Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
File:                     mR-saFXyKWutFZhw-cvtIjVmE6s.mft (raw, json)
Hash identifier:          pEUOdXYsoMdPKkAkKCv4QTZ7VHYPfkB8965GSX6YnbI=
Subject key identifier:   4F:D5:D0:64:F0:2F:84:C1:75:98:B4:CE:AF:5E:19:4F:20:9A:38:8C
Authority key identifier: 99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
Certificate issuer:       /CN=991fac6855f2296bad159870f9cbed22356613ab
Certificate serial:       019D99D07D0D63285C4B6C6FBC743116B913
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
Manifest number:          1262
Signing time:             Fri 17 Apr 2026 05:01:10 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:10 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:10 +0000
Files and hashes:         1: Ua0FvX2Mxp7XblXDKae0F_P3DVA.roa (hash: Gd0TE+m9XBYfCgcDLlJ0ZvcbYTgV+bDawl8hdljezh4=)
                          2: mR-saFXyKWutFZhw-cvtIjVmE6s.crl (hash: YEIVwntnBWmEcQQ4b4WqjjVcOspuFEiUc5BRNz8+cuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:7d:0d:63:28:5c:4b:6c:6f:bc:74:31:16:b9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991fac6855f2296bad159870f9cbed22356613ab
        Validity
            Not Before: Apr 17 05:01:10 2026 GMT
            Not After : Apr 18 05:01:10 2026 GMT
        Subject: CN=4fd5d064f02f84c17598b4ceaf5e194f209a388c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:3d:d6:7b:06:50:f7:49:ff:a3:22:da:d6:
                    a5:b5:54:2d:09:a4:01:83:c6:35:0c:7d:d1:66:65:
                    07:10:92:d8:f1:de:eb:66:db:a5:99:6d:02:6b:a7:
                    c2:52:d8:91:0b:2e:31:1c:42:73:35:ae:b3:f7:5f:
                    ee:13:c6:f1:c7:9a:a0:1c:20:e7:7d:78:a9:c3:fd:
                    6a:66:13:5d:b4:fb:de:b4:16:dd:22:39:c2:77:31:
                    e9:af:bf:c4:2b:5d:27:46:52:b6:d7:c0:1f:a4:88:
                    5b:28:ff:66:ff:ef:a2:36:c9:bd:fd:97:00:c9:af:
                    e4:ea:6f:3e:4b:2e:79:a2:86:9e:04:78:b0:2a:d6:
                    23:c4:ed:cb:3b:3e:4d:0e:74:cd:a9:ef:3d:53:dd:
                    b5:c6:e7:f5:02:8a:bb:e5:a8:c1:d9:7d:6d:41:87:
                    a2:0c:0c:ad:66:cc:7e:70:30:94:4e:17:67:55:e8:
                    09:fd:97:f6:54:b4:86:07:e2:25:dc:5b:d7:8a:c9:
                    ab:c9:57:34:66:d9:8a:fc:8f:86:2d:5d:16:ac:0b:
                    e5:3e:cf:63:1c:db:b2:90:25:81:11:01:cf:fc:ea:
                    ae:fb:ee:b5:bb:1f:1f:90:f0:55:2f:48:c7:96:5c:
                    60:a8:21:d8:d4:cf:92:73:ff:a4:f3:09:81:34:d3:
                    85:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D5:D0:64:F0:2F:84:C1:75:98:B4:CE:AF:5E:19:4F:20:9A:38:8C
            X509v3 Authority Key Identifier:
                keyid:99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c6:e1:2a:16:24:de:fa:31:6c:e7:0f:54:54:de:7c:cd:20:
         8b:72:0f:92:46:59:2d:3b:69:7e:2e:60:28:26:42:ec:33:19:
         43:51:23:44:22:8b:fd:f9:53:5c:a9:87:10:b9:9e:3b:7c:30:
         6c:f5:bd:35:ac:9c:25:20:d8:5b:c2:20:fc:69:20:36:e5:7e:
         5c:24:39:6c:74:16:43:53:36:ad:6e:93:34:de:ce:34:12:6a:
         8d:61:5a:c9:d5:85:63:cd:d9:01:0e:ab:55:e7:4d:d2:30:46:
         7b:51:6e:fe:b4:29:74:94:ab:8c:1c:b6:77:56:cb:bf:40:5e:
         f5:be:15:61:cf:59:09:8e:8c:43:c9:38:69:f0:a3:b9:98:0f:
         a0:21:a7:7b:0e:db:60:8f:4a:c0:cc:64:4c:c4:56:ae:1f:61:
         21:55:39:84:23:b5:a1:69:13:a0:19:81:12:c2:e5:b0:ee:a2:
         86:1b:b2:dd:3c:06:a8:7d:8c:5e:38:83:53:9f:8f:c6:c4:90:
         18:bf:8f:e8:8d:43:9a:40:04:77:01:7d:01:ec:39:49:1c:e5:
         87:a1:7b:4d:e6:48:91:49:5c:77:80:50:ff:8e:56:02:83:c1:
         d5:6d:8b:d3:21:76:46:ac:12:43:9e:fe:09:8e:f9:60:c0:c3:
         7c:e9:3a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:19 2026 by rpki-client