Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
File:                     vu8TjGK4F0xqgIMG7aV-koBd6YU.mft (raw, json)
Hash identifier:          Aa7HMu8wuUFdoJZM/pswNWYhqh+kMr3/BA7y4/lgghs=
Subject key identifier:   82:D6:8A:D3:61:69:71:27:81:0A:C9:4B:9B:EC:89:86:AB:CC:80:31
Authority key identifier: BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
Certificate issuer:       /CN=beef138c62b8174c6a808306eda57e92805de985
Certificate serial:       019DA30A91DAEC1D7E5F7871E253BFBCE561
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
Manifest number:          04E1
Signing time:             Sun 19 Apr 2026 00:01:12 +0000
Manifest this update:     Sun 19 Apr 2026 00:01:12 +0000
Manifest next update:     Mon 20 Apr 2026 00:01:12 +0000
Files and hashes:         1: T0yo1RTWcLkKjj9BCwI7fzMhqKs.roa (hash: q8a/g/tCJJ065beXU3o3AgznSWXuuLeSniWGL98Zjek=)
                          2: vu8TjGK4F0xqgIMG7aV-koBd6YU.crl (hash: MUrnHqJMyp/IEe1d42ZjL3y9OKfg5/w0LgfzigJvUps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 00:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:0a:91:da:ec:1d:7e:5f:78:71:e2:53:bf:bc:e5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beef138c62b8174c6a808306eda57e92805de985
        Validity
            Not Before: Apr 19 00:01:12 2026 GMT
            Not After : Apr 20 00:01:12 2026 GMT
        Subject: CN=82d68ad361697127810ac94b9bec8986abcc8031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7c:f5:9a:52:36:66:32:df:f9:24:ed:05:46:
                    50:8d:bb:91:7a:03:fe:c4:75:26:ee:bb:bc:96:37:
                    22:ab:d8:e0:ee:6c:3d:c7:69:49:dd:9a:40:d9:0b:
                    2f:d5:d0:98:02:92:6b:f9:e5:6b:9d:4b:c6:6f:2d:
                    26:81:f0:32:06:8f:2c:a7:3a:05:d2:22:54:5c:84:
                    9b:10:12:c2:7a:ee:23:6d:f0:39:dc:53:e4:75:9c:
                    22:03:0e:97:16:32:47:54:7c:15:90:0e:59:21:76:
                    39:5c:de:03:31:e1:ad:c7:04:d3:74:75:01:dd:00:
                    8f:d9:4e:6f:31:93:0c:7e:28:ea:20:e2:ca:e8:c3:
                    25:c6:91:92:49:fe:d0:0f:a9:8c:47:3b:d4:ab:4d:
                    f0:a0:61:4e:ae:e5:e1:23:de:27:88:ea:d5:8b:31:
                    16:95:e1:24:3e:60:f1:30:16:3d:97:38:6b:97:3b:
                    b9:dc:fd:e2:be:d5:03:27:d9:de:be:29:95:59:9c:
                    2a:80:02:98:f1:42:d5:e0:ae:b7:b0:de:9c:69:ba:
                    cb:34:76:34:26:d6:0f:c8:3c:32:6c:f0:5c:b1:ff:
                    90:f2:89:67:ba:55:5e:63:5a:6c:f5:7b:1e:13:a3:
                    0b:32:49:31:4e:5f:c7:ff:83:80:04:45:86:6f:8b:
                    8e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D6:8A:D3:61:69:71:27:81:0A:C9:4B:9B:EC:89:86:AB:CC:80:31
            X509v3 Authority Key Identifier:
                keyid:BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:9f:01:79:02:3f:cb:b3:bd:b0:43:5b:04:60:4c:01:fb:79:
         e9:69:0f:13:06:ab:95:d0:c5:bb:b9:de:8d:29:b0:54:ae:c8:
         02:b5:90:b2:88:c6:2c:ff:c5:3b:a4:b1:01:ca:82:ba:9e:e6:
         8d:f6:07:12:60:f0:12:c0:60:e1:19:a6:41:94:e9:f4:ff:0c:
         69:2f:8a:b8:af:ae:ec:90:75:d0:92:e4:d4:d6:c8:1b:06:1b:
         0e:4c:c7:d6:98:00:d9:f7:8a:88:3f:60:f7:b7:8f:b3:ec:fa:
         9e:0e:70:41:08:d6:f1:3d:21:1f:48:2c:6c:da:dc:1a:80:8b:
         c8:ce:73:d7:7c:f2:f5:0f:b0:9a:e6:64:e4:3c:07:fd:4e:8e:
         e1:75:8b:f8:ca:6f:1b:78:96:3a:42:b7:0f:6d:22:0f:61:00:
         86:8c:fa:f3:df:74:d5:27:8b:43:b9:fa:6e:d2:23:e7:ce:c6:
         33:51:8e:ca:37:be:c2:5f:56:78:f5:36:34:68:63:cf:a1:c5:
         0b:40:53:51:63:07:e7:47:75:ac:48:56:5b:1c:91:27:0f:07:
         72:c2:75:11:86:16:46:36:13:39:51:03:98:39:ad:3c:1e:da:
         e5:08:b5:f1:5f:b6:39:e6:66:3b:f0:61:2e:f1:51:9d:c1:e8:
         df:0f:f7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:15:42 2026 by rpki-client