Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
File:                     AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft (raw, json)
Hash identifier:          HnpNvMzt5a44Fx9D754RZEq9b6v2mMXGRAM/qCbefQU=
Subject key identifier:   B4:52:24:40:44:54:45:27:94:9F:89:74:E9:88:16:2D:7A:32:94:35
Authority key identifier: 02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
Certificate issuer:       /CN=02558509e1c0ec160de2e074177213de30615d6f
Certificate serial:       019D98F42DB64D441B672F521106CB0193C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
Manifest number:          17C7
Signing time:             Fri 17 Apr 2026 01:00:32 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:32 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:32 +0000
Files and hashes:         1: AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl (hash: v1cX0fDNIkZDOOJGApRkoohsvLw4kZix8/mGOo0HbBs=)
                          2: OkVoScbKIL9TXKvP438rB5FRYb0.roa (hash: 45VM0zyf0tTbWI+Pen84q/pMakzdNZmUXMwDebqNLz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:2d:b6:4d:44:1b:67:2f:52:11:06:cb:01:93:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02558509e1c0ec160de2e074177213de30615d6f
        Validity
            Not Before: Apr 17 01:00:32 2026 GMT
            Not After : Apr 18 01:00:32 2026 GMT
        Subject: CN=b452244044544527949f8974e988162d7a329435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bd:21:f8:1a:59:c6:ff:7b:2b:85:f8:89:16:
                    7b:06:20:da:e8:9c:85:6a:97:7f:96:de:22:78:2e:
                    5a:91:88:b5:91:cf:20:b5:e6:b3:59:d2:d0:db:15:
                    68:63:b1:9b:4f:11:2f:07:7e:e3:0c:1c:23:ac:71:
                    f4:9b:b7:9d:9f:17:17:fc:8f:8f:0d:3a:3e:bb:ef:
                    86:18:7e:d0:f8:0f:86:a1:d0:57:0f:da:9d:27:b9:
                    f9:ac:8a:c4:3d:30:5c:d0:9c:64:4f:60:2d:2c:c0:
                    49:96:06:9e:58:77:d4:3f:93:18:58:ac:d5:65:d6:
                    c6:8a:d5:8c:a4:0e:10:8b:bb:3f:95:fe:c3:7b:22:
                    8d:9f:ce:83:55:f3:82:09:be:2e:48:3f:db:72:6c:
                    e5:b9:5c:07:30:ac:4e:d0:a6:4b:96:1c:fd:63:89:
                    64:05:24:82:78:d8:39:25:d7:fc:ce:f3:95:16:48:
                    71:40:73:07:ef:c7:9a:71:ff:9a:be:4c:a0:44:c1:
                    69:fc:c5:b5:7e:e2:cb:c6:23:30:c0:c4:f1:61:18:
                    0c:89:3c:e9:0d:18:8e:3b:73:cd:be:0e:f3:87:e2:
                    d3:20:7a:d5:86:e5:d3:67:ff:b3:60:5a:be:e4:78:
                    a1:45:a0:d5:8f:bd:13:b5:d9:ff:e5:95:dd:c3:d7:
                    15:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:52:24:40:44:54:45:27:94:9F:89:74:E9:88:16:2D:7A:32:94:35
            X509v3 Authority Key Identifier:
                keyid:02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a6:d2:ad:c8:4c:5b:fe:af:ea:90:8e:22:07:79:39:db:84:
         ed:26:da:95:16:5b:bf:23:d3:f4:a8:45:9e:80:4d:f3:58:a6:
         3b:86:1f:9d:ae:84:af:41:82:6b:c2:5c:b5:9f:b1:bc:7f:ee:
         2a:1c:af:3e:94:17:9f:2e:c8:61:63:31:86:90:5f:f0:29:b7:
         6f:a8:dd:5e:26:79:78:69:e1:7a:72:28:6b:79:ab:a1:c8:b3:
         cc:44:c5:e4:fd:97:93:de:4e:01:df:4b:01:51:6c:fa:cb:92:
         1c:d7:e6:28:f1:b9:bd:a9:7a:9a:c1:73:c2:af:7a:11:82:31:
         2e:38:8f:1c:d0:6a:5d:f3:8d:0b:81:d0:a8:98:4c:ff:18:09:
         c0:9d:bb:29:94:48:39:4f:b0:ad:c9:ec:d0:a4:b9:6d:4c:7d:
         7e:9b:bc:eb:ea:d2:db:70:71:db:d1:ce:a8:62:15:66:08:75:
         21:2a:fe:7a:48:36:75:20:12:00:cb:d2:7c:6a:4c:35:05:ae:
         aa:c5:db:2a:10:ff:88:b6:ce:30:21:11:91:e6:17:17:a5:82:
         b7:ce:5a:8b:c5:27:d3:9f:21:63:45:32:be:ca:04:8a:3e:ed:
         09:08:13:83:c5:f4:bb:be:35:58:72:0c:bc:6d:4a:64:17:7a:
         0c:c8:14:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:00 2026 by rpki-client