e7:53:72:7a:d6:90:c3:85:9e:f7:f3:f4:cc:
                    9d:48:f0:0f:8f:f1:52:8b:2c:46:82:ca:55:08:cb:
                    4a:00:51:f6:38:4a:07:f8:95:b9:e9:ab:5c:16:f1:
                    5b:3b:c2:bf:10:b5:a2:96:7d:b5:68:e2:b0:75:30:
                    30:5b:fc:61:48:69:cd:83:a2:2d:e5:ff:19:65:be:
                    6d:65:57:3b:a7:87:be:f8:07:2f:bd:ad:27:43:52:
                    b7:2d:bb:6b:f4:65:8e:8d:45:f6:fc:a1:08:e8:94:
                    ac:6e:c3:2a:6d:ba:88:c8:28:28:75:68:70:5e:12:
                    4e:39:1b:c4:93:cc:d5:0c:06:c2:69:67:8c:dc:5c:
                    f7:89:42:14:2e:65:6a:ad:0b:41:ea:79:24:e9:65:
                    36:d1:b7:2c:7a:e4:b5:04:36:18:56:f9:84:cb:67:
                    16:bb:0b:d3:ee:d1:e2:20:19:91:d6:df:ae:12:51:
                    c7:86:7e:8d:c9:bb:2d:13:fc:81:78:50:20:fc:0c:
                    da:e8:ce:f4:6a:cb:94:74:3e:ba:81:d5:a3:19:15:
                    5c:20:0c:20:bf:2c:e1:59:51:be:a6:29:af:dd:61:
                    0d:7d:7c:26:29:67:17:3b:f7:0d:56:34:71:68:59:
                    6c:9d:12:76:c2:ca:a7:ab:92:6f:7b:48:b1:9e:9a:
                    43:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D1:7C:24:18:4C:40:BA:FC:66:CE:FC:FE:70:CB:9F:98:E3:4C:9A
            X509v3 Authority Key Identifier:
                keyid:B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:4a:66:fa:43:a0:8f:43:e3:fd:ee:44:09:3c:12:75:a3:08:
         9b:6f:b7:49:af:ec:9f:9e:f6:ce:9f:5c:cf:7c:3b:97:3e:08:
         b8:32:43:78:61:94:e7:c7:31:8b:64:5c:e0:06:3c:80:8e:94:
         93:d9:14:d8:21:55:0f:f2:b1:93:78:6d:2c:18:b9:de:13:35:
         79:c3:16:b2:17:1b:da:78:df:85:cb:21:f5:64:3a:0e:01:51:
         9f:6f:28:3d:77:b4:ad:93:e7:6a:73:9f:7c:c4:9e:5c:00:bd:
         5b:86:a4:92:17:b6:f2:7e:f8:e6:71:00:a0:ec:f3:64:a0:81:
         0f:80:f5:b2:dc:ed:09:09:5e:ff:d9:69:49:72:f7:5a:25:83:
         fb:cf:a1:30:71:f9:ae:2d:45:2c:c7:c6:01:c5:49:fe:8c:18:
         9d:b8:c1:27:a5:03:50:72:45:80:c5:10:a1:c2:15:e6:6a:05:
         de:90:72:e3:cd:25:7b:99:3e:53:b5:6b:7e:e7:d1:69:6c:57:
         7e:ea:58:96:33:dc:1f:cd:37:1c:99:a9:02:eb:44:d7:c6:fa:
         c1:87:dd:47:be:a7:5c:63:de:45:05:89:9f:67:88:b6:46:d5:
         aa:39:6d:d8:45:6e:cb:6d:7f:ca:06:9f:03:f2:4c:9f:47:27:
         01:f2:17:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:09 2026 by rpki-client