Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
File:                     BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft (raw, json)
Hash identifier:          5uXEPOoKXyttO+C77ZGrmNFqG4Bk1371DTg0Y+FiQAE=
Subject key identifier:   59:35:18:7F:E2:3C:AB:83:1B:09:04:D8:FE:88:9A:BD:4E:AA:C3:57
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Certificate issuer:       /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial:       019D9850723F53F0324FF49A9969ADA6325F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
Manifest number:          07A4
Signing time:             Thu 16 Apr 2026 22:01:42 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:42 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:42 +0000
Files and hashes:         1: 00o4xaDHpiFteTUPLMlUN7rQVoI.roa (hash: ZRGfAq/Hq7q+igfCUvDc/UpA7zCnyl+OWfUsaj7F95E=)
                          2: BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl (hash: g2KxdToXIMhgIGQFbFpj2OccAHKgg/b5dgMEJtCBtKY=)
                          3: MvKa56Lh9HW9SL8NyMjhRYtv0qg.roa (hash: 3xT11vaLSNBdap8Lh9ldE026pM17b0YhoNdmRaGGcdM=)
                          4: WrMgI56WRjshSRrApL-slkKjgA4.roa (hash: 0BKk8cC15fl8RJL/MOhUkeA23XV4PJie7eRKpkT7taU=)
                          5: etH8r7e8XASDtw0AKt0yqnoZqpw.roa (hash: Ew9vIIGcLcL1KV1t2cyyHQVGMjP/TKGuie7BO0Z4Iyo=)
                          6: smKaRyBksPR8VVMeNllW4CrXk_U.roa (hash: dXCbu0CsSAQ16fQlnuw0mfD9ky7E36GElPP7CmVSu8Y=)
                          7: wh_A1Ywd9PlQ177YVaXtq3eGCuQ.roa (hash: 53+0yVnHLQ77916U1STNg9D9Toz5NayIfx2I9V3mCKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:72:3f:53:f0:32:4f:f4:9a:99:69:ad:a6:32:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
        Validity
            Not Before: Apr 16 22:01:42 2026 GMT
            Not After : Apr 17 22:01:42 2026 GMT
        Subject: CN=5935187fe23cab831b0904d8fe889abd4eaac357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bc:dc:4c:c0:8c:d4:dc:f1:81:aa:ec:32:57:
                    44:c6:1d:51:11:b6:7a:28:0c:c1:f6:4e:4b:93:c2:
                    9a:1f:5f:95:25:f6:dc:8e:b4:3d:70:e1:9c:47:7a:
                    e6:c3:bc:54:20:82:09:24:62:55:2e:4d:6c:63:f3:
                    64:4a:fe:e6:6d:ca:58:e9:1d:01:d1:e1:8b:b8:e9:
                    b4:93:ce:52:ed:90:d8:88:ca:03:53:f9:76:e1:64:
                    0e:ce:76:47:e1:e4:16:7b:b6:37:ea:89:e0:a2:ac:
                    20:9a:7f:ad:12:a0:fa:f0:a0:9c:30:e7:b4:d5:f6:
                    ca:29:05:da:35:bb:fb:03:1b:4b:70:19:ea:45:cf:
                    b3:d2:78:de:66:6c:55:d0:42:25:72:61:20:56:ac:
                    e6:e4:c4:8e:e2:ff:a2:e0:af:8e:c1:dc:ce:71:95:
                    9c:0f:de:7b:ec:3a:5e:e0:4e:c5:1a:30:8b:ff:21:
                    00:71:15:27:b1:58:f1:dc:43:37:5a:9a:9c:35:53:
                    c9:c5:6d:b5:d3:e9:3c:3b:bd:1c:ce:88:57:c6:fb:
                    02:77:66:b0:f1:37:4d:05:a3:31:7b:9a:8e:50:4f:
                    e5:14:f5:da:c0:56:ea:50:91:1e:0b:ee:c0:26:60:
                    71:3f:76:9f:5d:af:e8:c9:37:c5:40:2f:13:9c:64:
                    bc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:35:18:7F:E2:3C:AB:83:1B:09:04:D8:FE:88:9A:BD:4E:AA:C3:57
            X509v3 Authority Key Identifier:
                keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ab:7b:ef:a0:cf:12:79:29:53:bf:bc:0e:bc:88:fc:a5:4e:
         6b:62:66:3a:d8:bc:11:d9:90:0f:31:68:08:ab:3e:03:be:d4:
         fe:18:57:5b:a9:97:1e:4c:4c:f5:2b:d8:ae:40:62:63:e8:65:
         a5:90:b1:72:c2:a0:f2:6f:de:cd:5f:d9:92:fa:90:5e:ac:a9:
         a0:14:dd:56:82:64:ec:f1:5c:da:88:56:b1:bd:8b:95:cf:e2:
         4f:a4:b3:a4:bf:5b:47:e7:34:d4:e1:92:09:ce:b5:03:92:ca:
         00:bd:23:14:cc:c6:b0:5d:cd:e3:e4:b5:d0:de:68:46:84:02:
         1c:f1:3f:49:20:a1:a1:5e:38:73:50:ea:12:e4:5c:77:a8:1a:
         2f:dd:c1:a0:eb:06:6f:01:a6:bc:6b:72:46:84:e8:1a:39:5e:
         b4:b1:36:25:54:47:16:c9:94:4b:63:03:4f:68:6b:16:52:7a:
         7c:4b:97:72:72:76:9f:09:1e:74:f0:6f:e8:00:ce:bb:06:57:
         df:7a:c0:5a:a3:a1:c7:04:00:5e:a7:32:d2:d4:ea:b0:98:43:
         d8:0b:72:bc:4e:c3:f3:ef:8f:3c:32:88:46:a2:17:6c:cd:a1:
         98:ad:43:eb:8d:6e:c7:8b:09:66:44:bc:71:5d:87:02:25:90:
         7e:08:3d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:39:37 2026 by rpki-client