Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
File:                     p2_PrZZq5-gXHPzibbP2V3bSb-g.mft (raw, json)
Hash identifier:          RrMmnw6m4MHBfo96FIn6kz4aCzRPRh9qTdmKYcVvG6o=
Subject key identifier:   BB:33:89:C0:68:E6:63:26:BF:A4:5A:89:10:B7:26:BF:43:D7:3C:81
Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
Certificate issuer:       /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Certificate serial:       019DA04057FDF9B9072E013A7DFBE078092B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
Manifest number:          09B5
Signing time:             Sat 18 Apr 2026 11:01:04 +0000
Manifest this update:     Sat 18 Apr 2026 11:01:04 +0000
Manifest next update:     Sun 19 Apr 2026 11:01:04 +0000
Files and hashes:         1: 9H2Cao4L9seLn80FxSiOGYvYmbE.roa (hash: 6fh3UPrvbfpSC3IgcyXg2AEmgPfBi1rjETuQ8TwnWs8=)
                          2: J616ho14DKGXrY52dTz4rECA6rg.roa (hash: Pr/K62ihwSA6YnMNqUbbcVQlKEbx5zr2tsgN3ot1lW4=)
                          3: JzRoxhNcR2kzwArFwmc0pS-ExCs.roa (hash: KJ1WUHpaALO4NgyLeM/jwu4bNeSWXf1o/mMEG/mPGY8=)
                          4: p2_PrZZq5-gXHPzibbP2V3bSb-g.crl (hash: GpLBFw3aooK8SPOh3JTtNY/i2hesnN4Cs75TpPT9FoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 09:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a0:40:57:fd:f9:b9:07:2e:01:3a:7d:fb:e0:78:09:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
        Validity
            Not Before: Apr 18 11:01:04 2026 GMT
            Not After : Apr 19 11:01:04 2026 GMT
        Subject: CN=bb3389c068e66326bfa45a8910b726bf43d73c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:41:f8:34:de:89:a9:29:78:3a:e2:4c:65:
                    a4:28:52:97:a7:df:f9:d7:f5:9c:42:28:ef:f5:26:
                    8b:8d:1f:5d:76:8c:f6:93:ce:b5:1b:af:cb:68:c9:
                    62:83:6b:b3:9c:b4:99:42:9a:bd:c7:e5:3a:91:ae:
                    f9:7b:d0:31:ba:de:03:b0:8b:8b:15:41:df:44:76:
                    6f:f4:c9:c4:f8:1c:88:7f:96:59:a1:96:23:f8:04:
                    5c:f5:2c:3f:4f:9f:13:69:bd:52:4e:bc:fa:03:ef:
                    cb:b0:64:d3:c9:3b:5b:e2:89:2b:b4:51:23:4a:50:
                    c3:8f:1b:ea:b3:33:5e:ab:5a:a2:f7:2d:2e:d4:5a:
                    11:85:c0:ac:7f:3b:fe:54:0d:83:54:53:ec:e1:2a:
                    95:3b:86:26:50:d5:6f:51:35:4b:e0:e9:e4:59:df:
                    4d:e1:96:15:c1:6b:72:0a:8b:27:78:0a:c4:9f:5a:
                    8f:95:cc:fd:58:ca:f2:07:e7:b7:f5:cb:b5:cd:08:
                    4e:83:08:32:7e:b6:61:fe:45:dd:78:26:7d:4d:be:
                    30:27:17:53:04:ce:5b:6f:d1:3c:11:fe:50:10:f5:
                    f7:0b:82:8b:05:1c:cc:88:18:0e:81:46:54:a0:02:
                    db:c5:40:f4:b4:a6:24:b3:5e:26:db:46:b2:7c:8e:
                    6f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:33:89:C0:68:E6:63:26:BF:A4:5A:89:10:B7:26:BF:43:D7:3C:81
            X509v3 Authority Key Identifier:
                keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:30:d4:ff:4a:88:5b:d9:15:7e:ae:bb:5d:99:96:3c:a9:0e:
         91:b5:b8:50:22:d4:91:36:92:9f:8e:c6:6a:b4:0f:cb:e0:26:
         ee:3e:6e:e7:76:a9:97:62:8f:15:4e:32:89:e3:60:f5:e9:9e:
         dc:8a:5a:e8:99:f0:94:85:35:1a:b2:90:c9:60:4d:be:98:1d:
         23:45:2e:49:2c:50:7e:39:35:ef:6d:aa:91:af:62:4e:d1:73:
         51:f4:ee:2d:fa:2b:f1:27:ee:eb:54:00:9a:14:7a:8b:7c:0a:
         a1:04:28:ae:04:dc:48:d7:27:72:2f:59:fb:68:41:ed:89:01:
         d5:90:73:56:df:58:ba:b9:20:43:62:26:70:ec:88:eb:b5:79:
         e1:0b:28:19:7c:54:17:c0:db:08:87:76:9d:be:c0:2f:35:8f:
         84:ba:46:36:ed:93:e6:fd:0a:6f:27:ba:be:f6:93:cd:8f:f7:
         fb:10:78:6b:58:55:7a:86:00:0d:16:cd:68:09:19:8e:ac:d9:
         26:c4:9c:fb:0b:ba:f8:e8:23:54:2b:9f:7c:e9:1f:7d:8e:34:
         03:26:11:e0:20:4c:cb:0f:10:65:d2:f2:bd:a1:49:39:80:c5:
         8a:54:e7:91:f1:cd:88:52:c9:08:21:ea:f0:13:49:f0:7b:89:
         96:b3:ee:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 19:41:05 2026 by rpki-client