Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
File:                     87qQxx60ywFpyUhD5ccv13dQGQY.mft (raw, json)
Hash identifier:          x474xrk9rFcPFmcRVKBp+ilbukYZwlXTr5TgzSWf3po=
Subject key identifier:   32:6E:FA:54:C9:12:F7:CB:EF:22:25:46:C8:A6:FC:B3:61:89:65:4C
Authority key identifier: F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
Certificate issuer:       /CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Certificate serial:       019D99627C951B0B5DE353F3EDA8B158EC58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
Manifest number:          1719
Signing time:             Fri 17 Apr 2026 03:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:01 +0000
Files and hashes:         1: 87qQxx60ywFpyUhD5ccv13dQGQY.crl (hash: yBDwNObNWpyJQX6Fjexg0wQRPQhECElm8vb6cBO+Glw=)
                          2: HFbNCHkvFA8jkd2sknvleLz36Tg.roa (hash: fi2cqyuRcru8EJ7IltLtB/qriwTw+zg8CNvhM51ultA=)
                          3: UKaxkQEqDefi6Q-PAxV70oCO_r8.roa (hash: U/xm0eOwS2N25g8rhsisLKcIXoZW3KuS4QAYfKx9zWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:7c:95:1b:0b:5d:e3:53:f3:ed:a8:b1:58:ec:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
        Validity
            Not Before: Apr 17 03:01:01 2026 GMT
            Not After : Apr 18 03:01:01 2026 GMT
        Subject: CN=326efa54c912f7cbef222546c8a6fcb36189654c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:67:ea:38:89:e0:ba:05:ff:0f:1c:70:18:43:
                    8c:3d:ad:c7:de:5f:78:2e:4e:67:fc:a6:29:5b:f6:
                    b3:8c:6e:19:3e:ec:ad:5d:b3:d4:5f:4e:29:fc:93:
                    2f:50:72:d3:7e:cb:ff:92:b2:40:79:f1:d9:1b:25:
                    bb:cf:9a:23:93:95:53:5a:b5:73:64:6f:8d:ca:3c:
                    01:71:c2:09:b7:e7:72:fb:ce:06:04:4b:ea:14:25:
                    a6:d6:45:a6:dc:40:36:b8:5d:f6:e7:77:bd:e9:78:
                    e7:3d:16:91:a8:9d:bb:55:06:94:63:52:55:45:88:
                    ef:03:f9:89:f2:c5:27:f5:60:2e:70:98:c7:2c:3f:
                    66:85:f8:61:ec:1f:ad:e7:fb:29:57:a1:98:c6:08:
                    b6:ff:2e:3d:18:5c:d0:40:b8:09:95:d2:70:72:65:
                    06:21:bb:bb:40:ef:82:87:72:44:8d:46:c7:72:7f:
                    95:2c:30:56:4b:42:16:7a:28:52:69:d0:de:f8:c1:
                    9d:61:57:db:fa:6f:f9:bd:79:1b:84:75:82:84:17:
                    4e:68:87:7a:b1:79:37:af:5d:0b:99:a7:e4:2e:37:
                    84:3e:09:5f:34:0a:6e:ac:ad:45:e6:2a:f6:8b:18:
                    13:97:c9:ad:4f:ff:4a:ff:8c:ec:b3:8a:f0:e9:40:
                    c9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6E:FA:54:C9:12:F7:CB:EF:22:25:46:C8:A6:FC:B3:61:89:65:4C
            X509v3 Authority Key Identifier:
                keyid:F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:02:5e:c2:ae:6b:6e:2b:d9:57:3d:9a:ec:44:e9:32:be:84:
         6e:ee:53:aa:b1:a7:24:bc:c6:3d:99:ec:05:30:65:30:9f:94:
         08:52:a0:0d:d1:a0:b5:e2:a1:3b:39:32:be:c9:fb:13:4f:93:
         19:de:3f:cd:e7:a8:3a:18:57:15:8e:b7:41:45:20:67:63:4b:
         74:f5:ca:43:77:71:68:22:34:8b:05:f7:1d:bb:4f:14:ca:54:
         fe:55:93:17:ae:71:46:10:18:e3:6e:00:ae:c7:a0:27:58:86:
         73:e3:fb:4b:d5:5b:de:80:16:fa:eb:ff:3b:b9:ca:a3:9f:2b:
         0f:c3:31:fd:36:f0:90:68:aa:76:1d:9a:fc:f4:86:25:5f:9a:
         b3:55:5f:ad:0c:4f:ed:20:21:d6:6a:64:b5:68:9a:c9:ee:2c:
         81:e0:34:49:33:90:79:f3:42:22:cc:7c:7d:bf:68:02:4f:d4:
         c0:77:7f:8c:1c:9a:69:d5:88:54:36:29:a5:e4:7c:43:60:68:
         8f:84:b6:16:df:21:d5:d0:00:84:ce:0e:22:62:d3:66:5c:46:
         87:98:81:01:67:71:21:00:2e:60:75:a7:fd:f7:ce:c5:ad:6f:
         98:25:09:54:b3:5d:d2:1f:48:13:f3:00:dc:bc:78:3b:8e:ba:
         b1:99:26:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:09 2026 by rpki-client