Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
File:                     8gwo0Z4N-1NIJqojqlBq9oowW3o.mft (raw, json)
Hash identifier:          YGhY2YatPAzQdTiNZPw8nhxHiiKhFMAme4fkcePDTxs=
Subject key identifier:   35:86:A0:2E:33:CC:EF:F1:60:7E:9A:DC:13:89:50:CE:DD:9A:B3:4D
Authority key identifier: F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A
Certificate issuer:       /CN=f20c28d19e0dfb534826aa23aa506af68a305b7a
Certificate serial:       019D9AE34452391DE0E7CAB5052780AC46AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
Manifest number:          1855
Signing time:             Fri 17 Apr 2026 10:01:18 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:18 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:18 +0000
Files and hashes:         1: 4h6lcQgIZNPNn6orDQ61-yTtwWo.roa (hash: 3IoAe85ki8GRw4jFh+5yx1kZwJzMdssvyjliLQy2iM8=)
                          2: 8gwo0Z4N-1NIJqojqlBq9oowW3o.crl (hash: MoSD3gcA4yUB3EkRpuLWrUjx1HX0AQSMPB25H3D1iBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:44:52:39:1d:e0:e7:ca:b5:05:27:80:ac:46:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f20c28d19e0dfb534826aa23aa506af68a305b7a
        Validity
            Not Before: Apr 17 10:01:18 2026 GMT
            Not After : Apr 18 10:01:18 2026 GMT
        Subject: CN=3586a02e33cceff1607e9adc138950cedd9ab34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:72:ec:09:9b:1b:b5:22:87:60:da:6c:28:
                    9e:4b:48:d8:00:89:b0:85:f9:ce:5c:52:41:32:12:
                    89:a5:d5:96:90:a6:0f:8e:68:7d:c0:20:4e:df:17:
                    41:65:84:be:9d:93:88:a2:57:73:26:b3:d9:b3:2c:
                    d6:6c:0b:0e:1f:d7:ec:1c:94:a1:96:70:3e:37:68:
                    bc:a4:45:d1:70:82:82:7b:53:7f:ca:54:b5:03:1b:
                    ef:42:f0:57:9b:2d:11:7a:af:f5:84:73:9e:8e:fa:
                    24:61:97:b8:56:2b:5a:5b:5a:f4:3d:40:28:88:37:
                    7d:70:2c:7a:12:3a:b6:bb:ea:61:c5:34:e1:6e:47:
                    d9:5e:08:2f:fe:16:2a:70:42:25:fc:47:9e:e4:8c:
                    ce:08:85:2f:df:da:0f:6c:15:81:ec:ce:fc:a2:e4:
                    bc:3c:00:96:f2:72:0b:9a:b5:f9:3d:a6:ce:03:ff:
                    01:b1:d3:e3:80:da:d1:5a:5c:9b:3e:59:23:e1:5f:
                    ed:6e:f0:e9:25:ca:18:cf:70:c5:0c:25:dd:41:97:
                    92:6d:39:6a:d1:f9:cf:23:85:76:82:4e:de:1f:08:
                    17:6d:71:71:f7:e6:21:37:7f:04:b3:b4:45:24:60:
                    08:b3:ed:88:33:f5:02:0a:cf:15:98:a9:76:61:9b:
                    e6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:86:A0:2E:33:CC:EF:F1:60:7E:9A:DC:13:89:50:CE:DD:9A:B3:4D
            X509v3 Authority Key Identifier:
                keyid:F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:6f:b3:2f:dc:f5:0d:89:a8:d9:0a:3a:75:08:91:46:a9:4e:
         0e:fb:b7:62:9c:a1:23:a6:29:93:f8:cd:e6:00:cf:fe:5a:eb:
         ff:d4:e3:98:a0:08:eb:c6:25:c2:c2:d0:2b:da:83:e7:46:ef:
         3f:67:ce:76:a9:9d:de:d0:2f:4f:91:dd:1b:3a:d5:f0:24:f7:
         39:7a:59:eb:5a:b5:2f:dc:8b:3b:62:20:5c:d7:b5:97:b3:24:
         0e:cd:76:9a:16:c0:0f:74:7b:06:c1:73:bd:ba:20:6a:fe:9e:
         b0:66:08:b4:97:33:4a:5a:37:42:4d:99:7c:e4:72:0c:06:e9:
         63:13:34:26:71:00:95:26:d6:a5:d0:53:81:90:1e:56:95:9f:
         ae:f9:65:3f:81:85:8b:11:b8:d1:96:7b:b0:66:a9:ef:8b:74:
         cd:70:21:39:16:ea:8b:13:f5:2f:7e:11:2d:36:38:82:e0:74:
         05:3a:c4:de:e3:7d:b6:2e:9d:78:1f:62:1c:4b:08:68:64:95:
         f8:88:7f:d1:35:6c:a6:a3:fb:c4:84:df:d8:d6:4d:41:4d:16:
         d0:d1:ba:26:57:f9:dc:90:91:2c:59:10:ef:ef:0c:cd:09:6d:
         c6:98:f7:0f:93:f1:47:a1:45:18:ff:34:3f:1e:3c:aa:17:d2:
         63:a2:2e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:47:10 2026 by rpki-client