Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft
File:                     fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft (raw, json)
Hash identifier:          6/Ce3AeD/iae7hrKWGuNe5fByuS22eKeHBltESlSvHE=
Subject key identifier:   A0:E9:87:23:72:08:93:EF:F2:1D:34:3A:A7:D2:64:21:9E:46:D0:B1
Authority key identifier: 7F:10:B4:B6:2F:14:E6:16:EF:6F:E5:7E:CC:D1:B8:F8:18:24:8B:AA
Certificate issuer:       /CN=7f10b4b62f14e616ef6fe57eccd1b8f818248baa
Certificate serial:       019DDD9EBD16D1D77E6C00346C49B33153D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxC0ti8U5hbvb-V-zNG4-Bgki6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft
Manifest number:          22
Signing time:             Thu 30 Apr 2026 09:01:00 +0000
Manifest this update:     Thu 30 Apr 2026 09:01:00 +0000
Manifest next update:     Fri 01 May 2026 09:01:00 +0000
Files and hashes:         1: fxC0ti8U5hbvb-V-zNG4-Bgki6o.crl (hash: 8VtAJ2bEhvqaFfkWv8/MZpln03dvkkLuBz8dwM6Dt1Y=)
                          2: qNO-vqMo6CUKbBad3Z7RIqx2J8c.asa (hash: BRtlygNOpn1uRvLhqR+yBcBHhopuo/nmc11EsjchCV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fxC0ti8U5hbvb-V-zNG4-Bgki6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:dd:9e:bd:16:d1:d7:7e:6c:00:34:6c:49:b3:31:53:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f10b4b62f14e616ef6fe57eccd1b8f818248baa
        Validity
            Not Before: Apr 30 09:01:00 2026 GMT
            Not After : May  1 09:01:00 2026 GMT
        Subject: CN=a0e98723720893eff21d343aa7d264219e46d0b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:74:ae:18:21:7c:87:2e:bc:6e:20:38:2d:f5:
                    ab:71:09:58:59:29:f6:13:19:d5:ea:46:c4:75:14:
                    be:dd:e3:73:7e:09:27:ba:7a:d2:7a:16:81:17:a2:
                    d4:73:ec:cb:92:f6:db:f8:84:4e:e8:fe:9b:b6:a7:
                    89:b1:fb:ef:a1:e2:80:26:b8:8c:f1:cd:f4:39:7e:
                    e4:dc:a8:43:95:c0:6b:04:23:2c:80:e6:b9:d1:55:
                    a1:f3:d0:43:de:81:61:89:0d:ea:a5:30:85:e8:2d:
                    b2:0e:53:40:54:02:39:76:a6:01:10:4b:ef:80:50:
                    78:c0:92:e5:a8:50:90:d5:85:e5:b3:f0:ba:d4:42:
                    a5:50:23:63:28:a2:a7:04:ab:1a:b1:fa:f0:fb:2b:
                    c6:8b:78:e1:f2:ad:d1:5e:c3:f9:0e:08:63:87:9b:
                    24:74:03:a4:87:17:f8:17:ca:ce:9d:5e:55:0d:bc:
                    b6:bc:87:f7:f8:28:d8:36:9e:bb:70:57:cc:bf:ba:
                    05:8f:07:ce:07:6b:2a:0f:26:d4:0a:b6:90:b3:6b:
                    8c:76:8c:cc:42:42:55:c5:21:db:eb:b6:be:e8:41:
                    66:08:30:5e:52:da:8e:dd:42:3b:56:76:5a:f0:e5:
                    e2:ad:93:6a:9f:fc:1c:a4:bf:0b:5d:28:a7:64:bc:
                    2f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E9:87:23:72:08:93:EF:F2:1D:34:3A:A7:D2:64:21:9E:46:D0:B1
            X509v3 Authority Key Identifier:
                keyid:7F:10:B4:B6:2F:14:E6:16:EF:6F:E5:7E:CC:D1:B8:F8:18:24:8B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxC0ti8U5hbvb-V-zNG4-Bgki6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e1:98:42:b0:76:b2:59:a9:89:54:ab:97:f8:4d:bf:27:b1:
         c5:9e:9a:51:bc:e8:d3:4c:6b:7b:b1:47:7b:47:d7:5a:d3:11:
         d6:bd:35:d3:87:bd:17:4d:d3:1e:6e:89:8b:c5:55:11:ee:05:
         5c:0c:7a:c8:6d:b5:eb:b2:5d:d4:89:34:fb:86:62:95:ab:c6:
         f5:31:1e:8e:ab:3c:a1:9a:22:59:4e:ae:b8:88:e7:7c:0b:4a:
         40:67:8c:68:ee:bb:d4:43:b7:e3:5b:02:59:85:3b:1b:12:89:
         9a:db:75:06:bd:08:db:81:85:85:65:0b:52:78:75:6d:53:87:
         6f:7a:5d:76:41:64:f6:29:8c:97:2f:ae:e7:49:00:78:e2:e8:
         05:84:5f:7f:2d:e0:6b:4b:53:bc:f8:c1:68:10:ea:b2:29:29:
         32:05:d0:ac:46:90:ff:2e:25:52:31:61:1a:56:36:8d:7e:19:
         97:f1:e3:c6:3d:6e:f6:f4:e1:cc:d5:c2:67:ce:b8:9e:fd:fc:
         3f:10:a9:b1:eb:f7:91:27:fa:21:74:6a:1e:a9:e4:1e:73:10:
         e9:a0:88:9a:43:05:90:37:62:28:1a:d4:62:a1:43:3f:42:ce:
         35:47:44:21:60:71:05:c2:07:cf:a0:aa:a2:5c:66:7c:6b:b3:
         37:7c:2c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:46:20 2026 by rpki-client