Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
File:                     m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft (raw, json)
Hash identifier:          7BC8FDZkE1EfM+buVq/UU0ynlmU4m0sm3D99StWYvtc=
Subject key identifier:   34:A6:3C:4F:BB:E2:5B:F7:E3:85:35:BE:90:2F:BD:D1:10:8E:E2:AF
Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
Certificate issuer:       /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Certificate serial:       019D99624668F6E6DC36A270B70A8ECD2F98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
Manifest number:          17F7
Signing time:             Fri 17 Apr 2026 03:00:47 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:47 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:47 +0000
Files and hashes:         1: NGSRZ0UFf37oBgMflKRqMJVzu1A.roa (hash: QQl6ufsi4HXmy3ASinxAh+zaiJ4iVflIUzf0L3Srl8Q=)
                          2: cnqrVuurtzefRH7SXfJZEmIqN0c.roa (hash: Vh3D8b6qjUnsJyNx9UNrDRqqXIGsiNFhU3lLE/75w7s=)
                          3: m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl (hash: MvgHoKHyOqmfTR5jOJfsKuNW1RNsMSUGlXlZC96dCf8=)
                          4: sPNW9L7nvdJWjHEG7P1B2mLSY6I.roa (hash: GJ8bFB5CbpvRHqB9ftaag6jbvrupCXTR5QaGBQCK/Ms=)
                          5: uLKZdDovNYh-DpBqqKP-yEKFq6g.roa (hash: VXKMVBqqwBpyEzSrFgtoLzoyOdF5dlP0dTicEmqV8zw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:46:68:f6:e6:dc:36:a2:70:b7:0a:8e:cd:2f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
        Validity
            Not Before: Apr 17 03:00:47 2026 GMT
            Not After : Apr 18 03:00:47 2026 GMT
        Subject: CN=34a63c4fbbe25bf7e38535be902fbdd1108ee2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:36:31:73:87:6a:be:15:35:d5:2a:40:dc:
                    aa:f1:1b:3f:55:a6:cc:9e:9a:8d:08:60:e0:aa:d2:
                    23:fd:0a:42:f6:33:5f:41:36:5a:e7:d9:36:fe:8b:
                    12:0e:1e:d1:ff:9b:73:2a:97:dd:32:ac:46:93:c3:
                    a6:2d:48:16:b9:ec:50:08:3f:d9:76:f2:03:21:35:
                    0e:8a:4a:80:18:04:cb:25:f0:90:21:35:de:2b:b9:
                    29:cd:4c:9d:d3:80:cd:d7:91:00:00:89:2f:25:f3:
                    2c:69:33:cc:64:41:1e:ec:da:1b:72:30:17:84:81:
                    23:bb:eb:bf:9b:46:11:c3:32:50:11:78:49:3c:1b:
                    a0:95:50:de:1b:c4:e2:7b:27:db:c8:ec:14:20:76:
                    e9:d4:63:89:52:c6:28:31:27:86:15:d5:09:dc:56:
                    54:64:65:3f:ef:9b:84:f6:27:d7:45:a0:72:62:3c:
                    09:c1:ce:8c:d3:72:82:19:b7:15:ab:6b:0c:52:0e:
                    c0:54:0c:ee:ad:f3:8f:c0:e3:a7:e2:da:34:1c:75:
                    62:41:13:46:c9:d4:db:81:21:74:61:53:2b:81:5c:
                    66:77:34:0f:40:8f:46:06:64:c8:66:34:6f:5a:4f:
                    ad:df:3d:13:a4:01:87:86:7b:ed:a6:c6:d0:36:7b:
                    3b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A6:3C:4F:BB:E2:5B:F7:E3:85:35:BE:90:2F:BD:D1:10:8E:E2:AF
            X509v3 Authority Key Identifier:
                keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:4e:6a:f7:cc:b2:55:ea:37:d5:96:24:f3:f3:54:3b:2a:09:
         c6:32:f3:29:cf:1e:3b:b2:0a:3e:93:10:b2:2e:fa:5f:2c:39:
         3d:1f:a8:f7:ea:d4:79:67:b5:b9:46:20:6e:15:4e:9a:ad:4c:
         b7:0d:15:fd:41:18:9c:ce:81:c9:9b:5e:33:b9:1f:f3:f6:7b:
         69:b5:77:3f:ca:e6:45:a6:b0:1a:7e:de:1f:e7:67:da:74:98:
         74:7f:b3:5d:c8:3a:85:8a:14:25:1e:ec:2f:51:22:3d:8e:35:
         24:92:16:db:3d:51:e1:e5:34:e8:d8:28:58:e3:4d:33:f6:8a:
         13:13:c9:03:98:f9:59:e8:31:67:15:b5:de:47:ac:ee:a1:39:
         5c:02:b1:d8:e6:ec:25:60:e6:68:b1:a1:d0:ae:6e:de:d2:df:
         fb:e4:6e:8f:fb:af:bd:5c:3b:60:fb:3e:8d:cd:20:5b:ff:14:
         47:96:72:41:d7:fd:05:69:2d:b4:24:0b:7c:b7:b1:62:d8:9f:
         f3:6f:8e:b7:df:2d:0a:1d:0b:27:5b:39:fa:5a:65:fb:0a:0f:
         1c:55:f7:79:a4:98:c9:ae:b2:f7:13:9d:69:7a:e7:12:83:a7:
         86:18:87:a6:29:71:90:44:cc:07:f5:bd:46:2b:d5:68:47:37:
         58:40:29:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:56 2026 by rpki-client