Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
File:                     IhkMJolAk9xkoF7yz9NUoGz_A50.mft (raw, json)
Hash identifier:          HKhPeAhDptTSLwfj4oKeW1O5iwwK0JeuId/EB+TrdlQ=
Subject key identifier:   5F:0B:FE:B6:D6:8C:CE:2C:EC:25:6F:CA:B6:5B:40:92:D0:99:A2:F3
Authority key identifier: 22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
Certificate issuer:       /CN=22190c26894093dc64a05ef2cfd354a06cff039d
Certificate serial:       019DA3E6BE0CE8453F91EF212A214154821E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
Manifest number:          11F7
Signing time:             Sun 19 Apr 2026 04:01:41 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:41 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:41 +0000
Files and hashes:         1: IhkMJolAk9xkoF7yz9NUoGz_A50.crl (hash: DGlToYGTvGsjK79OzjFLIVA9hTB1Uw/fNxdkosG0Yvk=)
                          2: v2k0Z2ANI4HpUtzeG5E2tPsoW1g.roa (hash: tCUybVD79wplSeTPTl/iXVsu/t1DC6P3qKe+acUwYhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:be:0c:e8:45:3f:91:ef:21:2a:21:41:54:82:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22190c26894093dc64a05ef2cfd354a06cff039d
        Validity
            Not Before: Apr 19 04:01:41 2026 GMT
            Not After : Apr 20 04:01:41 2026 GMT
        Subject: CN=5f0bfeb6d68cce2cec256fcab65b4092d099a2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e5:8b:fc:30:f1:8d:78:20:e5:f4:c4:f3:24:
                    38:4b:26:76:59:7c:b8:f6:dd:8e:e9:45:f5:86:c1:
                    32:93:11:f6:a1:51:1c:b2:4e:54:dc:d0:ba:2f:1e:
                    1b:92:4d:ee:92:65:8a:b4:89:70:69:6f:1d:af:81:
                    0f:49:d5:04:1f:bc:58:56:e8:83:bb:16:c2:27:c1:
                    c1:30:90:bd:78:26:35:57:37:77:00:e5:a5:b4:8f:
                    36:6e:a5:34:e1:99:0b:05:01:40:72:4d:69:73:ba:
                    3e:3a:10:33:7c:c2:cc:47:9a:6f:e5:6c:c1:57:68:
                    4b:f0:be:5d:9f:1c:66:e2:08:b6:70:c6:2f:49:62:
                    fd:46:ed:20:e9:58:66:22:e8:9a:ad:1a:8a:32:b2:
                    44:da:89:d2:98:23:0d:b7:60:a4:26:09:b0:cf:8c:
                    a0:84:94:17:c2:38:e5:33:0e:bf:19:03:d2:4e:f0:
                    38:88:c3:90:b2:ee:53:01:59:9c:25:90:c2:c6:7e:
                    93:66:25:c8:87:29:cf:9b:a8:47:35:77:a7:9d:ec:
                    5c:45:d1:6b:2d:34:f9:b9:35:73:86:f5:8e:c7:2d:
                    2a:fc:ba:78:17:f5:f1:b6:4c:36:84:07:61:54:a7:
                    88:47:ac:12:23:d5:68:f6:9d:be:be:9a:d5:21:e3:
                    c6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0B:FE:B6:D6:8C:CE:2C:EC:25:6F:CA:B6:5B:40:92:D0:99:A2:F3
            X509v3 Authority Key Identifier:
                keyid:22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:6e:4e:4e:56:2b:f8:ff:11:34:8c:43:70:42:37:da:bd:43:
         8c:56:dc:8c:b2:85:45:33:94:28:81:86:03:c4:4f:aa:f9:ef:
         5d:1a:56:68:bb:a2:94:5c:01:ff:48:17:47:5c:ed:25:e6:80:
         c2:65:44:2f:fd:78:18:56:8f:d3:69:d2:51:65:50:36:19:60:
         00:02:3b:6c:a8:49:41:de:6c:41:53:d1:56:b5:a5:bf:4b:34:
         6d:2e:71:0f:1c:58:10:30:f7:38:98:50:61:ae:94:09:29:cb:
         a8:2d:68:87:34:ea:69:7e:f7:18:23:3a:a6:e3:99:71:74:cc:
         83:9f:1e:25:38:a2:f9:91:20:21:82:35:49:7b:2d:16:11:78:
         72:f7:c6:05:e4:f1:e2:6d:8f:7d:96:95:c7:65:e8:af:ce:8b:
         f4:b0:e7:1a:71:8c:e3:02:8c:1a:6e:37:11:54:43:c9:2c:26:
         1a:35:67:3d:74:f7:ef:1f:b5:53:e8:71:ce:34:01:42:fa:17:
         a2:60:b0:e3:fb:05:e3:30:86:47:a2:1e:05:b2:cd:f0:df:be:
         35:06:da:0d:89:dd:95:dc:fd:6b:11:89:81:e4:f7:3b:f7:95:
         d1:79:bd:6a:88:31:41:10:69:80:3d:0f:7d:80:d9:89:62:ca:
         b5:ed:d0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:59 2026 by rpki-client