Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
File:                     mBPi9jUdO00eYapAFvGyz6YtfN8.mft (raw, json)
Hash identifier:          4P/ZRhThA4/QuBK0WAMjESVgs0nSPjXaLLGlPOa7qDs=
Subject key identifier:   89:14:75:B3:0A:8D:FB:CA:1D:A2:9C:9F:38:C0:90:C9:F6:DF:CA:5F
Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
Certificate issuer:       /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Certificate serial:       019D98BDEC05B16DCD328665FF0806FD6E70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
Manifest number:          0584
Signing time:             Fri 17 Apr 2026 00:01:16 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:16 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:16 +0000
Files and hashes:         1: NfO8TWIkaxE4DaKwNuYvhzbmi90.roa (hash: 07eBVlhSt2pE8VL0qAd29LqwR9jHDzCkLPkg8sdeyGk=)
                          2: TRd3PwWjN2N6i0kSV548d4vlbt0.roa (hash: ZKnbwzmBAX2zhMCQGg8pdlTxO8b68gKUxXEWzkBH4eI=)
                          3: mBPi9jUdO00eYapAFvGyz6YtfN8.crl (hash: mmk5fVQ8AhfWX2WXmaS7w1jUyBrdEASfqOZW66I6Yrg=)
                          4: o04EKVPaSCdYlCxT4efK6vx9Qwk.roa (hash: tNYBjaANlJOuYZAK5FkLTFbNd6zPpcROskpJuIE9NLA=)
                          5: xWwqlVqWd0iRwMTuQO8eVNoCWHU.roa (hash: yQKukILLOQx8xluWCSSZQ2VF3E7ijyBr1SeiIVBdBeU=)
                          6: xulzqcYhIs7PWGHWVfL4YmNhVq8.roa (hash: WAG1ujb3pAhI/q7UcuSpjvhOpci45QogtqTPG/JOxEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:ec:05:b1:6d:cd:32:86:65:ff:08:06:fd:6e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
        Validity
            Not Before: Apr 17 00:01:16 2026 GMT
            Not After : Apr 18 00:01:16 2026 GMT
        Subject: CN=891475b30a8dfbca1da29c9f38c090c9f6dfca5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cb:b5:56:8a:24:65:d0:d0:8d:10:3d:c0:2b:
                    6f:b6:34:72:f0:ee:d6:45:21:b2:87:9b:99:0a:91:
                    64:99:61:15:10:0a:7a:29:0b:5e:89:20:17:2c:3a:
                    e6:ac:4c:c0:c6:a0:a3:17:fc:2f:96:38:e7:af:26:
                    c8:6a:c8:25:d0:de:9f:db:2a:a7:cd:06:a4:59:bf:
                    46:6d:fd:b0:ea:6f:cb:2e:c3:4d:f4:1f:68:3d:37:
                    c3:f4:cf:5e:cd:46:9a:46:71:ff:47:52:e8:e8:ea:
                    78:a8:ba:19:3c:27:28:67:99:b1:d1:c8:7a:6c:5e:
                    e5:c7:3c:8a:c3:f8:37:bc:9a:71:84:54:63:6d:1d:
                    60:7f:6d:4b:c2:e3:31:67:22:c7:8d:72:a5:91:d0:
                    30:2c:cd:ba:47:fa:ef:90:cb:b2:8e:1c:e5:bc:ae:
                    e0:28:08:65:66:99:ff:04:47:9f:63:f9:4e:cf:ac:
                    99:d6:9e:af:40:4f:b0:d7:80:47:16:38:b1:1c:26:
                    a0:c6:d2:12:d7:57:9c:d2:1f:82:cb:a7:66:ae:fd:
                    92:d4:32:1a:12:fd:62:59:b5:fb:62:0e:a5:a3:20:
                    80:8d:d6:37:a9:0c:89:d3:5f:7c:d0:84:de:5f:91:
                    ac:5b:07:6d:cf:75:b2:f9:19:ff:09:3d:e6:ff:6a:
                    07:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:14:75:B3:0A:8D:FB:CA:1D:A2:9C:9F:38:C0:90:C9:F6:DF:CA:5F
            X509v3 Authority Key Identifier:
                keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:3e:68:d5:5a:a6:c6:f3:3f:4a:44:86:69:be:6f:a4:94:cf:
         ed:ec:a4:af:6f:fa:09:77:52:32:93:c4:74:db:b5:d2:e2:84:
         c9:ed:85:9a:1a:b9:1c:a2:31:26:f0:f8:a0:b5:c4:6f:55:36:
         f5:96:34:30:fa:cd:94:c9:b0:bd:e6:d1:c1:26:e3:9d:2f:bb:
         88:43:fa:e3:a9:37:55:75:37:d2:c5:08:72:02:f3:fc:4b:c3:
         3e:af:cc:ff:d4:44:ff:f3:1b:3e:45:64:d7:85:b5:2e:98:9f:
         ff:46:a5:57:27:6a:25:9e:68:0d:e2:11:cd:07:84:eb:ef:a8:
         89:8c:72:bf:ae:67:00:39:0e:e1:49:2d:1d:37:c1:86:c2:5b:
         16:46:89:5b:5e:58:9f:a0:ce:d0:6f:9b:bc:22:f6:2e:fe:17:
         ee:dd:e1:84:1c:12:44:0b:dd:f0:b8:b8:5b:71:5b:af:ca:5f:
         94:d2:86:a3:8c:eb:ec:16:d1:18:84:0e:b8:c5:af:5f:b3:cb:
         5d:ca:82:21:1e:27:d0:a0:3b:08:93:3c:33:07:81:e3:ed:9c:
         8b:64:0c:8f:34:7b:4f:6a:e6:37:2c:9d:ea:a2:4e:3f:ca:12:
         7f:e8:57:01:eb:b1:a5:c7:9f:8b:aa:c0:10:a3:1e:7a:5e:62:
         5b:d1:a1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:29 2026 by rpki-client