Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
File:                     SqaReHb9eJJsGSe5_ceWWNdGyEw.mft (raw, json)
Hash identifier:          tFTO5h1Bl9E1mbVuPL8Cp9iriiVDGbdHKnhH6Xef/UM=
Subject key identifier:   65:4B:BC:01:B8:F2:AA:69:0A:BA:45:95:E2:FB:CF:E9:40:EC:0D:CF
Authority key identifier: 4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C
Certificate issuer:       /CN=4aa6917876fd78926c1927b9fdc79658d746c84c
Certificate serial:       019D97E18E55504AD08DD02783518A7F17A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
Manifest number:          1623
Signing time:             Thu 16 Apr 2026 20:00:34 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:34 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:34 +0000
Files and hashes:         1: SqaReHb9eJJsGSe5_ceWWNdGyEw.crl (hash: utLRt9Awo0Wi4Te1AbGatEFxBVFqeOiYm6KLJ3BHuLk=)
                          2: dEe9kef00viBgag16NgYd-MmkFk.roa (hash: ijeJQOQCPV+rQCmqff64uTf1aTuDHnwhJzXA65R50R0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:8e:55:50:4a:d0:8d:d0:27:83:51:8a:7f:17:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa6917876fd78926c1927b9fdc79658d746c84c
        Validity
            Not Before: Apr 16 20:00:34 2026 GMT
            Not After : Apr 17 20:00:34 2026 GMT
        Subject: CN=654bbc01b8f2aa690aba4595e2fbcfe940ec0dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:69:03:0c:f5:90:14:a3:4b:37:b6:23:b6:3a:
                    37:bf:ea:0b:11:68:38:45:07:97:7b:43:43:54:60:
                    f5:7b:31:9b:31:09:96:dc:72:c9:dc:4d:7f:9c:91:
                    03:e9:8b:5f:ab:d1:37:41:c5:c3:fb:af:e7:65:d5:
                    de:00:a6:f4:cc:79:fa:87:6b:74:6a:fe:03:35:83:
                    ed:82:e1:d1:fd:c0:cd:e7:fa:fa:9d:50:ed:2f:86:
                    33:16:70:5d:ec:a4:f3:8e:d7:ab:02:f6:84:2c:49:
                    0d:66:ad:6d:79:c3:45:5c:73:c6:46:b1:00:1d:1d:
                    cf:d2:87:2e:f2:06:3b:e4:15:2c:2a:e7:d1:c6:16:
                    a3:79:32:26:8f:9a:d3:af:8b:9f:ff:45:db:b4:38:
                    ed:44:aa:fd:19:91:c6:a4:81:8a:19:f7:d2:97:c6:
                    89:0f:6e:99:f4:8b:6a:23:17:c9:c1:37:4a:b4:b3:
                    64:4f:1a:2b:3b:fe:56:7c:db:ea:5d:84:da:17:b0:
                    34:9c:27:6b:64:af:40:d9:70:c2:b8:f2:64:8e:86:
                    fd:f4:47:8f:d4:0d:27:c4:e9:b9:19:c7:03:de:f3:
                    f9:13:a5:b1:21:7a:ab:7b:e2:91:68:54:d8:0b:3b:
                    af:49:9b:0f:11:cd:0a:bc:26:17:c1:bc:41:80:43:
                    8f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4B:BC:01:B8:F2:AA:69:0A:BA:45:95:E2:FB:CF:E9:40:EC:0D:CF
            X509v3 Authority Key Identifier:
