Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
File:                     mm4UdEgoljS5hojuWlr0R9Qsuwc.mft (raw, json)
Hash identifier:          mowydp2Topif98s5Lxr8GqpMWv5NiyGAE7GvNeKgnnA=
Subject key identifier:   63:2B:FD:DA:CF:A2:D1:78:77:3B:32:97:41:A0:FF:F5:8A:9D:E2:3B
Authority key identifier: 9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
Certificate issuer:       /CN=9a6e147448289634b98688ee5a5af447d42cbb07
Certificate serial:       019D9A3E796FC0DDD79A00600AADC620F459
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
Manifest number:          1448
Signing time:             Fri 17 Apr 2026 07:01:18 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:18 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:18 +0000
Files and hashes:         1: Go6GTg9yZuH3ldmoQA3YEONTm-o.roa (hash: CGqeavzuShq2B73tI+xEe2/nH2gqlzVsSoTBNrlZzNM=)
                          2: NQhohxpX79LaflkqFn_SdMtNXkc.roa (hash: hz/eOIHPRLWhV6gGQdsCHSgfHNHYQpMaIgkZOgKyDdU=)
                          3: mm4UdEgoljS5hojuWlr0R9Qsuwc.crl (hash: E8p4pkVcD7WHEu8vElMyeRnugl8OSKe+enBlZjnNDEs=)
                          4: uQs-ZJfKnsb459_bSKrUNmzfSB4.roa (hash: Mi8CPwabE4hTHrT6goEVCJdEWrAoZ6ttolmgoUc/pCQ=)
                          5: xTuc6UK9A4gZnxWW2S3npGWfiHs.roa (hash: gv+TgqVRuNuQuQ9MsAnfTnrMxqIjbm5uB+jO2MB/vu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:79:6f:c0:dd:d7:9a:00:60:0a:ad:c6:20:f4:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6e147448289634b98688ee5a5af447d42cbb07
        Validity
            Not Before: Apr 17 07:01:18 2026 GMT
            Not After : Apr 18 07:01:18 2026 GMT
        Subject: CN=632bfddacfa2d178773b329741a0fff58a9de23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:bf:c9:c4:72:9b:ca:b9:c6:2c:b1:c2:1b:
                    03:8c:88:04:53:cd:41:77:63:f4:e6:6c:3e:de:61:
                    32:46:d6:6e:35:88:46:99:4c:45:32:58:ef:16:08:
                    99:7e:7b:af:16:5a:54:f9:b0:23:bf:87:5a:cd:44:
                    b0:78:80:7f:2f:18:c0:40:23:39:6a:61:5f:39:fa:
                    d4:00:57:50:d1:9d:d5:2e:e9:c2:ae:38:38:e6:5b:
                    28:c0:8a:2b:24:ee:63:a8:42:fe:b4:f4:98:83:cd:
                    65:45:e5:dc:38:3e:dc:00:90:66:f4:4c:86:17:ee:
                    19:26:be:7f:c6:ea:7c:e4:36:71:b7:1d:59:5c:fa:
                    c9:43:59:e7:54:d6:6f:e3:b2:c3:35:d3:a9:e0:a2:
                    0e:34:10:36:af:44:8b:ff:95:a4:18:07:6e:ac:2a:
                    1b:79:67:ef:77:6f:aa:b2:a6:94:54:85:85:3e:12:
                    f0:53:57:cd:ae:4c:4d:d8:b1:88:fd:50:bf:ed:ed:
                    32:d3:49:2a:40:89:d1:33:c1:1b:db:71:1b:16:18:
                    d9:89:78:c7:d8:b3:60:9b:4b:c2:a9:a7:e4:c0:b5:
                    4f:39:9c:1e:78:fe:d6:58:18:68:55:d1:98:9f:92:
                    b7:1e:b5:c9:fa:ad:0d:b3:c2:89:46:2e:97:a6:8a:
                    f6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2B:FD:DA:CF:A2:D1:78:77:3B:32:97:41:A0:FF:F5:8A:9D:E2:3B
            X509v3 Authority Key Identifier:
                keyid:9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e3:53:36:21:15:ea:89:b6:7a:c0:c3:5c:ec:14:2a:5a:78:
         13:7e:fe:05:62:17:31:85:aa:84:54:bb:44:a0:f6:e9:af:10:
         54:ff:41:cb:b5:04:97:55:d5:b1:dd:5b:19:f5:97:9a:dc:7a:
         2a:fa:f9:09:8e:56:a7:38:0a:4a:ee:2f:ef:fc:1c:e6:6e:c2:
         ab:f5:d7:df:9c:48:8a:78:88:cf:80:2a:49:27:21:8d:7f:ce:
         a4:bf:85:33:b0:8a:3c:3a:4a:31:45:64:fb:4d:88:cc:9a:89:
         1e:8a:8c:14:f8:dc:ce:78:c0:74:34:88:58:32:38:2b:37:ee:
         1d:3c:c5:9e:f8:30:14:cd:24:d2:cf:74:a2:11:86:b4:8e:f4:
         34:db:e3:55:ba:d2:71:7c:1e:dd:f5:a6:d1:85:04:6d:cd:d4:
         22:ea:ed:a1:29:66:d9:3b:b5:b6:e4:8c:48:ca:c7:fc:1b:fe:
         8b:42:b4:4b:64:1e:cd:9b:a8:2d:e3:af:ac:54:f6:8b:46:8a:
         a9:f7:c2:60:91:fd:4d:72:1c:2a:03:78:1b:df:22:de:51:f9:
         84:b9:c6:27:5f:44:44:02:dc:28:92:ee:fb:c4:4a:90:78:0c:
         60:be:4b:d0:e5:ed:ba:b6:56:19:c3:bd:1f:17:19:92:37:36:
         4e:f4:a1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:09:04 2026 by rpki-client