Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
File:                     CAGEeJFIcaqw4cADbTYm661uIMw.mft (raw, json)
Hash identifier:          IMI3u0WQ+aS81n1z3Kgxr/g82g49MA9BgR5Sh2Lizok=
Subject key identifier:   E3:ED:A9:DF:CD:C5:09:A0:B0:F2:1E:D4:B2:D3:9D:39:49:4E:62:62
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Certificate issuer:       /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial:       019D9A74FDDA5304C0F244ECAC842B9740C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
Manifest number:          14FD
Signing time:             Fri 17 Apr 2026 08:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:51 +0000
Files and hashes:         1: CAGEeJFIcaqw4cADbTYm661uIMw.crl (hash: kg2caXqFkKvgJxuh5/qlXxIfchgcS861NTkXlBc0O78=)
                          2: Zd7N4oi7jgCKvlVl_PSF0xPERYA.roa (hash: EyGQp9Tr3UHMVF5vszwF0WIX2jRn29S+5KpDje4nblg=)
                          3: _5XI55CGPr_29rfxJRh8PWW9xI0.roa (hash: +AqJmUu9717kFBpcrIYfXtKgNzPHUS4Q+/khsyHEsCw=)
                          4: gebfehKBm0ZMvC6QIM8PvsoEboo.roa (hash: IX5MGc/yeIa0cd1NLArqnrmm5WQdn3pQJr9AOfiIcCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:fd:da:53:04:c0:f2:44:ec:ac:84:2b:97:40:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
        Validity
            Not Before: Apr 17 08:00:51 2026 GMT
            Not After : Apr 18 08:00:51 2026 GMT
        Subject: CN=e3eda9dfcdc509a0b0f21ed4b2d39d39494e6262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5e:73:11:aa:54:ea:9c:1e:a8:9a:9b:ac:d4:
                    47:f5:25:88:c0:6e:c4:59:34:b0:df:ae:2e:b3:80:
                    5f:8a:0d:46:2e:9a:5e:72:52:07:2d:a8:fc:7e:ea:
                    0e:d4:1b:7d:94:7b:a1:3f:c5:ec:97:b1:3b:e6:a6:
                    ec:37:f4:20:ee:d4:0e:3a:7f:88:e8:63:81:67:19:
                    ce:42:fb:4a:1b:f5:4a:31:97:e5:f4:c8:91:0c:47:
                    15:f5:ab:86:39:41:c7:23:b0:20:f6:c5:9e:f4:c7:
                    b1:a6:2d:91:53:f2:49:f9:e2:3e:b2:75:c6:10:f5:
                    da:ae:6e:f0:8e:34:5b:0a:6f:ba:9a:d3:b2:73:78:
                    a8:ed:f8:00:f7:12:5a:d5:95:9d:31:f7:ab:2f:17:
                    50:28:d3:47:d5:70:c9:eb:c7:6d:07:f5:b7:44:ef:
                    c3:53:21:88:90:43:8d:4c:e8:c8:74:b0:8c:32:c5:
                    eb:15:43:bd:57:3b:b3:31:14:62:d1:c9:1c:e8:62:
                    6a:e8:23:46:46:c9:8d:f2:0d:ad:e8:82:9d:be:95:
                    08:1b:ce:db:06:70:1f:fa:4b:d7:f5:6c:21:86:79:
                    d7:7a:30:ab:3d:54:d8:9a:8c:19:e4:b5:ec:32:b5:
                    2a:27:61:5e:44:d0:56:dd:d0:4c:e3:31:47:a4:5a:
                    6f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:ED:A9:DF:CD:C5:09:A0:B0:F2:1E:D4:B2:D3:9D:39:49:4E:62:62
            X509v3 Authority Key Identifier:
                keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:78:0e:49:90:a1:2e:f1:6a:02:cd:67:d0:3b:62:9d:e5:a1:
         6c:25:4f:d9:94:21:a7:88:55:a5:25:a1:1e:38:a8:27:82:3d:
         be:d7:d3:b3:64:c5:d6:7b:0f:07:0b:9d:e2:5d:76:05:6f:49:
         f1:ed:11:4f:92:69:49:01:e7:88:b8:c7:52:cb:9e:81:ba:9b:
         a7:42:2c:8b:48:22:1b:cf:de:1a:5d:87:95:52:3f:0a:99:77:
         dc:45:85:19:57:ae:56:1b:1e:58:5b:11:82:8e:89:bb:41:cf:
         19:e9:8f:52:ad:9d:25:01:96:f2:e8:29:4d:f1:85:5b:59:ed:
         60:4c:f4:2e:6a:23:a4:fc:87:8f:8b:4d:4a:c8:70:0c:2f:6c:
         86:da:b2:90:de:ac:99:06:a5:4d:42:af:eb:34:7d:e9:13:f2:
         34:a6:12:f5:11:83:b1:f0:d8:5a:12:5b:e1:77:2d:ca:89:b8:
         dc:80:25:da:54:b2:10:31:14:39:42:70:f3:16:23:ee:98:bc:
         f5:31:e8:0f:11:88:48:02:dc:07:44:ca:e6:2e:e1:c8:ab:74:
         9a:82:18:3b:ca:7a:a9:71:ee:23:bd:97:e4:31:72:c4:81:56:
         1a:66:f6:4b:15:57:2d:cf:ba:a8:61:5e:58:a2:63:a6:fb:ae:
         7e:d2:d6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:35 2026 by rpki-client