Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft
File:                     fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft (raw, json)
Hash identifier:          fRl+vOfHoCyNl4QU1BRrkMJm6ULhyVV+RNqyXIQhfH8=
Subject key identifier:   6A:18:91:96:BB:F8:FC:D5:09:1E:55:02:07:0B:1C:84:35:D3:45:B7
Authority key identifier: 7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F
Certificate issuer:       /CN=7c45672fc42bdd33e545338a7417e8171a04ee3f
Certificate serial:       019DA2D3940E2F4FF587B8BB2C8D5ACD11C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft
Manifest number:          0DD4
Signing time:             Sat 18 Apr 2026 23:01:08 +0000
Manifest this update:     Sat 18 Apr 2026 23:01:08 +0000
Manifest next update:     Sun 19 Apr 2026 23:01:08 +0000
Files and hashes:         1: fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl (hash: KpRdW4r4zuhApED7z8egrSY3FZFh8RgohYIkN88j6/I=)
                          2: oQqfeDIpQqTY2qXddv-RmkOsSBw.roa (hash: hZoJxnHQE17dg7NNgeLOUvJ0Ph/Ff3w++3G8l+eeaLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 23:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:d3:94:0e:2f:4f:f5:87:b8:bb:2c:8d:5a:cd:11:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c45672fc42bdd33e545338a7417e8171a04ee3f
        Validity
            Not Before: Apr 18 23:01:08 2026 GMT
            Not After : Apr 19 23:01:08 2026 GMT
        Subject: CN=6a189196bbf8fcd5091e5502070b1c8435d345b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1d:f9:08:8e:fd:b2:93:e7:59:60:5f:9c:86:
                    e2:02:b5:17:8f:0b:63:c3:7b:a6:f5:4e:bf:3a:1e:
                    4a:dc:25:ad:90:b4:96:b6:40:9b:19:34:ac:0c:f5:
                    6c:49:77:51:7a:81:bd:7e:d6:80:d7:6a:d8:6a:09:
                    3d:0e:d6:43:85:4e:cc:ae:5b:c5:8c:e4:27:77:9a:
                    af:22:8b:b6:d1:93:fd:80:b5:8f:38:63:47:8b:9c:
                    b1:08:cd:c2:47:0f:61:3a:5b:0c:9e:87:44:59:6d:
                    79:21:9a:c0:f4:04:af:d4:6e:2f:14:e1:42:d9:31:
                    ab:b6:c1:66:6c:b2:4c:51:14:43:b7:56:86:a6:d4:
                    cb:4a:f2:6e:90:0c:82:5e:3a:9f:bf:ff:59:7c:ff:
                    02:f9:db:8b:b8:93:07:3c:1d:8a:31:8d:2f:95:28:
                    ea:a8:f1:16:c1:26:0c:1f:80:d2:76:52:32:88:ee:
                    b6:80:cb:36:a0:1d:8c:82:8d:c4:6c:b3:11:61:3b:
                    ea:b7:91:9c:90:b8:fd:7f:52:46:c5:bb:79:af:f9:
                    ad:b6:1e:94:ec:6a:21:5d:70:bd:89:99:87:6b:8e:
                    90:10:c6:82:27:9d:fd:24:42:36:3d:80:7c:ae:a7:
                    12:90:2d:3e:78:9d:40:1b:4b:db:ef:76:1f:25:43:
                    18:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:18:91:96:BB:F8:FC:D5:09:1E:55:02:07:0B:1C:84:35:D3:45:B7
            X509v3 Authority Key Identifier:
                keyid:7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:d3:c6:cf:60:ba:e4:03:cd:4f:85:2e:08:6f:43:1c:e6:32:
         68:dd:28:89:7c:8b:9f:39:7b:81:2c:e6:de:75:5e:30:94:49:
         8c:73:d8:df:6e:1b:19:e0:8e:32:51:08:27:16:be:c3:4a:fe:
         2c:d3:5a:60:9c:23:6d:da:27:ea:e1:95:bd:2d:5c:cb:12:73:
         ca:a9:6c:26:a6:8b:e7:c7:f3:f6:ed:42:46:5d:7f:99:35:f4:
         b9:9a:9e:1d:a1:88:b3:7a:2c:4b:5c:26:64:86:d6:12:01:2c:
         3a:bf:17:38:78:2c:73:80:8e:13:c8:ac:e9:f9:dd:4e:ed:ff:
         6e:e9:1e:5b:09:5e:52:23:f7:65:57:7d:76:da:7f:74:6a:ad:
         1c:fa:6a:98:52:76:e8:e7:a9:52:b6:1b:8c:cf:1b:36:94:74:
         81:e4:39:44:6f:eb:a6:af:4b:47:54:08:d8:08:78:0a:2d:5f:
         fb:64:3b:87:ce:ad:b0:18:6d:df:fc:5d:c8:4a:cf:ca:0f:1b:
         6e:10:85:b0:9d:38:e8:3f:f3:5c:95:e3:a7:83:96:4e:91:54:
         a5:72:5e:69:3e:a0:0f:de:d9:9b:47:7e:de:6b:79:cb:c5:e9:
         e2:b9:a2:b1:93:f4:66:6a:11:a8:f5:48:d4:59:c1:20:35:dd:
         15:38:96:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:05:32 2026 by rpki-client