Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File:                     Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier:          tv0rFK0X9IAwx4hTQwDzJ7l7U2EuTE27oC5wX24LnX4=
Subject key identifier:   A6:7F:82:0F:56:E1:39:C5:0E:9D:53:DD:0E:D1:E0:0D:DF:7E:E9:39
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer:       /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial:       019D9C2D2B7436ACCE9ADDBE26031C565B10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number:          0599
Signing time:             Fri 17 Apr 2026 16:01:39 +0000
Manifest this update:     Fri 17 Apr 2026 16:01:39 +0000
Manifest next update:     Sat 18 Apr 2026 16:01:39 +0000
Files and hashes:         1: 6Vq6nX6qZxxpHxLNn7nD2R9p3vg.roa (hash: cCFRmS9OiVLkCF1BaRT3CqFY4I6S01WCAYWaFPvUJRM=)
                          2: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: qPI3BX2cd01/Bj8Dqy902RAjY/tZg/ZlurPWzZMP91I=)
                          3: T3pwpqAx_LdJ9PA4OdxVsrjZotQ.roa (hash: Iv53mpeLIF4jhLKuNnWEt8LtAUDhecBCNu6Oav+UHYA=)
                          4: mFOcu9448pkWaJxj0W6CJ5qV7oc.roa (hash: sfdgi4ysoZDcqPEECniZSAvoWWAcCc3gl1/AmNd3E4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2d:2b:74:36:ac:ce:9a:dd:be:26:03:1c:56:5b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
        Validity
            Not Before: Apr 17 16:01:39 2026 GMT
            Not After : Apr 18 16:01:39 2026 GMT
        Subject: CN=a67f820f56e139c50e9d53dd0ed1e00ddf7ee939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:83:26:c9:3e:af:19:a6:58:01:9f:0b:35:4b:
                    be:f4:f4:50:4a:a6:22:66:53:ad:20:ea:e4:38:98:
                    7d:d6:84:b7:a1:6c:53:b2:c3:4a:87:b6:13:08:f9:
                    d8:06:60:77:d2:bf:3c:7a:a6:8a:2a:5e:df:9d:02:
                    e2:cb:ed:cd:4a:0b:e1:39:3e:19:66:46:71:c0:0b:
                    65:16:c9:9d:f1:8e:4a:c5:2e:31:8e:6f:73:17:c4:
                    36:84:05:81:26:ca:83:72:3b:5d:e1:bf:a6:2a:85:
                    b1:77:ff:e6:1e:1a:0f:32:0f:7f:ab:88:88:cc:64:
                    2c:3f:74:b3:54:fa:47:5c:0c:75:55:54:d6:41:c2:
                    3d:96:50:61:69:77:2c:59:b7:0f:6a:6c:ff:19:7e:
                    c8:d5:f9:14:e5:d4:c0:4e:6d:21:ef:2d:01:dc:6f:
                    fb:a1:00:3b:6e:c1:63:b9:72:bc:2f:05:78:96:60:
                    d9:fb:98:d2:57:ce:d8:2e:e8:45:43:66:f3:62:79:
                    61:23:40:42:73:b0:64:9e:fd:fa:90:30:be:6f:a7:
                    63:84:fc:d3:61:e1:b0:76:45:d6:fd:dd:a0:ad:a2:
                    9a:da:e9:f6:8b:51:7c:8b:07:2d:1f:91:55:b9:12:
                    ac:f4:72:cc:c8:83:92:db:62:e2:5a:92:f0:cd:6f:
                    d7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7F:82:0F:56:E1:39:C5:0E:9D:53:DD:0E:D1:E0:0D:DF:7E:E9:39
            X509v3 Authority Key Identifier:
                keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:98:71:08:7a:b8:70:45:0d:5c:3b:4b:c7:75:49:2a:18:c8:
         6e:88:bb:93:86:4d:17:19:69:99:f4:e1:0e:37:d6:4d:fe:4d:
         c4:ee:12:da:30:9c:fc:08:95:30:f4:5f:de:7d:24:d5:50:03:
         e5:74:ac:41:8f:d8:6a:4e:11:3a:5f:22:4e:64:20:ae:04:2a:
         34:1f:de:fe:01:35:4d:31:6a:d5:03:b2:28:70:49:86:77:82:
         b1:b0:79:d5:0b:5a:85:21:02:15:46:1c:e3:1a:4e:d7:d9:52:
         4c:e7:ca:d9:d2:b9:ea:af:13:83:30:b0:77:6e:bb:2c:8e:b4:
         78:a8:e0:8e:e9:f4:8c:e3:33:1e:9e:eb:c5:10:bc:83:9a:ea:
         8b:c1:5f:fa:32:b5:a4:0d:90:e7:eb:22:af:5c:07:ba:4e:1d:
         5d:9e:5c:ab:99:e0:e4:2b:89:46:67:27:d4:bb:18:57:26:e8:
         20:1d:08:4d:33:48:92:6b:99:e3:6e:4e:83:4d:0b:ad:23:12:
         9c:19:aa:ed:b3:89:92:aa:32:be:b3:64:bf:54:2b:59:2b:64:
         26:72:81:31:60:32:47:e6:71:07:87:c1:e2:72:82:58:a9:4a:
         64:15:8d:8f:5b:ba:af:de:f7:ca:4d:89:21:47:c2:71:52:74:
         9c:58:04:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:41:14 2026 by rpki-client