Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
File:                     N1PbxYKexQCzNCahiNA5k5W4Bqo.mft (raw, json)
Hash identifier:          oMCpenvvFitm2LV4CjwhA0yKQOuvRRJpYf/0NlvH2/4=
Subject key identifier:   39:BA:FC:41:97:B2:F6:18:AC:E5:88:2E:2D:E4:28:DF:6D:15:C0:78
Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
Certificate issuer:       /CN=3753dbc5829ec500b33426a188d0399395b806aa
Certificate serial:       019D9B50B4936B88FA0EBD395BDD60DFC3F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
Manifest number:          06E8
Signing time:             Fri 17 Apr 2026 12:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 12:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 12:00:50 +0000
Files and hashes:         1: 3DRrG7J90E6D7P-TCb1ZhqKcV5E.roa (hash: ho5K0lj5JJPTZqPc5laRkOJ8PLSca4Q9mg+67aNhjzk=)
                          2: N1PbxYKexQCzNCahiNA5k5W4Bqo.crl (hash: MQE+1J95NaS//srXcQvgfTksaVoJEadoCmuMwx0+uxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:b4:93:6b:88:fa:0e:bd:39:5b:dd:60:df:c3:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa
        Validity
            Not Before: Apr 17 12:00:50 2026 GMT
            Not After : Apr 18 12:00:50 2026 GMT
        Subject: CN=39bafc4197b2f618ace5882e2de428df6d15c078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:62:de:7f:41:d1:ee:a9:82:0d:a0:37:0f:53:
                    d0:4e:1b:39:70:73:0e:37:b2:73:3a:ab:0d:60:41:
                    5f:8a:36:3b:ed:1f:91:3b:87:06:be:d5:31:7e:7a:
                    c0:fb:4c:ea:98:36:56:d4:7b:bb:0c:00:d6:3a:1f:
                    3a:01:4e:69:7c:a8:85:65:e1:69:7b:10:4a:c6:f8:
                    cc:0f:72:52:a2:ef:85:a8:20:96:0b:16:18:5f:13:
                    9f:42:4d:00:65:e7:d5:85:26:36:e3:6f:25:85:7a:
                    56:94:87:68:ca:1e:20:fb:ee:4f:38:0e:72:69:56:
                    f1:aa:e0:2c:78:20:33:3d:62:1c:c8:bc:d6:fb:10:
                    5e:27:23:9d:4b:77:0f:11:bc:e3:bf:11:20:c8:67:
                    dd:40:7e:6e:02:78:94:f3:7e:0a:aa:4e:cb:e8:b7:
                    ee:5c:d4:a2:3b:7d:5f:0f:d2:d0:07:bc:07:28:a9:
                    d1:61:90:a3:6f:c2:c2:d9:90:12:48:67:b7:ef:31:
                    99:d7:03:26:b3:70:5a:ac:14:b7:f9:03:9d:a6:75:
                    4b:39:f8:a3:96:90:2d:49:a7:61:cf:da:c1:f7:02:
                    54:35:37:6a:16:3f:89:22:ad:d5:79:37:88:71:66:
                    40:65:f8:96:40:5e:ba:d5:aa:35:77:78:f9:09:ae:
                    ff:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BA:FC:41:97:B2:F6:18:AC:E5:88:2E:2D:E4:28:DF:6D:15:C0:78
            X509v3 Authority Key Identifier:
                keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d3:08:1b:91:25:f0:6c:a5:db:71:ee:1a:72:79:63:c8:b6:
         03:47:79:cd:85:a9:7a:2b:6c:d7:5e:dc:82:2e:67:64:26:10:
         06:ac:4a:d9:42:22:77:0f:8a:5c:16:b8:0d:63:c6:e5:bd:44:
         bb:01:a4:d3:2e:70:41:fe:9a:f4:50:de:4c:91:ab:ea:94:1d:
         e3:79:b7:a2:bc:59:89:e1:6d:6b:51:2a:6f:a4:51:e5:2f:56:
         58:8c:9d:98:df:76:c6:24:59:c8:f7:26:de:ac:bb:b9:bd:37:
         03:b5:38:28:30:70:86:c9:f9:8e:17:43:b6:68:1d:7d:e0:f7:
         d2:6c:c6:b3:cd:fd:98:f3:ca:22:18:0b:14:2a:f4:51:0d:5d:
         80:4f:24:41:c2:88:76:7d:1a:9a:59:fd:20:33:52:3b:59:5f:
         03:fb:f4:3e:e0:54:18:5a:a6:7a:59:8d:e5:24:fc:45:22:43:
         8d:ad:18:04:ad:74:a6:71:96:9e:c6:22:da:22:fe:7c:cc:be:
         7e:3e:41:9b:29:7d:6c:48:6c:0f:5a:4f:43:94:c7:07:27:c5:
         7e:29:3f:6b:58:73:b8:d5:fd:35:79:d1:6b:22:15:48:54:8d:
         11:74:63:d4:c4:3e:60:cf:92:ad:cc:cd:a9:ab:bc:a6:3d:db:
         4e:cb:7f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:57:47 2026 by rpki-client