Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
File:                     _rhNn4-eMxVliaXr9yIgOomeClE.mft (raw, json)
Hash identifier:          slrC7ZcdpkDg5iFS69KSgt7J2j4IM6H+Z7yCv7xsygQ=
Subject key identifier:   A5:96:47:51:99:A6:A3:19:F3:5F:CD:7F:33:3D:21:37:7A:5B:FB:2C
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Certificate issuer:       /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial:       019DA754E57820DE292AE21E69CADF507873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
Manifest number:          128D
Signing time:             Sun 19 Apr 2026 20:00:51 +0000
Manifest this update:     Sun 19 Apr 2026 20:00:51 +0000
Manifest next update:     Mon 20 Apr 2026 20:00:51 +0000
Files and hashes:         1: 1-s2FwRU1cILMfQySWQfwcbHn_7o.roa (hash: UgSoVXkhi39b02jH0/DTm5YU1hz+Ulacw53OQOOrWw0=)
                          2: 2IHxfDPgXpqFUuW2HHMtTesRlVk.roa (hash: 6i0KTZ22dHSsBD0sAIXWyUQ8dif7FeqnVvrlTF59RFs=)
                          3: 4QIYNLjhyvhK4DwD1cHr9Pj0R58.roa (hash: XPr5OKAgKFKe1eZm26Sq5h71zoMCowi3Bq7tv1xOx7I=)
                          4: IxunR-Pdcuvk1jm6CIfNmD9FR0A.roa (hash: /ZeIN8hMhU2WBWfg67KgPG/YjL9Vb0bRB9lW2bQsIk8=)
                          5: _rhNn4-eMxVliaXr9yIgOomeClE.crl (hash: s6NBvuMlT5czfb5ohlf7lKDWzFWXxzmFWcg5sLaKlas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 20:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a7:54:e5:78:20:de:29:2a:e2:1e:69:ca:df:50:78:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
        Validity
            Not Before: Apr 19 20:00:51 2026 GMT
            Not After : Apr 20 20:00:51 2026 GMT
        Subject: CN=a596475199a6a319f35fcd7f333d21377a5bfb2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:39:e2:7f:61:bd:34:a4:fa:7f:14:b2:f9:
                    d0:5e:12:21:51:20:01:18:e4:b8:7f:53:6d:da:21:
                    9e:38:d2:9a:50:03:c1:6e:6f:42:b5:4d:b9:ae:9b:
                    02:82:fb:08:d8:97:cf:71:db:28:d8:4a:c9:f4:fe:
                    d2:21:70:69:77:e8:fc:9a:5c:3b:d1:33:15:9a:e6:
                    79:61:09:1f:51:4d:bd:b3:40:9a:95:45:c3:02:bc:
                    25:ac:84:53:6e:34:16:b9:a4:ee:00:73:8d:47:e5:
                    f1:a9:f7:c2:f4:ee:67:2d:6e:6e:ab:ca:52:42:eb:
                    a5:cf:08:8e:14:88:4e:42:ff:51:59:00:83:e7:d3:
                    f5:ab:a3:28:83:a5:3c:3d:4f:9f:0f:f5:01:a3:5a:
                    c6:de:bf:d9:df:3a:49:44:b0:ae:1d:dc:3a:1b:7e:
                    2a:ef:e5:c7:44:25:67:03:15:04:38:c2:bc:ce:1f:
                    5b:5f:bf:c1:12:12:d7:f8:9c:6d:47:d7:79:91:72:
                    f8:6e:0d:63:c0:7c:c9:09:21:e3:59:90:4c:49:fa:
                    32:a8:a9:a2:5c:ef:a4:d6:57:f1:16:9e:ad:3b:91:
                    ad:b6:8d:89:28:5c:87:9c:99:00:8c:d9:cc:c1:fe:
                    f6:6d:f6:55:37:f9:4a:3c:e4:64:89:9c:09:04:bb:
                    92:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:96:47:51:99:A6:A3:19:F3:5F:CD:7F:33:3D:21:37:7A:5B:FB:2C
            X509v3 Authority Key Identifier:
                keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:13:24:85:13:72:39:a3:36:7b:78:07:72:ae:3c:ad:fd:08:
         fa:c1:5a:b6:8a:0a:74:c7:4d:11:d2:15:53:2e:c7:42:50:ef:
         54:e8:cf:67:dd:d7:f1:cc:79:a3:70:b5:cd:cf:f8:5c:d0:62:
         3b:d0:29:12:c8:f0:ae:e8:89:a2:3e:20:a4:0f:c0:06:d9:2d:
         31:df:f8:ea:54:cd:2f:d7:20:73:41:20:72:e3:78:29:10:6c:
         f4:ed:3a:16:3c:58:46:f3:e6:69:04:2b:7a:a5:6a:4a:d8:0f:
         3b:40:73:15:b6:a9:66:8b:28:57:bb:e2:0e:aa:77:be:03:35:
         8e:3b:5f:e1:24:ca:08:c8:82:68:f5:7b:e9:72:0c:6e:09:5c:
         a1:82:bb:52:97:0c:ee:bd:84:71:f1:15:eb:31:47:3f:3a:e5:
         7f:31:ae:a8:35:45:fb:b3:fd:87:c6:47:51:06:29:7f:ae:14:
         5c:38:80:0d:d5:33:50:ac:e7:c2:73:ac:fb:48:0c:c2:82:98:
         b5:6a:3e:b7:00:46:ac:97:06:da:39:b2:0a:79:6b:a7:9b:7c:
         f8:23:4d:27:23:fe:6a:69:5c:ae:61:35:1b:11:49:dd:d2:53:
         00:e2:2d:e4:ea:46:a6:fa:f6:77:4d:91:02:b8:94:f9:57:62:
         ae:8b:05:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:26:58 2026 by rpki-client