Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
File:                     obtQVKF8yU__wrwpWhW_74qQQwo.mft (raw, json)
Hash identifier:          kZhPMAV4MH+NcJQ6FgHBYO2PZfBwZAnDX43nOgKpcqI=
Subject key identifier:   B1:D3:34:39:8D:E1:B4:71:4A:33:58:B8:18:5B:C4:99:EC:8B:A4:C1
Authority key identifier: A1:BB:50:54:A1:7C:C9:4F:FF:C2:BC:29:5A:15:BF:EF:8A:90:43:0A
Certificate issuer:       /CN=a1bb5054a17cc94fffc2bc295a15bfef8a90430a
Certificate serial:       019D98BD23EC3160EB452FB33A92F7CCDD79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
Manifest number:          08D6
Signing time:             Fri 17 Apr 2026 00:00:25 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:25 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:25 +0000
Files and hashes:         1: TERthLcTXSHdWMsqlfOOJwKh2_0.asa (hash: hMMFvY1d+bWPtpG5FeE2i0f2zSyXMOEIbRla1EHp4YU=)
                          2: obtQVKF8yU__wrwpWhW_74qQQwo.crl (hash: 6rTrXWVYMJKswwfHvPJ81eP/TlMGwNWPuDU3DLFa+Bk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:23:ec:31:60:eb:45:2f:b3:3a:92:f7:cc:dd:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1bb5054a17cc94fffc2bc295a15bfef8a90430a
        Validity
            Not Before: Apr 17 00:00:25 2026 GMT
            Not After : Apr 18 00:00:25 2026 GMT
        Subject: CN=b1d334398de1b4714a3358b8185bc499ec8ba4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9f:3d:fd:94:87:33:d5:87:b9:67:d8:9d:6f:
                    2e:fa:77:cb:e5:36:9e:e1:dc:71:9d:fe:58:7c:b2:
                    5d:58:c0:e6:b2:01:80:65:21:ea:80:05:cd:9d:3f:
                    ea:30:10:e5:36:e8:6d:6d:62:f2:74:9a:b3:ee:24:
                    06:32:01:e9:5f:2c:a3:57:fb:4b:e1:0e:36:b0:09:
                    50:c5:d2:66:46:59:6a:74:f7:16:86:12:f9:7b:ec:
                    66:50:e9:e4:4e:9a:dc:5e:11:d9:77:66:0b:4c:65:
                    d7:74:e6:68:00:31:ea:d4:b8:6f:df:64:d2:78:80:
                    c6:6a:aa:75:cb:05:c1:49:f4:64:5e:1e:db:01:43:
                    a5:f2:1d:e0:9d:c3:19:a9:b7:e9:00:3d:b8:cb:bf:
                    b2:7b:5d:42:3b:6c:24:16:b5:5c:08:be:2b:a5:6c:
                    10:89:ec:c5:6f:fe:92:77:d0:9c:65:c2:a2:5b:b7:
                    c1:77:d2:28:a8:65:b1:bf:be:17:bb:5d:6c:05:9e:
                    cc:16:29:fc:e6:2b:99:90:74:0c:ed:1a:81:e1:4b:
                    d3:da:2f:7b:65:dd:8f:30:1a:d6:30:90:60:9d:c6:
                    68:f6:34:8a:2c:92:84:cc:6f:e5:96:c2:cd:33:2e:
                    b7:5c:6a:0f:e7:a5:c8:e8:da:78:1d:87:13:8e:1f:
                    95:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D3:34:39:8D:E1:B4:71:4A:33:58:B8:18:5B:C4:99:EC:8B:A4:C1
            X509v3 Authority Key Identifier:
                keyid:A1:BB:50:54:A1:7C:C9:4F:FF:C2:BC:29:5A:15:BF:EF:8A:90:43:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:74:5d:54:ec:d6:fc:8e:b8:3f:8d:92:c6:94:03:e7:e8:89:
         1f:a3:90:24:7a:ee:83:f8:69:9b:13:ef:f2:76:54:37:ba:ab:
         9f:c8:d2:51:75:58:a3:4d:c3:8d:38:2b:52:f7:1c:9a:6c:8d:
         aa:5d:8a:60:0f:a8:fc:df:e0:0c:6c:94:14:bd:71:64:4e:ba:
         a7:4b:c7:7c:29:6f:b0:87:23:2a:69:69:19:1f:e5:ac:51:d2:
         08:57:79:47:10:10:2c:c9:05:a3:b1:62:fe:e8:0a:a2:36:19:
         b3:da:c3:2d:86:4c:29:77:c9:fb:ec:3f:47:3d:88:a2:43:35:
         9d:e5:9b:71:7a:7e:fa:ae:09:d5:a6:01:35:46:45:e5:0d:f1:
         d2:be:cc:07:c8:69:e0:3d:9d:78:3e:9f:c0:f9:fd:85:5d:82:
         32:f3:26:04:83:7c:6b:e2:c3:c2:e6:af:1e:55:b7:2e:c0:d4:
         a2:0e:27:45:55:63:54:0a:63:23:94:87:c8:cd:2c:44:64:1a:
         c9:ef:93:67:bf:80:85:ab:90:cb:f0:c7:21:84:c2:75:04:21:
         5f:54:11:cb:cd:7c:79:53:58:46:a9:b4:ce:fa:61:c5:1f:8f:
         4f:b1:cd:9a:d4:51:e1:96:49:fa:ed:af:d6:79:5e:99:97:a6:
         58:6d:78:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:14 2026 by rpki-client