Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
File:                     iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json)
Hash identifier:          yoJHwlArJtDmQxi2CQZkLNNQ49FN5hgiFZ9sknK964I=
Subject key identifier:   01:16:CA:6D:15:B1:65:4B:53:71:13:8C:51:D9:BD:C8:FB:31:10:57
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Certificate issuer:       /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial:       019D99D04413F089262BA87937FB651760B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
Manifest number:          1470
Signing time:             Fri 17 Apr 2026 05:00:56 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:56 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:56 +0000
Files and hashes:         1: IMFLS8lmXO1X5kPh5brIEnkKfS4.roa (hash: w30MlBbSWaBo/k7+866HLmrY83fawU5Z9usPbYOh250=)
                          2: P4iYo_pgPdMjfud17S1Pja-OB4g.roa (hash: V9YQ3Ly1AA0IvwxjFuA9aYy5KxQNhTDwIiK8jm1VIm0=)
                          3: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: YoCTUbbmKPfKV+tABtXCieOvriz2X2t0fGicCoLmW+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:44:13:f0:89:26:2b:a8:79:37:fb:65:17:60:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
        Validity
            Not Before: Apr 17 05:00:56 2026 GMT
            Not After : Apr 18 05:00:56 2026 GMT
        Subject: CN=0116ca6d15b1654b5371138c51d9bdc8fb311057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:a2:86:60:60:f2:1f:b5:cf:82:9e:60:ab:
                    82:71:68:cd:ae:7d:20:dc:95:0e:ea:e2:7d:c2:78:
                    15:d4:89:59:68:95:8c:b8:e3:ab:80:43:a2:37:58:
                    3f:f4:2f:c5:fc:c3:58:79:bb:96:67:5d:e1:82:51:
                    37:e3:1e:7f:c3:9e:9f:ac:69:37:52:55:cb:54:16:
                    65:e3:1e:67:77:82:08:46:12:bf:d8:ea:16:5c:9c:
                    99:5d:96:a4:e8:a2:9e:d0:17:55:cc:f9:2d:aa:bc:
                    5b:53:df:33:57:9b:0f:dd:1d:fb:ed:e9:3c:0a:2d:
                    bf:fe:46:45:af:31:f4:c0:f2:fa:78:45:5a:00:3a:
                    5a:de:02:ad:cf:c8:bd:aa:9e:39:88:bc:93:2a:1b:
                    1c:a7:5a:88:57:30:df:39:11:22:92:b3:d4:c4:d5:
                    69:9c:05:62:bb:74:45:0a:34:a6:5f:f6:87:a9:c1:
                    45:72:61:d9:74:09:33:67:1f:eb:a5:dd:4a:56:66:
                    a0:de:b1:da:15:ca:92:ed:b3:ca:e9:8c:a6:3a:18:
                    e4:0d:f8:66:de:1c:ef:8e:6f:4d:3a:96:d5:52:1a:
                    bc:d7:35:77:0d:f1:b0:05:6c:8b:9f:3b:17:4c:e0:
                    c5:11:6c:c3:5e:7d:78:59:2e:47:09:fe:b5:f6:2d:
                    aa:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:16:CA:6D:15:B1:65:4B:53:71:13:8C:51:D9:BD:C8:FB:31:10:57
            X509v3 Authority Key Identifier:
                keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:2d:e7:cf:be:cc:3c:57:c9:6d:65:d1:cf:97:9d:0a:25:7a:
         4d:1f:bb:f5:f8:12:0c:e1:b0:c9:9a:a9:d2:cc:d0:4c:17:53:
         6d:2f:7b:2d:a7:3b:a9:8c:0a:cb:75:2a:18:42:0c:f0:58:77:
         45:99:a2:84:7c:fb:fb:08:85:48:df:6e:88:4e:ee:3f:20:af:
         ec:52:77:17:3b:35:c8:8e:b3:f6:e4:e1:b5:44:5a:e3:8a:01:
         31:fd:3b:5d:dd:aa:13:12:a4:1d:9a:be:2f:18:2a:12:db:d6:
         bb:cb:0f:34:c5:b9:4f:97:26:d8:ec:3a:06:af:7a:01:62:f8:
         8c:56:de:58:28:d7:0c:07:26:d4:05:98:7e:17:3e:57:ac:34:
         0d:1e:56:cf:8b:17:78:0d:2e:ab:5a:d2:25:a5:55:70:19:10:
         c6:6e:cc:84:da:b5:96:2e:42:25:d5:69:67:7e:0c:3b:76:a9:
         04:a6:a8:82:51:91:c9:d0:94:7a:f7:d3:ab:85:2b:4a:a0:26:
         16:f3:91:e6:3e:4b:53:e3:7e:ce:6e:3b:00:ab:f9:35:18:a3:
         38:f2:f5:4b:1d:ed:50:f4:84:19:3c:57:99:b6:8f:ae:8b:9a:
         6e:11:c0:05:4b:08:0e:3c:52:5d:18:fd:1f:6d:96:07:f0:d7:
         78:f5:91:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:00:47 2026 by rpki-client