Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
File:                     RQvGf1SesEkldyCgAOsFtU9dK8A.mft (raw, json)
Hash identifier:          emOa1AaPd/E0A0aFRYnkUKfOYHx5a3YfErvzoU/u2sk=
Subject key identifier:   8D:9F:AA:57:6C:42:41:53:A3:34:57:3F:05:D9:5A:CE:60:64:69:A0
Authority key identifier: 45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
Certificate issuer:       /CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Certificate serial:       019D992B6DDB2F2B380FEA70C8C9DDA5515C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
Manifest number:          10E0
Signing time:             Fri 17 Apr 2026 02:00:53 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:53 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:53 +0000
Files and hashes:         1: RQvGf1SesEkldyCgAOsFtU9dK8A.crl (hash: u46KNklFHHKBsWY1F3HmAGUfYGaStUQRX71IilxwnGE=)
                          2: YU2PfYClu9ods7OIVMXTM1gfT-s.roa (hash: vgGpyNSi4szw0MOFiG3xNxocVMlT/+cj/OnKigyXPcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:6d:db:2f:2b:38:0f:ea:70:c8:c9:dd:a5:51:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450bc67f549eb049257720a000eb05b54f5d2bc0
        Validity
            Not Before: Apr 17 02:00:53 2026 GMT
            Not After : Apr 18 02:00:53 2026 GMT
        Subject: CN=8d9faa576c424153a334573f05d95ace606469a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f7:f3:50:2b:ae:3c:d1:e7:12:4c:de:75:d4:
                    bc:20:ae:df:e2:28:27:5f:dd:da:61:0a:99:a5:4a:
                    c9:fa:37:dc:31:e5:7f:84:89:87:2e:a3:6e:a8:b9:
                    5a:b7:4c:bc:21:6c:38:d9:44:14:22:70:87:e1:f9:
                    cc:27:79:34:5c:4a:e7:b6:5a:f6:53:88:84:b9:73:
                    1f:17:6b:74:bd:47:75:af:32:65:31:f9:11:e4:87:
                    b5:6c:6f:4d:0c:50:ba:3a:44:21:f7:f8:ba:0b:d3:
                    90:81:65:5b:10:b0:d6:09:fd:1d:d3:e3:c3:6b:f9:
                    f2:04:20:0d:29:c9:d1:85:d8:b3:53:90:1b:cb:57:
                    8e:57:67:4b:e7:7a:7d:41:21:de:8f:f8:d6:fe:05:
                    05:92:1f:94:a5:9c:ab:b9:f0:44:dc:8c:62:2d:5f:
                    ca:16:ea:2e:e2:d3:4b:3e:27:84:c2:ff:69:85:ec:
                    e2:f9:b5:16:fc:b2:b5:09:f2:bf:7b:77:f3:75:8b:
                    83:f1:38:b0:8d:d2:d6:03:1e:b5:c0:03:3c:42:ac:
                    34:d4:74:a8:ee:fd:fe:b7:d1:36:f6:5d:d9:0c:7c:
                    c8:02:e6:0d:ee:ef:a1:d8:97:a1:55:cf:d2:e9:a2:
                    37:e4:a2:47:19:67:cf:7a:b4:ed:6a:fe:88:ce:11:
                    8c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9F:AA:57:6C:42:41:53:A3:34:57:3F:05:D9:5A:CE:60:64:69:A0
            X509v3 Authority Key Identifier:
                keyid:45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:98:52:a7:c6:95:7d:a7:38:57:8c:39:f9:ac:55:0d:8b:71:
         15:44:5d:21:2b:d1:4f:fb:d2:3e:5e:0e:1c:09:55:17:71:14:
         7c:69:9a:23:59:04:b4:62:dc:87:e2:b5:d3:1c:b3:f0:f0:53:
         e5:9e:6d:8f:9b:a6:63:0d:b4:13:a3:31:c4:4b:95:cb:d2:5f:
         65:98:a6:08:12:b1:a0:d9:35:d5:b5:f1:f0:92:56:50:15:96:
         92:72:3b:b4:e4:57:3f:7e:da:4e:88:4d:0b:35:17:be:f1:f7:
         e1:61:5c:e7:da:91:87:9f:fa:79:10:01:e2:a5:b2:ca:51:d9:
         ca:c2:e3:a9:de:3b:f6:1c:4e:e0:be:e1:5d:da:a0:75:6d:1a:
         97:7d:f5:e8:07:25:a9:d2:4a:bc:71:63:4c:a7:96:70:b5:9b:
         de:03:b3:c6:1f:69:e2:c4:1f:57:34:41:d8:ac:92:b1:c2:6e:
         58:f0:25:88:d3:09:3b:8a:1a:ce:0e:c9:17:62:2c:83:47:ce:
         c3:ff:70:82:85:06:36:6d:29:11:29:8c:d7:9b:20:37:ab:29:
         44:a4:c6:8a:27:13:fd:6f:7d:a0:1f:0c:52:11:39:c5:3a:35:
         77:1d:e2:69:22:ff:a5:d7:67:39:5e:87:64:41:8a:5e:c9:14:
         63:84:ae:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:30 2026 by rpki-client