Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e388dd-c74d-42f0-83fb-2e84f1dfdc62/1/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.mft
File:                     FwlqAzZQyIMP1Ws_5f_UmhdNMi4.mft (raw, json)
Hash identifier:          aubpWL1LnQRrKyWs1ZN5zyPmUUxD6Mz+OHKpKsv0Rvs=
Subject key identifier:   21:33:81:B2:77:A2:A7:60:DE:AC:CD:2B:B3:E4:FA:F8:9D:51:03:D5
Authority key identifier: 17:09:6A:03:36:50:C8:83:0F:D5:6B:3F:E5:FF:D4:9A:17:4D:32:2E
Certificate issuer:       /CN=17096a033650c8830fd56b3fe5ffd49a174d322e
Certificate serial:       019DA52F2C8C47043975538D8188CA1D8E37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/e388dd-c74d-42f0-83fb-2e84f1dfdc62/1/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.mft
Manifest number:          ED
Signing time:             Sun 19 Apr 2026 10:00:25 +0000
Manifest this update:     Sun 19 Apr 2026 10:00:25 +0000
Manifest next update:     Mon 20 Apr 2026 10:00:25 +0000
Files and hashes:         1: FwlqAzZQyIMP1Ws_5f_UmhdNMi4.crl (hash: ySRflShjjD9qKwSnr2M5JniC/ra8aVmcJtWFWM0H1+o=)
                          2: nNBvu_nSPGHqA9h_MtyLsSN73UY.roa (hash: +QJ1/VDdtyvkWD7pbywb3gX3mlPQz4+BuVYL+Ebcgb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/e388dd-c74d-42f0-83fb-2e84f1dfdc62/1/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/e388dd-c74d-42f0-83fb-2e84f1dfdc62/1/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:2f:2c:8c:47:04:39:75:53:8d:81:88:ca:1d:8e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17096a033650c8830fd56b3fe5ffd49a174d322e
        Validity
            Not Before: Apr 19 10:00:25 2026 GMT
            Not After : Apr 20 10:00:25 2026 GMT
        Subject: CN=213381b277a2a760deaccd2bb3e4faf89d5103d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f0:45:15:47:54:4e:35:a2:f1:3f:20:8c:9f:
                    40:f0:8e:dd:21:0f:ce:c8:fd:3a:8f:9d:02:54:1c:
                    87:fb:58:bd:3c:28:01:95:26:aa:c4:00:21:13:e8:
                    0e:4c:df:6f:b6:14:3e:6e:ce:41:6a:4e:32:95:a5:
                    38:bc:d5:81:34:5b:c0:8c:9c:f7:6c:34:c2:49:d4:
                    c3:16:35:08:2e:3e:99:bf:38:9c:5c:31:39:60:58:
                    4d:dc:47:87:f4:0d:9d:a2:39:a1:b2:1c:6e:55:3e:
                    c9:f1:b7:d3:b1:7c:3d:63:ab:51:40:34:ab:a4:ae:
                    a2:d1:96:d6:a3:6a:f1:c9:32:e6:64:b1:ab:be:19:
                    51:68:ed:e5:ad:24:78:41:39:01:a5:94:f7:63:02:
                    e1:03:81:12:93:97:48:5d:d7:8e:f9:dc:cb:b0:75:
                    cf:71:36:fe:c4:9c:10:50:74:99:d2:3a:73:d0:ee:
                    e9:e1:04:e8:7b:b0:84:5e:3b:f2:60:7e:44:df:30:
                    5a:13:8c:8d:9e:1a:81:da:8b:c2:19:e9:5d:9c:b0:
                    75:43:61:30:bd:a6:be:6f:f9:12:fc:04:c6:14:8c:
                    79:5c:d1:69:e3:c2:8d:77:f9:8d:94:b9:db:f3:ac:
                    65:03:ed:89:d7:fd:a4:cc:6c:be:3c:6e:cd:26:1b:
                    38:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:33:81:B2:77:A2:A7:60:DE:AC:CD:2B:B3:E4:FA:F8:9D:51:03:D5
            X509v3 Authority Key Identifier:
                keyid:17:09:6A:03:36:50:C8:83:0F:D5:6B:3F:E5:FF:D4:9A:17:4D:32:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e388dd-c74d-42f0-83fb-2e84f1dfdc62/1/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e388dd-c74d-42f0-83fb-2e84f1dfdc62/1/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f9:47:da:72:37:43:01:81:c0:98:54:51:ce:1c:7a:4d:ca:
         44:67:6b:63:43:3c:58:b5:a1:9f:20:08:2e:34:6b:94:e4:1e:
         f5:cd:56:ec:4a:f9:e0:18:9c:2a:1d:43:7e:d0:8f:10:54:86:
         3b:fb:f5:15:ee:b3:f3:2a:67:fa:7a:c1:05:3f:87:0d:a4:36:
         9a:70:fd:eb:62:f5:e6:a8:eb:98:ba:53:1a:eb:0a:a6:f9:b0:
         28:1d:e8:42:8d:3c:9b:a2:0e:6a:0f:b3:b5:60:10:95:de:61:
         85:54:43:c8:4c:4f:1d:c7:76:42:85:5a:7e:19:7a:ef:75:37:
         77:1c:99:ac:8a:70:0d:c6:51:51:e5:17:ff:e7:64:6c:5a:39:
         f9:5a:00:ec:be:c0:95:79:da:0e:64:a2:90:7f:09:b1:9c:8e:
         6f:a2:ad:6d:33:ad:d0:b7:81:57:ce:6f:5e:30:2c:de:e2:29:
         b8:0b:07:b0:84:f5:b6:e6:d0:84:1c:52:43:07:8f:c7:f9:bc:
         7a:40:49:1d:78:72:47:8e:c5:16:2d:c5:c7:5f:16:8f:1c:64:
         39:f3:d0:1d:21:b1:07:46:d6:69:9b:fd:20:e3:17:89:36:79:
         d1:1e:59:f2:f3:ce:66:a7:39:5d:04:b3:a1:10:3a:24:60:be:
         70:d4:5a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:57:01 2026 by rpki-client