Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
File:                     Fi5IMpyL6O8gnplY2marAkAUXhk.mft (raw, json)
Hash identifier:          5AlJ2qfO0UGVu0USKeoROsrUhA/wFoYmyfxdctnXT9M=
Subject key identifier:   5F:AB:D7:59:C6:84:05:61:63:F7:DE:7E:E4:01:17:C5:A4:88:8A:C4
Authority key identifier: 16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
Certificate issuer:       /CN=162e48329c8be8ef209e9958da66ab0240145e19
Certificate serial:       019D98869E38D7A3BBB61680BF86899BA2F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
Manifest number:          099F
Signing time:             Thu 16 Apr 2026 23:00:52 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:52 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:52 +0000
Files and hashes:         1: 62jZg4gngBAnPwivfw6fHLKrFR8.roa (hash: x5Xq81WhPxvz0KcW7Qb+lmuqrFvDsxsxDYK9R0dFh5A=)
                          2: Fi5IMpyL6O8gnplY2marAkAUXhk.crl (hash: HhibH2rcwSU3lrYC7ZznaH9y6LSDX8h9PV8aA/pamlk=)
                          3: L1zbFMwgTo8k0cGpa43eL9rJSvs.roa (hash: 3nOYFWDqeUlGtXtuv/0p8OtC8pzPOMkeWtIsBYndPi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:9e:38:d7:a3:bb:b6:16:80:bf:86:89:9b:a2:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162e48329c8be8ef209e9958da66ab0240145e19
        Validity
            Not Before: Apr 16 23:00:52 2026 GMT
            Not After : Apr 17 23:00:52 2026 GMT
        Subject: CN=5fabd759c684056163f7de7ee40117c5a4888ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:40:90:84:b9:22:f0:ac:26:6b:23:fe:58:b9:
                    25:19:c5:d7:73:56:d3:27:01:cf:f9:fc:b4:d8:82:
                    0a:f1:bd:05:a7:4b:c0:77:61:25:c9:c7:17:1a:41:
                    a7:9a:05:67:e8:7a:51:59:1c:54:aa:eb:63:4a:19:
                    e5:34:70:c7:03:e1:c8:a7:39:2d:40:32:21:25:21:
                    5a:14:16:ab:ee:55:d4:62:90:3e:19:be:8a:d9:0a:
                    3b:ad:56:ad:a4:7f:71:3c:82:f2:1e:0d:12:69:50:
                    d9:2b:0a:c0:4e:91:ce:ad:d8:fe:94:43:d8:36:4a:
                    1b:b6:cd:9d:8a:4b:59:56:71:4d:d0:8b:5b:17:3f:
                    0b:16:cc:77:39:b9:83:3e:a6:bd:e0:d6:cf:14:49:
                    42:ba:f8:f5:f5:ba:88:02:e2:ab:ed:31:bd:f6:64:
                    0e:56:ea:7b:74:ed:1e:c3:92:dd:b0:ac:6b:b2:d5:
                    31:77:b7:e6:f2:d0:a7:ee:4c:44:d7:93:82:28:5e:
                    c8:df:c0:28:8a:b9:e1:55:4e:ab:5f:81:52:06:f4:
                    dd:15:26:31:e0:a1:39:4a:f5:1a:34:3a:2a:67:75:
                    85:8b:8c:2f:e4:c3:fb:61:8b:76:fe:bb:44:dd:2a:
                    2a:21:fc:e1:53:78:ed:f9:02:80:d2:f3:13:ea:1d:
                    13:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AB:D7:59:C6:84:05:61:63:F7:DE:7E:E4:01:17:C5:A4:88:8A:C4
            X509v3 Authority Key Identifier:
                keyid:16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:71:4d:73:8c:b3:90:25:ac:4f:06:3f:dd:7d:90:62:62:3f:
         6f:5d:a2:62:1f:29:77:8e:53:7d:13:20:90:24:2c:c6:a5:4b:
         ab:2e:ac:33:de:46:82:01:1d:08:04:cd:b5:31:43:0c:be:c5:
         b2:e9:9b:0c:ca:3f:53:36:df:91:11:4d:21:22:a6:cf:88:7a:
         f4:5b:f8:ec:c0:13:a4:8c:e2:cd:83:18:f9:78:df:d3:96:20:
         21:d8:64:5e:29:0b:6d:a9:32:a8:15:c1:ab:fb:09:3b:35:5d:
         fb:8e:1a:79:68:a0:c1:c1:62:e0:99:16:5c:33:f5:84:e5:5c:
         bc:9a:ea:83:d0:c0:94:6b:76:41:a4:43:9d:b8:10:33:84:08:
         70:c2:9d:ca:a2:e8:82:19:24:3c:e0:49:c1:c5:38:cf:98:93:
         6f:08:d4:74:cb:2a:2d:52:2c:20:e1:17:49:52:88:9c:77:ed:
         6c:e7:17:e2:a7:7d:41:98:7b:ba:92:55:24:01:96:e1:bd:f4:
         46:da:5f:2b:1a:ad:d1:e6:52:a0:75:e3:35:ef:50:79:39:a1:
         7a:ca:7b:ed:d7:35:07:e4:4d:3b:10:76:44:8b:56:e3:8b:0f:
         0f:8f:f4:90:fe:df:0b:aa:d0:85:d1:d4:58:fa:e8:8b:f4:24:
         77:70:e4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:59:32 2026 by rpki-client