Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
File:                     spvHpkk9OBeN1_XpxJDI7zqKWYs.mft (raw, json)
Hash identifier:          /JdfGHffJEuo6y3SGI2s2+6FQz1gyzxll/NLm/uufyo=
Subject key identifier:   9C:15:83:CB:A9:21:8C:4A:10:42:19:4A:41:0A:45:C9:74:5E:DA:55
Authority key identifier: B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
Certificate issuer:       /CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Certificate serial:       019D9A3E015AFB3E26DF246D7D93D0E0358D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
Manifest number:          04C5
Signing time:             Fri 17 Apr 2026 07:00:47 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:47 +0000
Manifest next update:     Sat 18 Apr 2026 07:00:47 +0000
Files and hashes:         1: spvHpkk9OBeN1_XpxJDI7zqKWYs.crl (hash: +Wxwslkcxybh08G/XkX053pgG3b4K099TWglGAR186k=)
                          2: yP4RNTLUKk_P7r0qobg3b_Bq0bc.roa (hash: 7RS0tj1L1t6QadBqzoijZL2F1NYP+eQ5vizwcCjgqj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:01:5a:fb:3e:26:df:24:6d:7d:93:d0:e0:35:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
        Validity
            Not Before: Apr 17 07:00:47 2026 GMT
            Not After : Apr 18 07:00:47 2026 GMT
        Subject: CN=9c1583cba9218c4a1042194a410a45c9745eda55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6c:ed:8d:9e:36:a1:ac:1a:2f:bc:08:28:a0:
                    72:90:00:49:31:c3:aa:95:0e:29:1e:2c:e1:21:a7:
                    88:35:77:33:34:21:4c:62:e8:bb:f8:b0:24:83:5c:
                    10:c7:bc:e4:d6:64:b9:40:6e:84:f1:e9:03:38:6c:
                    e4:aa:9d:29:74:8c:88:2e:93:01:6a:af:47:d1:63:
                    9b:c0:3b:25:35:1c:0b:84:42:08:f4:e8:85:a6:da:
                    6c:a3:9c:bd:7e:c8:22:81:b7:3c:e4:15:78:ef:e2:
                    90:1b:ed:99:91:84:f9:f7:e5:d3:7b:6f:16:9c:b2:
                    95:cd:bd:c8:9d:1e:cb:df:44:cf:d2:20:ad:ec:98:
                    b3:b0:5a:56:58:b3:de:94:aa:e5:24:64:f2:0e:44:
                    82:a4:00:2b:0d:ec:7b:0c:e2:15:98:b2:0e:39:c6:
                    fa:c2:74:35:d2:5c:58:0f:43:cb:96:63:12:cd:60:
                    5a:bf:26:de:99:6e:0d:ff:d6:89:67:9a:10:40:c1:
                    6a:76:3f:85:1f:54:b6:73:36:67:70:fc:0d:6e:b5:
                    be:a9:ab:fd:65:27:47:f6:ad:15:85:84:9e:55:5d:
                    19:2e:08:13:e7:a2:1e:7e:4f:f6:14:eb:05:bb:41:
                    2c:56:13:c7:1c:e1:e2:42:96:d5:be:19:fc:2d:82:
                    48:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:15:83:CB:A9:21:8C:4A:10:42:19:4A:41:0A:45:C9:74:5E:DA:55
            X509v3 Authority Key Identifier:
                keyid:B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:6e:ea:4b:2d:3e:24:59:84:9b:a0:49:cc:5d:db:5c:45:4c:
         50:af:5e:65:b4:20:36:25:d9:33:7b:13:95:2f:51:34:9f:0a:
         61:28:b6:53:c7:07:dd:e5:49:69:1b:69:44:dc:fd:94:f9:46:
         3c:67:2a:7e:b1:bb:d5:d5:96:fd:84:61:4e:19:d7:1e:8f:70:
         f6:49:2d:3c:70:aa:8c:a4:28:18:fa:3a:15:74:c1:f3:e7:01:
         da:c0:e7:3c:5e:65:e4:35:41:5d:86:02:a8:4f:4f:95:2c:54:
         29:3d:5a:a4:49:07:da:e9:51:39:7a:65:1f:5e:c7:38:b8:c3:
         55:4e:9f:34:4e:7e:c1:7f:27:a6:cf:5b:64:c5:af:ba:d7:2c:
         3d:77:da:cc:37:26:e5:06:f5:ea:b8:30:e3:c7:84:91:8e:4b:
         be:e2:f7:5b:6b:25:1e:0b:54:06:e9:78:1e:25:a5:34:02:bd:
         a3:71:e7:4d:30:5a:05:39:33:28:fb:01:05:d1:7e:4a:22:42:
         19:c7:9b:3e:06:71:ad:eb:44:7b:67:93:99:64:e2:b2:e4:19:
         ae:96:fd:22:a3:81:32:22:53:bf:31:d7:07:4e:b6:73:f5:5a:
         ba:48:bf:3e:3e:55:ba:6c:12:13:b6:eb:6d:1b:bc:37:2d:55:
         0e:cc:bb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:48:04 2026 by rpki-client