Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
File:                     arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json)
Hash identifier:          B+xeklAT8RZFbN/ohyM/3Xp6TFZUnKSkx3u51M4o3T4=
Subject key identifier:   48:6F:A4:87:B4:B0:B4:7E:FF:53:79:BC:9E:C1:3B:CD:71:6A:B5:3F
Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
Certificate issuer:       /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Certificate serial:       019D99994AF0D2350C45657285CA99319167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
Manifest number:          0730
Signing time:             Fri 17 Apr 2026 04:00:53 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:53 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:53 +0000
Files and hashes:         1: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: 4rjcHxkpPJBbrnK2Awc3h7VnP5ucnHu+CvS1ZdIVgXE=)
                          2: gl50fN_Ynsz9IXAMmsmP-OcX1e8.roa (hash: Y8PmA6bJxzns2yN2Fv6Avkv41L0+CAihgSIjURU1EKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:4a:f0:d2:35:0c:45:65:72:85:ca:99:31:91:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
        Validity
            Not Before: Apr 17 04:00:53 2026 GMT
            Not After : Apr 18 04:00:53 2026 GMT
        Subject: CN=486fa487b4b0b47eff5379bc9ec13bcd716ab53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8c:fa:3d:32:a3:25:cf:27:13:54:26:9e:ae:
                    d3:3f:7a:0f:19:94:36:64:f6:11:a2:dc:c8:a1:1a:
                    ce:be:65:63:b9:c9:e4:42:03:7c:ce:79:a0:9a:f9:
                    e3:ff:fa:32:85:4a:30:08:4d:95:ea:6a:3c:79:d1:
                    bb:2a:92:0a:08:2b:40:6a:5e:d9:e9:fe:39:2d:4f:
                    65:72:8b:ec:ee:c6:e4:80:fe:6f:7c:58:42:bc:09:
                    45:7b:4f:6e:d5:d4:71:5c:e6:57:4b:7b:02:b9:e4:
                    b2:cc:46:f7:c2:43:25:83:40:0e:31:69:15:e8:2c:
                    e0:d7:52:4b:b4:d8:a6:84:71:c4:ab:25:2a:0e:58:
                    c7:41:09:bb:55:32:e5:b8:b9:a1:4c:3f:df:9f:6e:
                    33:ec:dc:39:d4:8b:47:16:83:59:fe:66:d7:20:9e:
                    8e:0c:62:7e:71:d1:bd:4a:9b:63:bb:c4:f3:cb:94:
                    7c:31:dc:af:62:0f:39:80:e8:c2:4a:6a:4c:69:90:
                    ad:81:be:ea:e3:ec:6a:4f:18:bb:a8:da:da:97:ab:
                    78:c5:bb:af:e9:9c:9b:50:6c:65:b8:c8:de:1f:88:
                    30:c2:88:f8:70:62:95:cf:f7:06:0f:98:39:59:4d:
                    3b:c9:34:16:79:01:0b:1d:ae:5b:b0:2e:d0:6d:70:
                    79:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6F:A4:87:B4:B0:B4:7E:FF:53:79:BC:9E:C1:3B:CD:71:6A:B5:3F
            X509v3 Authority Key Identifier:
                keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:7b:93:8a:36:56:a7:85:9b:81:07:95:fa:c2:9d:17:01:a8:
         63:3b:71:79:02:d4:aa:7a:a9:29:9b:9a:8c:11:cc:95:ee:8f:
         a4:ce:b3:e7:84:19:c1:57:37:eb:ea:48:00:cf:c8:e0:be:9e:
         b0:55:05:46:c7:85:01:cd:95:6a:72:fe:e6:04:56:9b:b0:62:
         16:54:bf:2d:f4:0d:07:65:1c:fb:24:f9:86:cb:28:2b:a5:ac:
         6a:f9:59:26:c2:53:6b:9f:71:91:07:32:9e:3b:ed:f4:0d:01:
         92:3f:7a:d5:d2:98:cb:b8:d4:d5:01:63:6b:f6:de:c4:02:af:
         f5:28:4d:22:a8:fa:af:f4:b9:8a:35:6a:8d:0a:da:16:5f:4d:
         f8:0e:19:59:6b:5b:e0:7a:07:bc:b2:96:75:cc:4e:e9:98:ea:
         ad:ef:df:d4:74:fe:32:91:86:cc:24:b8:1c:97:ae:b5:70:69:
         a8:20:0e:f2:5e:21:79:3b:c5:51:cc:02:cf:7d:f7:67:c2:b5:
         2e:6c:21:62:80:fc:73:45:4e:1a:02:92:48:b8:3c:42:f9:7f:
         53:ea:3d:39:bd:b7:54:65:ac:b7:d5:fb:45:56:35:2d:a6:a8:
         74:0c:1d:16:d8:cc:4a:b5:33:45:34:9c:de:80:35:b4:b3:11:
         30:2f:10:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:30 2026 by rpki-client