Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
File:                     90fq0fqaE1xlBXykEtiTu4LpFCk.mft (raw, json)
Hash identifier:          exiXJeVaFbILHynDQO43iTJ+iKIqnywfhbIin/B0P9w=
Subject key identifier:   2E:E1:94:84:03:F8:EA:50:D5:A5:8B:70:25:4D:5B:3B:7A:B2:DC:AE
Authority key identifier: F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29
Certificate issuer:       /CN=f747ead1fa9a135c65057ca412d893bb82e91429
Certificate serial:       019DA1C070240C321A832A1596C772628C44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
Manifest number:          0183
Signing time:             Sat 18 Apr 2026 18:00:36 +0000
Manifest this update:     Sat 18 Apr 2026 18:00:36 +0000
Manifest next update:     Sun 19 Apr 2026 18:00:36 +0000
Files and hashes:         1: 90fq0fqaE1xlBXykEtiTu4LpFCk.crl (hash: oxEF3Eiv0UkR/f/FPxVlIbUaP9Wj0oeZeRXpabP9okw=)
                          2: pQ6OpLF--IiLA278NBvgvoHUl3M.roa (hash: VkzfPnVTMik02z1Xq0NMpSlwyjKpDs0ddq2OYGEMu4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 17:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a1:c0:70:24:0c:32:1a:83:2a:15:96:c7:72:62:8c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f747ead1fa9a135c65057ca412d893bb82e91429
        Validity
            Not Before: Apr 18 18:00:36 2026 GMT
            Not After : Apr 19 18:00:36 2026 GMT
        Subject: CN=2ee1948403f8ea50d5a58b70254d5b3b7ab2dcae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:12:12:56:d1:6f:1b:03:a8:b1:8f:d4:97:a4:
                    79:60:16:6d:d8:1a:c7:36:0c:2a:fc:f3:06:fc:4c:
                    ca:76:91:84:ab:ec:7e:74:a6:29:c2:5f:41:e2:f6:
                    a0:7b:dc:6a:a3:df:2b:a8:57:6f:b5:48:d8:14:86:
                    15:3b:d7:65:f6:bf:e6:89:ad:ea:18:f1:2c:2f:8d:
                    c5:55:dd:4c:07:4b:0a:44:eb:51:bb:7a:9c:77:cb:
                    5f:85:67:d8:e2:ce:58:ea:7e:e8:6d:c0:93:41:97:
                    c2:50:f0:e5:32:8e:c2:75:d4:0c:26:44:58:35:49:
                    fa:1c:4c:13:55:86:5e:a1:ec:53:85:7e:12:29:f7:
                    0e:60:75:41:83:77:36:fe:e6:96:53:62:38:43:8e:
                    cb:ad:6d:c5:47:64:88:13:aa:d5:b6:59:cb:5c:f4:
                    c2:07:07:d0:fd:c2:14:73:0d:a5:ed:0f:a6:09:11:
                    8f:eb:0f:fe:19:fb:76:70:50:e8:b7:6a:d9:09:c6:
                    bb:4f:00:b5:49:8f:ba:1a:24:b9:6b:4f:d5:4d:fe:
                    94:3b:5d:dd:10:ba:f5:c7:0b:6c:ff:14:35:01:7d:
                    07:e2:51:05:c2:0c:c5:71:e2:6d:34:55:fc:fe:e2:
                    5e:bc:dd:31:50:77:d3:30:81:9a:26:93:93:20:33:
                    8f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E1:94:84:03:F8:EA:50:D5:A5:8B:70:25:4D:5B:3B:7A:B2:DC:AE
            X509v3 Authority Key Identifier:
                keyid:F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:36:68:67:38:b4:cc:cd:3e:bd:ab:be:03:b4:c0:81:80:ec:
         9a:6a:e6:f3:b5:2a:e9:63:44:50:99:f4:02:47:5e:50:80:4e:
         77:f0:7b:66:8a:17:c5:35:af:03:09:e7:29:a9:f5:39:95:6d:
         e4:97:de:d6:cf:05:fd:e8:e0:44:03:0d:08:85:5a:6e:16:93:
         ab:92:87:8a:f5:84:2d:0d:18:0c:a3:41:56:70:34:37:18:9b:
         11:e9:c2:58:a9:c2:d8:fe:3b:4d:7b:1a:76:d6:05:ca:bb:c3:
         0a:c6:3b:ea:76:61:90:f4:d2:95:b7:2d:49:2b:36:37:8e:87:
         21:1c:83:f2:10:27:f7:f9:1d:7f:eb:5f:58:93:8a:7e:e3:a8:
         19:39:e4:99:da:64:8c:ac:4a:3a:de:39:b1:5a:4e:d0:62:db:
         8d:e7:60:26:e5:a9:8d:d7:78:4b:a6:88:50:79:a5:67:49:be:
         2e:1c:bd:6d:ff:d3:bd:a9:4e:8f:81:4e:61:1e:99:49:18:9e:
         70:ca:69:62:26:78:60:f8:c2:7d:9d:1c:1d:76:db:a7:8e:8f:
         7f:e5:45:e7:03:b0:5e:93:e5:9f:2c:4f:d8:4f:db:56:ca:26:
         bc:87:5e:dc:a7:98:91:fc:ef:1f:c9:04:ab:63:dc:77:a2:a2:
         70:c8:d2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 00:56:48 2026 by rpki-client