Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
File:                     1-Rnh8_5ptOvf8CqahX58bCslMBo.mft (raw, json)
Hash identifier:          VQ4hdw2Yq8x/VmyuCJg3mbYL3Oz/nbvhFhBOk/eYNPs=
Subject key identifier:   14:BD:5F:B8:A8:2D:59:62:81:61:AC:E1:5B:14:56:B0:5C:46:5A:57
Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
Certificate issuer:       /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Certificate serial:       019D988660ED982BADD4A8574F605784FAAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
Manifest number:          1578
Signing time:             Thu 16 Apr 2026 23:00:36 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:36 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:36 +0000
Files and hashes:         1: 1-Rnh8_5ptOvf8CqahX58bCslMBo.crl (hash: 9m9FTuCV3tHXE5+dA3PaCmw0XPJhNHERvb9CXfcaC40=)
                          2: btxvfCpPBJzhLJ1q0hbmYzTrs_o.roa (hash: EWQ0Oxbv6MIMLYiT86duCPS9U8DVrZlE0W+JlVlWSBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:60:ed:98:2b:ad:d4:a8:57:4f:60:57:84:fa:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
        Validity
            Not Before: Apr 16 23:00:36 2026 GMT
            Not After : Apr 17 23:00:36 2026 GMT
        Subject: CN=14bd5fb8a82d59628161ace15b1456b05c465a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c0:af:88:3b:0b:8f:9c:3d:b6:29:09:8e:55:
                    a8:60:bb:90:e1:83:d0:37:08:76:c7:a2:46:0a:da:
                    c2:1e:ab:a1:a8:73:2a:40:93:f3:95:c1:bb:64:64:
                    97:7a:4f:78:86:a3:76:94:ca:52:47:6e:ac:d0:a9:
                    4e:f1:8f:98:47:02:cd:65:3c:fd:9e:59:72:cf:8b:
                    48:0b:2c:09:ef:eb:df:8a:20:1b:19:6d:fe:c2:dc:
                    00:07:c9:42:36:2f:49:02:ee:b9:4a:ff:92:5c:5d:
                    f4:0c:5d:f2:4f:21:01:94:3a:7e:1f:01:55:f1:49:
                    ed:03:89:e9:d4:fe:90:43:a7:9c:e6:63:a0:5c:c4:
                    07:57:34:78:cd:32:d4:e2:0a:51:61:55:a3:9e:7c:
                    e9:e2:ef:e2:5d:e8:11:28:34:ae:b7:f6:63:c1:8f:
                    b4:6f:ff:fd:a0:a7:34:31:5f:22:96:bc:f7:be:0a:
                    88:69:c2:e3:5d:cc:db:2f:b4:7b:f1:86:0d:4d:29:
                    0e:80:d8:fa:62:a6:c9:86:74:d0:c7:83:30:3d:65:
                    ac:fd:a3:73:e9:58:49:75:ff:3e:70:27:3d:85:3a:
                    61:ca:29:01:be:d9:a4:f6:cb:55:d8:56:8b:18:ed:
                    c6:80:48:09:7f:90:e4:d9:04:3f:d2:86:6f:8c:33:
                    a0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BD:5F:B8:A8:2D:59:62:81:61:AC:E1:5B:14:56:B0:5C:46:5A:57
            X509v3 Authority Key Identifier:
                keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:33:11:ea:55:5f:55:c3:a6:9b:89:31:bc:76:ea:ec:01:d3:
         34:f2:c8:27:83:a3:d8:86:02:93:4c:16:38:46:4b:1e:83:13:
         6b:53:9c:aa:7b:e9:98:74:42:20:4e:bd:a9:76:08:97:ba:99:
         73:54:82:aa:fb:30:49:43:20:a5:4e:40:03:12:ae:76:3c:42:
         67:60:c2:8a:de:76:14:4f:64:f1:e9:86:ee:9f:f4:20:0f:29:
         05:7e:f6:57:54:12:a9:00:6c:06:18:29:72:29:71:71:e6:ed:
         37:64:35:8c:0a:b0:41:c2:44:3a:14:30:3c:78:98:5f:75:50:
         2d:e4:a5:68:40:4c:23:85:53:45:17:c7:58:a1:e1:3b:2a:26:
         f0:f1:20:25:b5:d3:2f:52:a7:19:d6:c6:33:c6:a0:17:16:f1:
         44:63:0d:99:b3:1c:14:71:11:9d:71:76:87:cf:02:0a:c9:55:
         34:39:d2:31:eb:4d:e4:09:e2:f4:ab:0e:65:b5:5c:35:67:27:
         ce:0c:97:70:ce:14:0a:e0:dd:61:8b:b5:a7:83:28:91:4e:31:
         5e:bd:76:26:8b:b3:c9:72:5c:a6:7b:58:0b:2a:30:5f:8d:d3:
         e8:80:cc:a8:8d:b3:e2:6f:d8:97:50:a4:4a:d1:79:49:18:2a:
         eb:12:f2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:31 2026 by rpki-client