Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
File:                     X39wJQCCw-BW8_5Si9d7BuIOQHw.mft (raw, json)
Hash identifier:          XJ8HHCDpxeOzbI50t9rLAc9EWXbOD0riEYHsXrVFQe8=
Subject key identifier:   4B:39:51:D1:6C:74:70:D6:F1:FC:E1:B0:B5:FF:0F:9E:A6:03:75:6C
Authority key identifier: 5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C
Certificate issuer:       /CN=5f7f70250082c3e056f3fe528bd77b06e20e407c
Certificate serial:       019D9A75023DDE7920E52A94C06955260EC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
Manifest number:          016B
Signing time:             Fri 17 Apr 2026 08:00:52 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:52 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:52 +0000
Files and hashes:         1: 5uXpm1mK2Lkx_hom9YzVY6h3X8g.roa (hash: Cn3egeW7Svzjn6B2DztmCBuQlzu52DOzJj+3bmdAQVc=)
                          2: 6PCZUJB3ipwVXLiyKcyJrFQu4wQ.roa (hash: m4ynyhKu4YCsiRrg6pHmEytuHr7lJuhn9fuEsyhPlJc=)
                          3: UgHcaBSwg0Iexf-S3Ppu9ltxOdY.roa (hash: uwkGrsjIen3tBe54+2c/5zWUfceUkyrc4GB8+Uk2gSA=)
                          4: X39wJQCCw-BW8_5Si9d7BuIOQHw.crl (hash: 5VUdMYyhGYemeXxGG7mplJA2XtDBXANEvWyX5EsdFNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:75:02:3d:de:79:20:e5:2a:94:c0:69:55:26:0e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f7f70250082c3e056f3fe528bd77b06e20e407c
        Validity
            Not Before: Apr 17 08:00:52 2026 GMT
            Not After : Apr 18 08:00:52 2026 GMT
        Subject: CN=4b3951d16c7470d6f1fce1b0b5ff0f9ea603756c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:72:9a:4d:57:83:94:e7:b4:e7:20:58:ba:76:
                    34:11:3f:bb:e1:eb:3f:75:db:2a:a3:98:57:57:8a:
                    ff:28:ad:10:c6:ef:89:79:91:1d:eb:d7:ed:9e:c5:
                    e4:d5:68:c6:d4:8e:97:c6:dd:bd:e7:01:6c:30:2c:
                    1e:12:dd:2f:e5:13:81:32:f3:99:ff:a2:84:6e:40:
                    58:22:f1:d2:09:4e:3d:cd:9b:a5:73:19:46:dc:5c:
                    0a:b6:a6:31:8c:c5:7c:bb:65:d1:44:92:97:7d:92:
                    f3:3b:4f:a0:59:fa:40:3c:72:bc:0b:f6:bc:de:a4:
                    4e:12:49:6d:0c:c8:4b:a9:b6:4b:eb:7c:19:c9:5f:
                    c1:b0:cb:ad:0e:34:21:2c:25:a7:09:a9:21:eb:3e:
                    4a:a4:98:7b:f1:fb:b0:e3:ac:ab:1d:2c:87:79:6e:
                    9d:7b:52:b3:48:91:2e:1a:83:56:ed:6a:a2:a9:5f:
                    09:30:69:12:b0:86:73:01:c3:06:96:b8:3e:47:bb:
                    20:f8:6b:a0:ff:cc:91:ee:c2:2a:83:3d:53:74:ec:
                    02:49:f8:d9:01:f2:a7:ad:fa:e1:bf:52:12:58:dc:
                    db:fd:06:4d:76:02:0b:1f:87:66:98:7b:6b:ec:2c:
                    33:c2:57:ca:c0:1d:c3:8b:3b:6c:9d:a0:bf:2e:33:
                    cd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:39:51:D1:6C:74:70:D6:F1:FC:E1:B0:B5:FF:0F:9E:A6:03:75:6C
            X509v3 Authority Key Identifier:
                keyid:5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b7:03:24:60:d9:f1:1c:02:36:7a:ba:55:df:a0:02:bc:de:
         4a:b4:92:76:91:cf:50:07:20:21:3c:78:43:78:87:21:43:5b:
         36:6c:c5:e8:97:0b:34:71:f0:64:ff:d3:92:8f:70:26:0d:22:
         71:04:10:d7:f6:71:f4:fc:b6:2c:99:05:f0:73:9a:ba:59:80:
         cf:15:84:09:71:58:84:cf:59:9c:03:f7:d8:27:58:cc:25:c7:
         11:22:7d:ab:c4:33:59:e5:ca:97:c9:c9:a5:bc:7f:e5:5e:ed:
         79:d2:21:97:f5:5b:b1:f4:28:ab:66:29:e5:33:c6:95:a2:ce:
         3c:e2:b8:b0:f4:76:cf:1d:02:44:00:28:75:a3:cc:87:7f:58:
         1b:47:14:e1:5b:e3:c3:bc:7e:f8:0d:aa:0b:9b:9b:b3:18:b8:
         4e:d1:72:97:ad:78:1a:c7:90:ea:19:c6:0d:12:a0:90:a1:01:
         33:d4:9a:79:3c:dc:a6:c6:3c:14:36:09:f6:27:17:e1:bb:a7:
         ad:1d:57:7d:b2:4b:70:d9:0c:61:0d:86:cf:73:ea:9c:22:cd:
         9c:05:ff:83:c9:85:e9:3f:a1:b6:c6:2c:3c:32:34:20:8e:1e:
         93:13:e2:dc:ef:f9:80:51:b1:92:ad:99:a3:4c:ef:16:ae:d6:
         24:37:20:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:19:05 2026 by rpki-client