Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File:                     9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier:          /S0PQ8hMHdnbgAegsRDnuEwWvM8TVostl6gkT9dxgbE=
Subject key identifier:   B8:EF:E3:EB:5F:6D:82:12:87:72:65:4D:73:33:88:BD:CB:AA:FB:08
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer:       /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial:       019D97E1C32DF10764373E320CB59D436A5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number:          0925
Signing time:             Thu 16 Apr 2026 20:00:48 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:48 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:48 +0000
Files and hashes:         1: 0DAQlpT9x-QaKyJ8cOE4xeRFybQ.roa (hash: cLzURrgNbzm6pPzLt8hQc5OKqgGCPtGdJQ9/RRN5LZU=)
                          2: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: UOLm8roY07MD4XKq/1uxEqedgIfxPZgjH5trU69SKS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:c3:2d:f1:07:64:37:3e:32:0c:b5:9d:43:6a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
        Validity
            Not Before: Apr 16 20:00:48 2026 GMT
            Not After : Apr 17 20:00:48 2026 GMT
        Subject: CN=b8efe3eb5f6d82128772654d733388bdcbaafb08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:38:b4:f3:4c:89:f8:63:86:5a:6a:49:de:52:
                    ba:e7:6d:cd:de:1a:41:10:26:7f:f9:4e:0c:60:b5:
                    bc:aa:17:1c:6f:28:8f:7b:dc:06:41:c6:eb:34:cc:
                    b8:57:40:d8:86:04:fe:17:97:40:a3:ff:b4:b4:88:
                    39:97:1b:12:f2:5c:1e:47:fe:75:26:1f:9a:67:f1:
                    81:71:92:92:91:d4:b8:40:3a:fa:36:c2:4e:f3:74:
                    0e:4f:d6:ae:22:91:5c:4c:bb:63:2c:57:2f:9c:2c:
                    62:2c:f7:32:87:fb:e5:83:72:45:f5:a5:a5:0d:73:
                    df:dd:b8:4d:18:d5:6e:35:f3:16:bb:2b:01:09:0e:
                    64:1b:1e:82:f6:e2:f6:61:5f:a0:ca:9b:f4:9a:4a:
                    2a:16:39:5d:7f:a9:8e:95:55:2e:94:15:17:86:81:
                    ac:69:fb:67:9b:14:e8:d5:e5:a6:b9:a1:56:08:11:
                    6b:cd:5e:c6:92:01:ea:3d:a8:2c:6a:57:7d:b2:3d:
                    87:77:fc:b2:0e:ad:db:00:6c:da:98:7c:40:41:db:
                    11:47:fe:a7:0c:a9:61:a2:3f:33:21:5b:a6:85:cc:
                    ab:65:db:42:6e:20:e4:dc:e6:ef:45:43:60:20:34:
                    07:9a:df:92:98:98:b2:2e:ad:4e:51:de:ac:45:c2:
                    cb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EF:E3:EB:5F:6D:82:12:87:72:65:4D:73:33:88:BD:CB:AA:FB:08
            X509v3 Authority Key Identifier:
                keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:43:88:dd:17:be:5f:bd:24:74:23:8e:37:12:80:be:ca:5e:
         6d:60:bc:4b:66:a7:ed:8f:2d:79:fd:e6:5f:38:fa:03:7e:ee:
         01:32:cc:e3:f6:c9:1d:80:a9:e3:30:4d:54:bd:ec:d4:d9:6a:
         e2:dd:2d:4e:0b:81:e7:1a:34:0c:8c:59:2d:2d:3a:27:17:8a:
         bb:12:bb:13:89:01:5b:41:5a:24:60:36:84:ab:e6:dd:10:97:
         96:9d:71:7a:ae:6b:03:96:b1:13:66:cb:af:a5:e6:52:73:7e:
         78:26:61:50:47:19:ec:c0:48:dc:d8:48:1e:2c:12:ef:40:ed:
         30:25:06:35:9e:e3:53:27:67:c5:57:19:63:93:91:06:18:b1:
         5c:f8:1c:31:7a:bd:9c:59:76:dc:ea:45:c9:ef:c9:64:ac:90:
         fc:d4:e3:be:06:3d:4c:af:88:78:19:7e:43:88:56:4c:a0:91:
         06:9a:c8:10:c9:50:af:ba:6e:f8:38:a8:2e:ce:c6:78:87:b9:
         23:85:2f:97:06:01:88:86:0a:ea:5d:26:2f:54:6e:7e:05:b6:
         8a:25:65:16:a7:85:f0:cf:b9:3f:93:8b:2f:30:48:1d:20:08:
         ce:64:f8:b8:45:a2:6e:a5:3f:d6:a8:c2:6e:5f:d4:c0:7f:50:
         9c:f9:5f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:42:56 2026 by rpki-client