Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
File:                     Rqyv5hND1xDfYM2R3giQH9u6b48.mft (raw, json)
Hash identifier:          RvRT23ocDBhqbHvBm5EfrisKfyV8rp2n1ki43TRu3IU=
Subject key identifier:   2D:6D:AD:A0:EA:CB:0E:90:BB:D5:0B:76:52:AA:8A:65:AA:49:C5:43
Authority key identifier: 46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F
Certificate issuer:       /CN=46acafe61343d710df60cd91de08901fdbba6f8f
Certificate serial:       019D99996CE42FDB8C5F2EA07D47B99A1CC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
Manifest number:          0902
Signing time:             Fri 17 Apr 2026 04:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:01 +0000
Files and hashes:         1: Ak9vOxGpJOtM5ZM2WAZaWA80hJ0.roa (hash: eWX9AMTey3Vg1fgVIDxnxj6ffwC52UU2QqjvGjmMTlQ=)
                          2: Rqyv5hND1xDfYM2R3giQH9u6b48.crl (hash: 1M72aE32O1aC00Fqbn608djSwa1SOPRf/+y4gttFUH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:6c:e4:2f:db:8c:5f:2e:a0:7d:47:b9:9a:1c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46acafe61343d710df60cd91de08901fdbba6f8f
        Validity
            Not Before: Apr 17 04:01:01 2026 GMT
            Not After : Apr 18 04:01:01 2026 GMT
        Subject: CN=2d6dada0eacb0e90bbd50b7652aa8a65aa49c543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bf:1f:e6:94:70:a2:8f:9b:aa:85:ea:ab:84:
                    e4:85:56:a3:2f:b4:36:32:95:48:5b:4f:f8:22:76:
                    1b:65:bd:32:be:b5:87:ca:7c:16:a3:76:93:64:98:
                    8f:b5:a5:c0:2a:d7:f1:5b:6a:b9:70:eb:2f:07:fc:
                    79:82:c8:41:2a:10:8b:62:d7:38:83:0f:f3:5f:ce:
                    8e:c1:e7:9d:14:ff:bb:ff:9a:b2:03:26:4d:ad:41:
                    c4:65:b2:48:03:9b:6b:57:0a:b7:2e:d3:39:c9:84:
                    eb:66:b8:0a:7b:42:4b:b5:37:ee:4b:07:58:d9:16:
                    f8:07:b6:54:88:74:94:90:d5:52:2f:53:1d:c4:71:
                    65:f9:49:70:e6:f7:68:80:47:66:1a:85:1c:0b:96:
                    5c:a6:d3:89:87:b5:be:cc:7a:79:81:ce:82:29:01:
                    fc:e6:23:bd:f0:38:1e:af:95:e2:53:64:a4:bd:08:
                    2a:89:46:7e:f9:0c:08:dc:68:6b:ca:af:d9:f4:79:
                    d2:e5:d2:85:6e:c0:3d:0a:69:28:8c:60:19:2a:aa:
                    ea:d0:a7:16:ac:fa:eb:d7:e1:0f:62:54:ce:c2:1b:
                    92:e2:42:b5:55:f6:a9:ef:e0:5d:7a:6e:1f:fb:4d:
                    be:b5:12:94:7d:f3:32:31:e3:a5:51:77:6b:69:e7:
                    86:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6D:AD:A0:EA:CB:0E:90:BB:D5:0B:76:52:AA:8A:65:AA:49:C5:43
            X509v3 Authority Key Identifier:
                keyid:46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:77:01:9d:c0:2b:83:e0:68:9f:33:83:57:64:35:2b:2e:13:
         04:31:82:74:ff:7e:d3:10:e3:fe:27:83:d7:18:15:a4:a9:ed:
         0b:ab:ad:86:f4:67:cc:92:10:58:2c:ef:8d:74:95:fa:62:ef:
         32:0b:39:9c:ec:b2:58:0c:89:42:6a:a4:4e:5f:59:09:1d:f0:
         e5:f2:3f:96:35:89:dc:82:4c:1e:cc:ea:a1:28:9e:b7:00:aa:
         5a:dc:91:c6:07:dc:ea:bd:c3:e2:0e:1f:71:ec:05:b3:8f:05:
         f2:5a:f3:82:ab:89:00:a3:5b:7a:65:cb:d1:f6:25:f0:23:71:
         42:c7:b0:36:63:d2:af:4f:06:5e:ca:27:62:30:48:39:2a:9c:
         fa:16:de:92:a8:4d:66:86:ab:c9:ba:a3:27:c9:07:d8:50:44:
         ce:e2:40:4a:56:53:31:5d:28:27:e1:57:6d:92:3b:74:ea:97:
         6c:94:1f:52:70:fb:a7:3b:f0:9b:c6:fd:44:be:90:ef:e5:ab:
         96:ef:df:c6:37:d8:cc:fc:e2:57:c6:8f:d8:bc:ac:8c:5c:52:
         d2:d2:2f:33:41:0d:b3:39:a1:f7:18:39:18:7a:9d:4f:f8:97:
         b0:cf:c6:59:81:c1:cb:b0:4b:5e:fa:e5:d5:79:e8:02:bb:06:
         d2:da:24:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:11 2026 by rpki-client