Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
File:                     4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json)
Hash identifier:          dHLw5BP36Fz/XE+JKk2yDa8/VxoZn4o7GbW5U4Yyjiw=
Subject key identifier:   89:43:15:11:78:35:A6:E4:06:CF:5A:A6:7D:63:54:F9:C1:FC:C2:C7
Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
Certificate issuer:       /CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Certificate serial:       019DA41D211FA0E9E634BE6C6538FF7DC748
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
Manifest number:          06B2
Signing time:             Sun 19 Apr 2026 05:01:05 +0000
Manifest this update:     Sun 19 Apr 2026 05:01:05 +0000
Manifest next update:     Mon 20 Apr 2026 05:01:05 +0000
Files and hashes:         1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: MiwlB05bWGolbkolb3g2TOaUkaY1N5I4K/27fohJ+YY=)
                          2: jm7CLkDkWjLyx0drk5u0jmFrhNY.roa (hash: ammB/HZj8/N3/UAaLNlwGxNZkAQiwMa1PgzKQkDpB6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:1d:21:1f:a0:e9:e6:34:be:6c:65:38:ff:7d:c7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a
        Validity
            Not Before: Apr 19 05:01:05 2026 GMT
            Not After : Apr 20 05:01:05 2026 GMT
        Subject: CN=894315117835a6e406cf5aa67d6354f9c1fcc2c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9a:92:16:fa:ea:85:e7:86:ad:34:25:cf:93:
                    7f:4f:8c:69:86:8f:cf:d2:05:73:d1:76:33:6c:eb:
                    c1:4d:b6:07:d2:f6:fc:65:a9:f1:4a:bf:7a:e0:94:
                    46:b0:e8:18:2a:0f:b0:98:5f:bc:3d:60:83:09:0f:
                    d8:4b:b3:4a:f5:a1:ca:2d:ce:ff:d3:8c:2e:8a:a1:
                    af:36:2d:c6:c4:ea:d3:c5:44:d7:28:4a:df:db:f3:
                    08:f2:e4:94:2c:af:62:49:3e:fc:fe:75:07:6c:5b:
                    23:b7:62:3e:31:f6:9a:af:f4:b1:9c:c6:3c:f8:cd:
                    6a:5a:c0:e9:bf:d7:0f:27:a3:dc:4f:46:e9:bf:b1:
                    30:0e:4f:8f:c1:de:bb:89:b2:d5:ed:7a:08:25:75:
                    bb:9d:03:cd:59:52:dc:04:3e:41:64:3a:61:9e:b1:
                    29:e6:28:80:1e:0f:ae:f1:cc:e5:43:ea:dc:a2:09:
                    31:f3:25:56:2a:1f:e8:fa:b3:9b:7d:2e:a9:63:ea:
                    af:37:0d:8e:46:16:14:58:fa:9e:47:e8:34:d9:6e:
                    bc:ac:12:20:8a:9e:6b:b3:d2:39:fc:6a:32:f3:0e:
                    86:da:b6:7c:1c:9f:4f:7a:18:c4:a9:2e:b6:a0:57:
                    8a:ae:da:cf:76:53:c1:1d:65:c5:a9:dc:45:e1:83:
                    e7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:43:15:11:78:35:A6:E4:06:CF:5A:A6:7D:63:54:F9:C1:FC:C2:C7
            X509v3 Authority Key Identifier:
                keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b8:b6:22:bd:a6:4c:b0:e9:7f:ea:bb:a6:d8:b5:01:9e:01:
         1b:ed:20:18:84:ce:9e:68:27:c2:f8:1e:a1:e3:70:b4:22:b2:
         25:74:cb:92:65:b0:ac:29:03:93:10:c8:f7:5a:75:70:ae:5b:
         94:17:a9:13:0f:b8:0a:e0:76:cf:a9:aa:cb:b2:ef:40:37:5d:
         ea:99:1d:12:c6:f7:c7:88:39:7a:83:ed:fe:6f:75:47:fc:a0:
         b0:42:b9:d3:df:03:df:9d:b6:0c:27:aa:05:98:c3:b9:09:08:
         e1:0a:e2:cc:61:50:d3:89:b7:98:ea:80:10:51:26:90:3f:ab:
         a9:13:52:8a:4c:da:d1:3c:ff:e1:19:27:8b:d7:ea:14:87:cc:
         ad:41:4e:50:7f:d9:89:77:df:4c:29:33:fb:11:94:db:e6:20:
         e3:fd:e5:9c:a9:2d:e3:fa:63:e9:a3:d4:3e:77:bf:a5:55:12:
         1d:cf:40:42:18:ce:59:10:1e:1e:93:3e:1b:3f:26:9a:8d:ce:
         2c:39:95:b6:66:0a:5a:8b:42:0f:ec:b2:5c:79:ea:7c:91:51:
         d0:62:50:34:57:f1:4c:51:60:7d:d1:6f:d5:0e:05:e4:1a:0b:
         68:a2:2f:ce:13:86:31:f4:a6:08:48:7b:12:f5:c8:9c:ce:9f:
         13:a7:dc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:45:09 2026 by rpki-client