Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
File:                     FT0HLM7wC_Rk1mDb0F2todoz0sg.mft (raw, json)
Hash identifier:          I1c80i53QjL3kf9lOfVdgOQZxk5V36naL7h+phyUTxA=
Subject key identifier:   E0:27:17:8E:7F:83:B6:D9:F4:00:DF:8D:EF:D2:77:07:1D:A0:C0:01
Authority key identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
Certificate issuer:       /CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Certificate serial:       019DA3E6EB2C5CC7402F10E1ECD28974410B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
Manifest number:          0AEE
Signing time:             Sun 19 Apr 2026 04:01:52 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:52 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:52 +0000
Files and hashes:         1: FT0HLM7wC_Rk1mDb0F2todoz0sg.crl (hash: Y2cKCCOKb+PAsQ4hFysyTOGOOZEN4gx2myGHF9/cpJo=)
                          2: SGpevAZGETQFuN0tYIFbuVO-oHU.roa (hash: p6/1XP6vhlSrsHHLDARcNdGWShp5rNMH31ibs+saZHQ=)
                          3: h00EwWS0nwQcNex-PoN4bBKe784.roa (hash: KPJZ49G0RdOibbutyTd80kdxdj+ZbMSn0AFJ4T8Y7D8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:eb:2c:5c:c7:40:2f:10:e1:ec:d2:89:74:41:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153d072ccef00bf464d660dbd05dada1da33d2c8
        Validity
            Not Before: Apr 19 04:01:52 2026 GMT
            Not After : Apr 20 04:01:52 2026 GMT
        Subject: CN=e027178e7f83b6d9f400df8defd277071da0c001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:52:1e:bd:12:8f:d4:e6:c0:b7:69:ed:ba:0c:
                    71:82:f2:b2:d8:6c:a7:c7:02:30:b3:e1:79:09:c2:
                    69:21:1f:cc:6a:31:d7:33:f4:9a:f7:53:c1:d3:a0:
                    75:f2:5c:08:f9:0b:56:4d:ab:a9:c9:3f:6c:89:03:
                    3f:b3:03:06:3d:7b:11:41:76:5e:88:a5:f3:ef:fc:
                    bc:42:f8:8f:a7:47:26:87:3c:ed:61:c3:44:37:2b:
                    7f:aa:63:90:7c:e6:6f:e8:4e:84:89:43:7c:86:8c:
                    0f:b2:9d:eb:22:a6:73:33:71:e4:0b:ee:ad:8b:da:
                    97:15:d8:00:77:9b:69:74:a7:5f:4b:3a:98:7a:07:
                    cc:24:4c:de:0a:f6:7e:96:67:5c:c7:df:2c:39:24:
                    c4:f7:63:c0:99:b4:b1:1b:77:c3:07:6f:e3:2d:ce:
                    bc:1f:ab:50:76:fe:49:a2:c2:95:8a:46:10:ae:ae:
                    83:da:f1:65:81:c7:ef:81:89:57:71:52:9c:99:9d:
                    f0:9b:c0:a8:a4:6f:07:5c:0c:c0:af:65:72:32:82:
                    b8:c4:00:72:f5:65:f8:e3:bb:be:18:52:94:bd:a8:
                    82:2c:c5:63:02:b9:79:58:55:03:2a:7f:a4:1b:50:
                    79:66:4f:37:c1:bf:27:42:3d:a0:65:63:bc:f7:df:
                    40:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:27:17:8E:7F:83:B6:D9:F4:00:DF:8D:EF:D2:77:07:1D:A0:C0:01
            X509v3 Authority Key Identifier:
                keyid:15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:47:09:9f:1c:53:e1:3f:3d:57:fa:1a:cf:9a:b6:46:09:2a:
         32:d4:dd:96:51:af:58:a9:75:46:9d:c0:ee:59:0f:a6:7f:a9:
         e0:85:a6:96:38:ea:0f:00:47:19:d4:f1:3e:e5:ac:36:4b:87:
         53:22:8b:31:c2:53:e3:cd:d4:6d:44:bf:06:b4:b9:de:84:51:
         5f:ec:60:28:d2:05:58:2e:de:32:fe:8b:2e:3e:f4:74:d7:f9:
         da:e7:5d:54:67:a0:c7:d7:a3:92:cd:92:dd:18:5d:57:39:9e:
         20:cc:6a:14:4d:6c:f9:d2:b3:00:c0:6d:c9:29:0e:7b:5b:59:
         32:a9:1c:4a:15:52:73:90:05:ea:b1:38:d9:de:95:e2:92:42:
         2b:6b:b5:a1:fd:40:7c:3c:2d:fa:1f:4c:38:1f:f6:7d:ec:fd:
         8a:af:4c:51:f9:54:d9:8d:31:5e:4d:13:f2:71:3f:a5:5f:4d:
         7c:a6:fd:df:4d:02:f8:3d:2a:36:13:82:6b:dd:7f:ba:9e:db:
         53:a4:2a:13:25:67:fb:1f:51:83:ac:70:76:7b:e4:ef:5f:b2:
         85:81:11:e4:6b:74:fa:5b:05:ae:d8:d8:ca:7d:3d:21:cd:34:
         85:41:a8:bf:db:40:b8:90:fe:9c:0e:60:42:b0:7f:a3:f5:1c:
         a3:0f:1c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:16 2026 by rpki-client