Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
File:                     4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft (raw, json)
Hash identifier:          lGHs/tAvEiua18/dUL8xQhgbF0kgwYteECf9Sjn2RSw=
Subject key identifier:   A5:60:5B:81:F5:44:F6:A1:C4:F2:03:C3:BB:73:E7:DF:10:1B:D3:28
Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
Certificate issuer:       /CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Certificate serial:       019D99623248FF04A0051551365D677B1FB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
Manifest number:          06EA
Signing time:             Fri 17 Apr 2026 03:00:42 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:42 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:42 +0000
Files and hashes:         1: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl (hash: sNC2VGZY+0FnN9Iob2X8Hp9aVOGFaIkUdma4ZjCDSJo=)
                          2: QzeP51koEMjHeE88RWvwCqM_qGQ.roa (hash: nwOrnYkRQHY2ElWIiV63spIPWkoVMJum1Nxinn4biHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:32:48:ff:04:a0:05:15:51:36:5d:67:7b:1f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2
        Validity
            Not Before: Apr 17 03:00:42 2026 GMT
            Not After : Apr 18 03:00:42 2026 GMT
        Subject: CN=a5605b81f544f6a1c4f203c3bb73e7df101bd328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2d:33:8a:3e:84:5f:b7:e5:a8:d1:0d:d0:cb:
                    c4:5a:7e:62:e5:df:3a:9d:5f:6c:ca:44:25:52:76:
                    84:e7:6f:60:33:bc:f5:4a:64:f4:35:45:5b:85:0c:
                    82:ec:59:93:ba:58:fc:96:c9:7f:9e:90:00:c5:11:
                    ee:d6:e7:2c:c5:4e:ee:ba:4f:b7:87:21:dc:cd:d9:
                    74:fe:54:82:2b:2b:87:44:e9:cd:63:58:38:5b:6e:
                    85:c2:53:4b:da:50:c9:8e:10:b5:48:9b:04:27:09:
                    d8:b4:ff:90:45:ee:4f:a8:5c:8c:8a:bf:3b:42:2e:
                    8a:ee:f2:95:7a:45:e4:a8:f0:85:71:96:e8:23:b3:
                    b8:eb:04:76:92:a5:35:66:48:0c:aa:06:fc:76:4f:
                    06:32:b7:d0:8a:a9:f2:67:f7:57:b2:28:a5:37:41:
                    5e:d4:c2:f4:52:c3:aa:b2:73:61:df:55:c8:41:9b:
                    f3:08:c2:e7:61:fa:21:7a:98:d9:30:87:18:72:cb:
                    94:ec:f0:10:6a:92:8c:d4:af:09:be:50:9b:fe:9b:
                    1b:11:70:cd:c3:86:a7:4c:e2:2c:23:4d:47:51:6d:
                    e2:1d:db:4a:13:0f:89:de:ac:9e:61:ab:9f:92:08:
                    82:41:b0:0c:3d:f4:d2:6d:6a:13:fb:c3:ac:64:82:
                    c4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:60:5B:81:F5:44:F6:A1:C4:F2:03:C3:BB:73:E7:DF:10:1B:D3:28
            X509v3 Authority Key Identifier:
                keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:cb:b7:16:c2:b4:7b:55:5e:f7:95:5a:28:49:88:76:19:a8:
         54:bc:fa:9b:41:fd:ce:93:82:f2:e1:ff:53:6b:22:7d:ed:1d:
         25:d6:e5:d3:34:3e:4c:00:fb:48:49:ca:c3:00:a1:2a:9a:05:
         b4:ea:c6:d5:07:0f:71:3e:89:54:04:fb:c2:c5:e6:40:ef:d8:
         02:14:c1:b1:e1:1e:bb:27:57:39:01:15:49:66:62:91:59:83:
         e1:5b:fb:19:68:07:3a:88:cf:b1:e3:f9:eb:21:55:56:75:62:
         55:44:34:db:16:27:d3:1f:f1:19:96:e0:91:7f:27:62:82:9c:
         d3:f3:c4:f0:b8:4b:66:01:b6:fe:96:2b:de:6c:c5:70:53:b9:
         4e:b2:db:d6:b7:ed:90:91:52:8e:c4:64:bd:3d:df:1b:3f:62:
         56:ea:a1:50:7c:f2:8f:6b:84:c9:15:54:97:6a:7f:6a:a7:73:
         ce:78:73:ea:c4:08:86:69:94:db:7d:65:ec:12:0e:b0:20:a7:
         b1:43:a1:55:07:89:8a:2e:70:2e:17:dc:74:52:ec:ea:72:48:
         76:b7:2c:6c:eb:4f:57:a3:29:19:45:57:5b:30:b0:0f:69:1e:
         63:ea:1f:6f:cb:4d:6a:1b:eb:c9:d6:35:0a:dd:11:d5:9b:1d:
         d2:a4:a2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:01:23 2026 by rpki-client