Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
File:                     aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft (raw, json)
Hash identifier:          OM9sf8VnLeGSWUS89+MJf/FMtxf6IDJfZh2LYMYiLqM=
Subject key identifier:   0D:B3:0A:6F:08:8E:ED:F8:3C:10:89:39:8C:36:4A:80:53:D4:89:BB
Authority key identifier: 69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7
Certificate issuer:       /CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
Certificate serial:       019D99631694A4D5A159132D56D606C1DFCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
Manifest number:          17C0
Signing time:             Fri 17 Apr 2026 03:01:40 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:40 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:40 +0000
Files and hashes:         1: F0LzkFVGMTBWApSs_wM978YwiCQ.roa (hash: eqGhiZkloBkRtfkxnH/kF16wbkGdYNJEpml7PevLHH4=)
                          2: aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl (hash: QujC8l+zAlGONoo0h7NYiOb+DgYLJ9orhgyJmMg9NN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:63:16:94:a4:d5:a1:59:13:2d:56:d6:06:c1:df:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
        Validity
            Not Before: Apr 17 03:01:40 2026 GMT
            Not After : Apr 18 03:01:40 2026 GMT
        Subject: CN=0db30a6f088eedf83c1089398c364a8053d489bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1c:2d:63:b8:2b:16:f6:5e:e7:98:8f:ea:f5:
                    97:ae:33:3e:81:88:4a:12:bf:b1:92:04:87:85:0c:
                    59:4e:88:4c:ef:52:fd:41:2f:73:8d:05:84:50:67:
                    84:41:43:a0:ec:fb:c8:4f:5b:1c:4c:f9:b7:df:31:
                    3a:bb:9c:2a:12:a6:b4:ab:d6:d8:1b:81:27:fe:4b:
                    76:1b:06:67:62:c5:72:e9:93:50:d8:55:93:23:9b:
                    57:5f:7e:72:ab:c6:bd:5b:44:d5:89:d4:82:81:44:
                    af:77:20:34:b0:f6:4e:81:67:aa:38:d0:48:10:9c:
                    be:0b:44:24:dd:c3:cd:54:c0:c3:5d:26:d2:07:58:
                    50:47:d7:9f:33:d8:00:92:73:77:17:83:99:8e:cd:
                    10:5e:6e:6c:bb:8c:78:1d:b5:26:26:8b:e1:24:0f:
                    72:c4:b1:67:a9:51:67:df:4e:cd:14:b4:97:e7:2e:
                    1f:d7:79:63:8b:e8:cf:14:92:28:20:bf:3f:75:28:
                    96:67:8d:7e:aa:c0:5c:96:72:fe:63:a1:4e:94:4d:
                    0b:de:e0:4a:d1:b8:80:e2:39:34:c5:ce:d6:3d:dd:
                    49:c1:b2:de:2a:8e:1b:3c:fc:1f:29:9f:27:1d:e3:
                    fa:ae:6d:25:4c:5e:82:ec:57:2f:a1:08:ae:a7:49:
                    13:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B3:0A:6F:08:8E:ED:F8:3C:10:89:39:8C:36:4A:80:53:D4:89:BB
            X509v3 Authority Key Identifier:
                keyid:69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:10:81:58:93:c1:87:d1:44:5d:ff:1d:2e:e6:a3:17:f6:c2:
         f7:db:51:9c:4a:0c:af:84:6d:97:20:d7:65:2b:8e:e7:bf:5d:
         b9:76:57:1b:5f:38:bb:49:50:b1:cd:da:32:82:8d:c5:ee:47:
         4a:75:11:5b:a5:12:ab:36:30:a4:05:d4:60:3c:77:65:a6:4e:
         b9:60:02:a8:4e:9b:12:39:57:b6:72:c4:0b:22:cd:18:44:4b:
         f7:3a:ad:f5:3e:dd:cf:cf:07:e4:9b:e8:a1:74:9b:51:28:07:
         6c:dd:c8:e3:5c:90:f5:8f:98:73:c0:6d:3f:fd:d0:16:5f:8b:
         68:71:6b:59:31:aa:f7:a7:f0:d4:ed:e7:83:53:a8:27:de:53:
         84:20:0e:ef:fb:d9:10:20:fe:f5:57:c8:9b:67:7d:a1:78:65:
         82:4f:50:ee:e7:2a:ca:ea:7b:85:a4:e6:d8:be:db:75:56:91:
         29:7c:4f:3c:14:eb:f3:55:b6:d7:73:3c:74:0e:a1:45:dc:4b:
         6c:b9:a4:0c:2b:f7:4f:1d:e9:30:a9:a0:b1:98:43:59:38:e9:
         f7:07:81:f8:60:c3:aa:ad:20:f0:ca:bd:ac:d7:77:49:6c:66:
         f1:2f:a4:4d:b0:30:f7:a7:2c:78:ea:94:ec:7e:77:76:2d:1b:
         df:51:20:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:44:30 2026 by rpki-client