Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
File:                     gFBQT0sXdugLitn4s1bmE7WFs1o.mft (raw, json)
Hash identifier:          bqv0u5+eAdZNDsr5ZJWYFdbGjxrbHs9jj5FRwRmPP5Y=
Subject key identifier:   E3:E2:16:B0:49:B9:97:28:64:26:6A:CE:DD:0D:71:59:34:41:3D:78
Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
Certificate issuer:       /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Certificate serial:       019D97AAF8B439C845874C923C2B4923042C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
Manifest number:          13E4
Signing time:             Thu 16 Apr 2026 19:00:57 +0000
Manifest this update:     Thu 16 Apr 2026 19:00:57 +0000
Manifest next update:     Fri 17 Apr 2026 19:00:57 +0000
Files and hashes:         1: 3CKrmM_5W9qGNwDPT707OalHLD8.roa (hash: 2NaLVNwjCsDKmG9seV4wmBk1JF4GhywwWN0SoFKjTJk=)
                          2: 8QowToFWOkypHOOmOlay9H9m3cI.roa (hash: FEurkgF3+aXJgB8qUw5KyF+e2MK/WZfbCLqpt4IVc9o=)
                          3: FV-pMv8EGTaMa6CCbtYT2e9XnxQ.roa (hash: oCIb8FIypKIz4AB8jOeyTjsmMStjtBdK3bvDo7a5vjg=)
                          4: gFBQT0sXdugLitn4s1bmE7WFs1o.crl (hash: z3AuBNqyts8o9v6lSP29FRoEOXYyymtdkj9K9wTsIrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:aa:f8:b4:39:c8:45:87:4c:92:3c:2b:49:23:04:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
        Validity
            Not Before: Apr 16 19:00:57 2026 GMT
            Not After : Apr 17 19:00:57 2026 GMT
        Subject: CN=e3e216b049b9972864266acedd0d715934413d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a0:8c:0c:a1:a6:cd:d1:b4:6b:13:29:54:38:
                    5d:20:6c:1d:17:ba:72:8b:85:e4:04:26:a0:3f:44:
                    d1:89:25:0d:4e:ae:a7:cb:28:68:32:8a:a9:f4:b6:
                    0b:74:11:bc:cf:4a:3e:92:9f:9c:a7:75:44:b7:f5:
                    57:f2:44:3c:9a:e0:0b:af:d1:b5:22:52:b1:03:0d:
                    b6:5c:a8:65:15:01:96:6d:f9:fb:73:b0:81:8d:23:
                    6b:75:b9:66:3d:ea:0d:bb:f3:ee:f5:8d:98:ef:6d:
                    c2:c5:98:48:42:c8:e9:5b:6f:c1:7c:93:0d:41:08:
                    25:fa:ba:9b:5e:5f:16:fe:1e:5d:d1:45:82:ea:0c:
                    84:5b:5d:f3:dc:1e:01:39:2f:ab:33:9a:91:64:bc:
                    92:45:d4:fb:4e:bd:2e:cf:36:70:f1:79:97:3d:0a:
                    e9:19:b2:f4:5d:5b:73:d2:c8:24:ee:f7:f3:69:42:
                    ec:54:da:0d:cb:94:ae:a6:5b:cc:52:c0:76:4b:ae:
                    db:94:f2:85:e7:17:e4:c1:99:e4:8f:23:25:cb:62:
                    07:a8:e4:7a:e3:bb:fd:a1:3b:7f:b8:f2:13:f2:9a:
                    94:7e:39:a4:3d:34:66:f9:c4:21:ba:3a:ec:70:83:
                    b3:49:a4:78:45:37:57:cb:50:7b:26:3c:a7:95:fe:
                    29:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E2:16:B0:49:B9:97:28:64:26:6A:CE:DD:0D:71:59:34:41:3D:78
            X509v3 Authority Key Identifier:
                keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:92:1f:07:54:ae:a2:f7:5e:85:b0:83:d2:fb:c5:0f:b4:ba:
         3e:b1:18:d6:58:4a:7d:ce:0e:2c:09:d2:6a:82:24:31:b3:bf:
         e7:8a:04:b5:fc:83:0d:da:42:80:a2:3b:db:89:27:7b:52:d1:
         1f:df:b9:73:2f:7f:08:e1:d5:be:d6:9f:1d:bc:08:b8:74:f1:
         54:ca:83:dd:5e:32:59:55:91:cc:fc:46:42:80:5a:de:06:07:
         ff:d4:f0:99:38:b0:4c:96:5a:e6:9a:6d:94:af:ba:cf:54:89:
         56:30:5f:3a:a7:b1:cb:21:96:54:0a:0c:8f:2d:33:39:8e:44:
         01:24:4e:a8:a7:6d:2e:04:fb:ab:73:a1:be:b8:22:e4:88:4c:
         e2:cd:91:89:96:63:60:a9:70:1c:c4:cc:70:c0:b6:ed:a4:89:
         17:12:56:7b:db:40:ff:d0:70:84:81:2b:36:18:d8:92:8a:0e:
         fc:11:67:23:a8:96:a5:5a:0c:b7:85:b2:04:75:a7:23:ab:36:
         d5:8b:6a:22:57:0e:7c:6e:89:d3:43:d9:78:13:fa:48:1b:f9:
         a7:11:bd:22:a5:af:13:55:14:5f:a3:94:ce:b3:04:7c:65:56:
         8e:da:bb:ec:9d:74:6b:18:01:d5:c0:7c:b0:ef:3c:bb:1a:cf:
         0c:43:e2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:14:32 2026 by rpki-client