                keyid:4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:bc:a4:23:b5:05:56:62:c0:2a:bf:1b:88:77:05:f4:8f:b8:
         ef:04:54:c6:b7:ed:84:39:f3:78:e8:c7:71:53:ba:96:45:5c:
         b2:73:73:e9:69:19:87:4a:bf:69:2c:fc:b1:6a:ce:a4:40:0b:
         30:93:1e:d6:31:b2:3a:57:50:aa:93:85:33:da:f4:01:d9:1e:
         33:fe:b3:33:af:0d:00:9e:7b:4c:3e:b8:91:62:a7:87:f4:62:
         7a:da:c6:c9:85:e3:dd:6c:b8:5d:fa:0f:ad:7f:d6:3b:16:e1:
         4f:bf:eb:8c:eb:88:6b:82:f5:35:7a:a4:4e:f0:fc:f3:8f:a8:
         1c:8f:70:99:3e:4a:49:e2:04:ca:c9:44:ac:b4:9d:ab:6d:8a:
         44:95:9e:f4:f1:1a:49:b2:fa:f4:15:df:ac:c1:5f:bd:68:65:
         b2:fb:de:7f:1e:ec:57:70:b5:20:31:37:ce:9d:85:0e:fd:eb:
         1a:b0:46:8c:2d:02:ac:76:b1:1d:a2:ef:15:a2:e5:de:b0:c5:
         7a:76:44:78:b9:86:e1:df:44:fb:e9:76:ca:47:ad:42:d2:c8:
         4e:48:2d:9f:3a:9d:51:60:32:db:9f:b0:08:e8:c2:78:27:03:
         a8:4c:76:d3:47:40:51:0e:ad:b2:27:21:e5:8b:da:5e:4b:88:
         56:bc:13:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4Y5VUErQjdAng1GKfxepMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYTY5MTc4NzZmZDc4OTI2YzE5MjdiOWZkYzc5NjU4ZDc0
NmM4NGMwHhcNMjYwNDE2MjAwMDM0WhcNMjYwNDE3MjAwMDM0WjAzMTEwLwYDVQQD
Eyg2NTRiYmMwMWI4ZjJhYTY5MGFiYTQ1OTVlMmZiY2ZlOTQwZWMwZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGkDDPWQFKNLN7Yjtjo3v+oLEWg4
RQeXe0NDVGD1ezGbMQmW3HLJ3E1/nJED6Ytfq9E3QcXD+6/nZdXeAKb0zHn6h2t0
av4DNYPtguHR/cDN5/r6nVDtL4YzFnBd7KTzjterAvaELEkNZq1tecNFXHPGRrEA
HR3P0ocu8gY75BUsKufRxhajeTImj5rTr4uf/0XbtDjtRKr9GZHGpIGKGffSl8aJ
D26Z9ItqIxfJwTdKtLNkTxorO/5WfNvqXYTaF7A0nCdrZK9A2XDCuPJkjob99EeP
1A0nxOm5GccD3vP5E6WxIXqre+KRaFTYCzuvSZsPEc0KvCYXwbxBgEOPqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVLvAG48qppCrpFleL7z+lA7A3PMB8GA1UdIwQY
MBaAFEqmkXh2/XiSbBknuf3HlljXRshMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3FhUmVIYjllSkpzR1NlNV9jZVdXTmRHeUV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lMTFlYTMtODcwNS00MGFjLWE2OGQt
OWNlMjdjMTJiMmY0LzEvU3FhUmVIYjllSkpzR1NlNV9jZVdXTmRHeUV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9lMTFlYTMtODcwNS00MGFjLWE2OGQtOWNlMjdjMTJiMmY0
LzEvU3FhUmVIYjllSkpzR1NlNV9jZVdXTmRHeUV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7ykI7UF
VmLAKr8biHcF9I+47wRUxrfthDnzeOjHcVO6lkVcsnNz6WkZh0q/aSz8sWrOpEAL
MJMe1jGyOldQqpOFM9r0AdkeM/6zM68NAJ57TD64kWKnh/RietrGyYXj3Wy4XfoP
rX/WOxbhT7/rjOuIa4L1NXqkTvD884+oHI9wmT5KSeIEyslErLSdq22KRJWe9PEa
SbL69BXfrMFfvWhlsvvefx7sV3C1IDE3zp2FDv3rGrBGjC0CrHaxHaLvFaLl3rDF
enZEeLmG4d9E++l2yketQtLITkgtnzqdUWAy25+wCOjCeCcDqEx200dAUQ6tsich
5YvaXkuIVrwTmw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:39:49 2026 by rpki-client