Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
File:                     adSSvj_PjMWoWckEjFD9QL_bd4c.mft (raw, json)
Hash identifier:          mO/Xx+ATweEO8FS/qqGCWWTxsOcNFALJcaVmV/Q6egQ=
Subject key identifier:   67:B1:9E:17:78:AE:4E:25:79:35:44:E1:4E:03:A0:F3:91:B6:CA:40
Authority key identifier: 69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87
Certificate issuer:       /CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787
Certificate serial:       019D985017E7C4331D15A920CCC7151A8964
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
Manifest number:          05B2
Signing time:             Thu 16 Apr 2026 22:01:18 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:18 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:18 +0000
Files and hashes:         1: adSSvj_PjMWoWckEjFD9QL_bd4c.crl (hash: g8SXzD3TH6GjT0avRtkVjjbErIHzuwg+3I48NzidBP0=)
                          2: n-ZAT-Ul9tbkaV0CLaWA-XT411U.roa (hash: TtS8MXUMjryS2KglqrPI9cFZLS1rb1BrcZ1YrWA74zE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:17:e7:c4:33:1d:15:a9:20:cc:c7:15:1a:89:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787
        Validity
            Not Before: Apr 16 22:01:18 2026 GMT
            Not After : Apr 17 22:01:18 2026 GMT
        Subject: CN=67b19e1778ae4e25793544e14e03a0f391b6ca40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2b:60:ae:af:81:df:01:6f:a4:80:21:98:f5:
                    f5:dc:44:63:3b:da:70:32:65:9b:f4:57:b8:1f:6c:
                    14:a8:1b:64:23:eb:24:be:db:d5:d7:57:81:86:8b:
                    15:1c:55:93:2f:f2:5b:e3:c8:17:dd:11:7a:29:7e:
                    db:ae:0a:07:5e:8f:94:55:0c:64:99:cf:11:09:b9:
                    4a:dc:f0:2d:bc:bc:39:b5:43:d9:8e:39:33:5a:b2:
                    da:34:81:c5:0b:a1:15:07:82:f9:e0:f5:d9:b6:e8:
                    dc:79:2d:d5:dd:33:d5:40:97:82:97:51:f3:34:36:
                    8a:2c:e7:99:ef:18:a3:0d:72:ee:14:7c:64:74:86:
                    16:95:ff:60:5d:f5:85:61:be:f1:83:43:72:67:68:
                    30:9b:52:b0:5d:d7:c0:a6:5a:0c:e5:03:67:42:a6:
                    a0:06:31:b7:e2:97:2f:39:e8:f9:60:00:7c:fe:9b:
                    09:08:22:df:d7:de:ac:36:3a:ad:9a:9c:6a:29:62:
                    19:e0:d9:62:42:2e:a6:c6:f0:91:df:c7:fa:d8:3d:
                    4f:5e:73:03:21:28:e3:06:ca:0d:70:40:4c:e2:4d:
                    37:a6:07:be:a5:17:e8:72:00:1b:b5:44:c3:ea:72:
                    ea:48:76:22:69:0a:64:c2:19:d8:ff:e2:77:39:de:
                    c2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B1:9E:17:78:AE:4E:25:79:35:44:E1:4E:03:A0:F3:91:B6:CA:40
            X509v3 Authority Key Identifier:
                keyid:69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:bf:77:72:63:b3:76:54:b2:c1:c7:14:47:96:b6:01:5b:17:
         e4:7b:ca:47:01:e4:f4:b7:4f:6f:b0:18:d7:bc:56:13:24:55:
         15:37:74:10:22:0a:bf:9d:a6:a7:b1:c2:e4:15:8e:f6:d3:97:
         c4:9d:0e:61:8b:86:cc:27:0f:c8:7f:c9:62:91:f9:57:a9:1c:
         57:11:b0:24:f5:6c:5b:8a:9f:98:e2:54:ec:7c:21:8d:35:6e:
         20:ac:41:47:26:67:2c:0c:03:ad:55:7a:e8:f4:66:44:e0:24:
         e2:d9:3b:4f:84:75:96:9e:99:04:d8:18:36:dd:39:a2:6f:43:
         46:43:6d:cb:ad:2f:e6:4d:03:15:f6:ba:3b:6e:a0:e7:6f:42:
         a0:2e:41:13:88:92:28:9f:53:1a:90:f1:47:d2:bd:66:cb:e7:
         50:3d:fe:3e:5b:30:6c:3f:31:28:a6:ff:38:68:81:01:2f:e6:
         f1:05:fb:77:f4:89:a0:7f:ae:fb:a7:db:63:21:61:50:f3:b0:
         b6:c6:9b:0d:02:00:5b:81:e3:df:17:9f:e9:3b:58:60:eb:35:
         01:5b:d4:5a:9f:69:5c:f8:d2:eb:52:cc:12:44:63:21:73:94:
         ce:09:94:3e:db:92:12:68:24:cd:cc:a5:e0:87:af:bc:fb:bf:
         9a:a0:95:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:22:24 2026 by rpki-client