Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
File:                     tGS0UjqJcrni9GpPShY06XAnrt8.mft (raw, json)
Hash identifier:          O8SAHBnljwolBc448Iu+6+tXZZav6bnWZJIbJu3CnxA=
Subject key identifier:   EF:FE:9C:B9:AF:A8:AC:C0:63:76:07:88:30:8C:CE:1A:C5:FB:03:0F
Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
Certificate issuer:       /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Certificate serial:       019D9B874669A1AB80200336826CCAF59A2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
Manifest number:          088D
Signing time:             Fri 17 Apr 2026 13:00:26 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:26 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:26 +0000
Files and hashes:         1: 9Bk2DNR2uYMUyRc1vkqhEEQ_U7I.roa (hash: stlOV3eHfF1Tw/j9xaX8GJThoN6iWH1T13ESnbBJcL8=)
                          2: hB5bKIzKCvcbl8ogbaBmur_bdIs.roa (hash: Uyup6v2aW5b2Hld6LVCK6C+h9+vlfo2ENPD8ezX9qzQ=)
                          3: tGS0UjqJcrni9GpPShY06XAnrt8.crl (hash: tMeer7uMiaCnVp1yvPF5m/nuprlQnmpoBRmI4jpvF+8=)
                          4: ybJz7bnKGkBBxiMObl5o-Qmd4SE.roa (hash: JhVcV+03zxVD2R4ZSByn4pLYKVYrGi9gl0bLGuBHrWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:46:69:a1:ab:80:20:03:36:82:6c:ca:f5:9a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
        Validity
            Not Before: Apr 17 13:00:26 2026 GMT
            Not After : Apr 18 13:00:26 2026 GMT
        Subject: CN=effe9cb9afa8acc063760788308cce1ac5fb030f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a2:32:46:ff:f5:5d:34:c9:79:66:74:e9:57:
                    7c:f8:92:24:7e:43:b8:36:5e:05:63:64:12:4f:cb:
                    22:8f:eb:23:2c:29:a9:83:21:33:28:41:92:a8:55:
                    2c:f6:2c:13:3f:ea:4b:ac:c3:24:88:7b:43:bf:63:
                    46:22:27:84:c4:23:28:62:a9:07:50:b6:4d:28:b6:
                    1a:dd:79:dc:b1:e2:e0:53:14:62:2c:12:94:c4:01:
                    34:10:72:60:49:e4:18:43:9a:1e:6c:2c:90:c3:0e:
                    ab:40:fa:05:3b:42:04:a5:c2:23:f6:4c:28:e1:85:
                    36:46:d7:c9:a9:8c:85:1c:c4:ac:eb:c0:be:f3:c0:
                    5e:33:21:99:cf:42:e2:e1:2f:25:c3:49:b2:d8:f1:
                    eb:58:2c:60:55:6a:af:40:5d:3f:ce:92:a8:6b:af:
                    8c:a9:65:b8:cf:9b:f6:fb:57:d8:c4:a7:66:38:ef:
                    31:d0:5a:48:d9:fc:0f:32:3e:4d:a4:68:84:b6:81:
                    8c:49:ba:c3:03:09:da:2e:4e:4a:04:1d:ce:1e:39:
                    82:11:14:4c:bf:c5:31:f5:e1:c4:a7:9c:4c:d1:34:
                    ca:29:c8:ea:23:7f:13:6e:5d:a6:50:fc:4f:5d:80:
                    3b:e8:c5:16:14:f1:87:4d:96:27:d2:3e:9f:7e:f7:
                    55:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FE:9C:B9:AF:A8:AC:C0:63:76:07:88:30:8C:CE:1A:C5:FB:03:0F
            X509v3 Authority Key Identifier:
                keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1e:c1:85:a5:58:b6:44:c1:f3:7b:e2:ea:1d:f7:6b:72:de:
         2f:47:32:78:11:48:4d:96:30:7c:10:88:3f:76:a0:1b:88:d7:
         2b:6f:e6:a4:ad:98:12:bc:5c:4a:e8:11:37:1e:0d:e7:c5:57:
         83:2a:59:1e:10:de:8e:90:33:e9:df:77:1c:2d:af:e4:f0:a6:
         07:aa:a4:4d:b8:96:54:90:3e:42:62:3d:a2:6f:3e:29:4c:6f:
         40:16:82:ff:4d:a6:53:5e:b6:3a:0a:2b:71:ec:9d:ee:5c:6a:
         93:47:f3:82:5b:11:3e:bd:1f:55:f6:89:9e:8a:43:9c:b5:0e:
         fe:d7:b8:88:f4:81:da:7f:a8:6e:36:6e:62:5b:8a:d8:9c:f1:
         be:d6:3c:ff:a6:6f:bd:cc:9b:01:f7:0e:c5:13:0c:c6:73:14:
         6d:ed:fd:a4:c8:86:8b:9f:3f:6b:37:03:f3:90:74:dc:38:8f:
         60:b6:e2:04:a4:fe:ca:66:c8:58:49:07:20:8f:40:f8:24:ed:
         c6:7a:52:c6:7a:6b:79:cc:84:af:9b:fd:88:c7:fe:7b:e2:d3:
         e6:8a:a4:00:30:30:5f:5b:55:ab:ff:97:80:b9:cc:a4:9b:b0:
         86:21:b1:87:a9:f6:bd:54:87:37:aa:b4:3c:bb:51:50:77:df:
         36:46:ea:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:06:25 2026 by rpki-client