Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
File:                     Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft (raw, json)
Hash identifier:          wakXMsceNAoAMC+ly2WR3dVIdMoaPqJ0IuGy2NR8jdY=
Subject key identifier:   94:AC:C1:87:F8:E3:13:07:31:02:CF:AC:E2:73:B2:69:8B:B6:43:AF
Authority key identifier: 06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81
Certificate issuer:       /CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
Certificate serial:       019D984F949888FE16B2C6A5533CD0AE147F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
Manifest number:          144F
Signing time:             Thu 16 Apr 2026 22:00:45 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:45 +0000
Manifest next update:     Fri 17 Apr 2026 22:00:45 +0000
Files and hashes:         1: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl (hash: WH8TyVVGJpVMY/XFf6Tku4u1Xp8Pcqxo9UTkefLtlDk=)
                          2: gVF7AxuIzKTCjMsBQD_13bKv0vk.roa (hash: Xq/PLLG8F1v6vaXhJgc29NbSM77ha3BnJMruHRHuujU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:94:98:88:fe:16:b2:c6:a5:53:3c:d0:ae:14:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
        Validity
            Not Before: Apr 16 22:00:45 2026 GMT
            Not After : Apr 17 22:00:45 2026 GMT
        Subject: CN=94acc187f8e313073102cface273b2698bb643af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5c:13:ac:3b:c9:08:e3:33:97:86:98:55:6c:
                    d8:91:b0:e5:bd:a1:0c:39:27:24:cc:ad:23:53:c4:
                    c3:d9:d7:c0:9a:af:63:ef:0f:b9:58:38:82:ff:c3:
                    df:88:17:d3:d2:97:c4:48:ce:90:a3:21:f8:d7:4d:
                    50:a6:11:79:24:8a:63:db:c4:6d:b0:fe:d5:6d:6b:
                    f6:c0:dd:32:d3:01:2d:b9:0d:4f:47:54:86:e1:40:
                    22:56:ca:99:9f:f2:e3:38:bb:b7:f6:be:6c:31:bb:
                    c1:67:5a:9a:b9:4b:e7:6d:6a:51:08:43:eb:e6:bb:
                    bc:9d:37:f5:07:c0:63:d7:20:83:ed:96:d9:43:15:
                    f9:69:20:f3:95:1b:f9:11:43:1b:da:f2:d3:10:46:
                    4b:88:75:f9:87:b8:1d:c0:8d:07:37:eb:ad:0c:5f:
                    15:53:f6:0e:6e:70:c2:1c:58:e9:7f:c2:b1:6b:c6:
                    16:ff:8d:ed:a8:f3:44:aa:8b:65:83:28:f3:1a:2a:
                    43:8d:45:c3:d6:36:fb:8a:1e:7d:11:64:8c:bc:68:
                    4a:3e:7e:e2:f3:6c:71:8c:23:ed:27:0e:b4:d3:43:
                    d3:36:87:2f:21:c7:c8:60:9a:06:10:b7:e5:38:5c:
                    31:10:7f:89:61:08:da:9d:a4:fe:35:ce:19:14:02:
                    1d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AC:C1:87:F8:E3:13:07:31:02:CF:AC:E2:73:B2:69:8B:B6:43:AF
            X509v3 Authority Key Identifier:
                keyid:06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:00:18:1e:c8:77:1f:3b:22:9f:2c:b9:2c:92:ca:cd:12:d8:
         c0:67:a5:7f:2b:09:10:42:5a:5a:93:b0:75:5d:8f:4c:75:d5:
         43:ac:62:ef:b9:fe:bd:f8:e5:85:f0:ad:c5:ee:c3:73:cc:28:
         77:0f:37:eb:f5:cb:5a:29:47:9e:aa:b0:0c:03:7b:b5:89:8e:
         05:ec:14:a6:a8:41:c3:83:e8:28:d9:37:64:27:9c:a2:1a:af:
         40:5f:7a:5c:58:86:76:b3:10:76:51:03:6a:b2:81:43:5f:f0:
         8a:82:b3:61:e9:4c:0a:14:02:85:b1:ef:34:91:99:6b:ba:5e:
         e0:7a:cc:07:27:83:47:07:5b:62:21:5b:24:35:99:ff:8f:85:
         fe:86:7a:5f:ea:98:81:c9:a2:63:0b:05:14:d4:5b:1c:96:ab:
         e6:c9:0c:1f:22:99:a1:c5:03:b6:f6:e8:01:f1:08:60:01:cf:
         f1:7e:69:8a:5b:db:29:c1:f6:de:23:f1:09:55:40:1e:75:bc:
         54:e5:6e:78:dd:9a:ed:72:41:a6:1a:9b:5e:f6:cf:4a:c5:b4:
         9f:bc:da:3c:53:f9:78:3f:2b:69:a8:b6:de:31:a4:9c:58:76:
         8c:1f:bc:11:11:6a:f9:b4:d5:05:31:d1:90:1f:dc:5a:30:ec:
         db:ba:ef:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:27 2026 by rpki-client