Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
File:                     9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json)
Hash identifier:          v6+pm/y3W65tBId/hbEU38ibOWXrFp3BK5BrF1dnUIk=
Subject key identifier:   01:10:4F:42:14:54:20:1E:FE:4E:21:D7:DB:CE:4F:C5:6D:93:23:2E
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Certificate issuer:       /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial:       019DDD312A7D7FD2C9204160CE26C3E59C0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
Manifest number:          1100
Signing time:             Thu 30 Apr 2026 07:01:20 +0000
Manifest this update:     Thu 30 Apr 2026 07:01:20 +0000
Manifest next update:     Fri 01 May 2026 07:01:20 +0000
Files and hashes:         1: 6JluXjhm_3nHCCaPoS3TfBvKy-U.roa (hash: o1cOjM+O0qiescaG0asYe3SHOLXy9bPb72S0RHPk1N0=)
                          2: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: QLQ7xk6ql/w8p/vrmO6S36FwnEML7f97qUpxNk60T6o=)
                          3: EXPtgF3pZHjNUJl2LJCVZFox4fI.roa (hash: eBmFuREOuZdP3B6dGKEKnHjrjSuhSyhM471vSjq0eBQ=)
                          4: EtFx9f4oiCywxFykUSR2QjU7eFQ.roa (hash: b2AfdRFwbg0njOLl9hGqSCvFbx4kUQActP2xft37G50=)
                          5: GDHsmxtHVdYa1bZaIWOH1_OImP0.roa (hash: 7pk8LdfcytaksybidRQnrYPauwLqusCRjPdg0+T84EQ=)
                          6: M_AsK8xtgHW--enKh1Fv-0yD_GQ.roa (hash: kvJW1SXagKB0pbzliKf7XR3LeE5GTsMSJYvmlREXthM=)
                          7: QojlrQ9a8Sf-3OscCFSF9lKZeL0.roa (hash: 5zZB8tcLmgJvpKxRcJyw89w0k3VioDwJSjfpHcGceEg=)
                          8: _DBibvy1y9JoyoGE-bKCjSoDWyc.roa (hash: tHTDVPFwK8Ocp3huDTizupo9HBbejkSKeT8H3qb/iR8=)
                          9: aI7K851ffCc0tWN8S0U8Ns8VJxg.asa (hash: 822VH5CA3fhDgHZR6uAc8SFbxTllR+Bitc8kZBqFSyY=)
                          10: jFHWQVied9oZQfm4vhIvSC4eiV0.roa (hash: dr0KfgCKcAC1kV4SsWObX5dDQnEh0pKNGg0bXRatP4I=)
                          11: u21fpxmmOR9mlnHoRxP6iE7HrmQ.roa (hash: UB+VK364X+iu32GdfVjBn8r1mi4BDsfoTepchYMyQUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:dd:31:2a:7d:7f:d2:c9:20:41:60:ce:26:c3:e5:9c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
        Validity
            Not Before: Apr 30 07:01:20 2026 GMT
            Not After : May  1 07:01:20 2026 GMT
        Subject: CN=01104f421454201efe4e21d7dbce4fc56d93232e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:34:99:3e:6f:05:d3:0e:03:59:52:62:86:d1:
                    ec:4a:39:50:c0:9a:02:1d:bd:6d:9d:5b:47:d8:e0:
                    ab:ca:96:6f:e9:ac:63:9f:4f:07:3b:bc:b7:a3:86:
                    85:1e:39:03:80:88:09:73:fb:2a:fd:00:dd:fc:92:
                    4f:aa:c6:a4:b4:e9:a1:1c:48:44:80:99:5e:6d:99:
                    fb:ef:4d:6a:af:ab:60:a7:44:a4:9e:24:6b:cb:7a:
                    73:a1:93:a9:7d:22:5a:2b:66:b8:43:de:a4:01:14:
                    5f:f5:f3:84:f8:f4:93:47:b4:79:42:64:da:c2:38:
                    0c:fa:34:b6:67:0e:ca:fa:bc:c6:44:a3:88:d8:0f:
                    e2:9e:22:11:52:c2:f7:1d:73:17:cb:a2:f0:c7:91:
                    8d:71:de:01:a0:b5:04:c4:4c:23:6a:b5:fa:79:c6:
                    d9:17:ff:12:ad:1b:97:4d:2e:61:8d:fd:60:0a:26:
                    fb:3b:15:91:a0:d5:b7:3c:8c:62:c8:a9:9a:4f:b6:
                    5e:43:70:e6:3b:9d:f2:4f:7d:92:81:c7:ff:6c:5a:
                    00:49:d0:d5:b3:ff:3a:52:06:2c:73:84:6f:73:e2:
                    a0:e4:08:3d:2f:fb:4f:d8:bf:a9:9c:be:5a:d8:a7:
                    33:4e:d3:53:1c:1d:21:da:a0:1e:9a:ec:64:70:62:
                    26:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:10:4F:42:14:54:20:1E:FE:4E:21:D7:DB:CE:4F:C5:6D:93:23:2E
            X509v3 Authority Key Identifier:
                keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:1c:e0:21:70:98:e4:11:4a:86:e7:7b:df:6d:cf:b0:87:e7:
         87:e3:3b:a6:ce:71:8a:47:02:1d:60:97:e3:31:7b:6f:45:64:
         0d:d3:0d:33:d7:93:5f:c4:6e:d1:a3:96:68:53:df:32:c0:39:
         c8:10:5b:f9:e3:58:21:e3:60:c7:3b:c4:a4:91:fb:33:61:cb:
         54:30:3d:41:2d:db:f3:9d:ed:20:34:36:bf:d1:8a:e5:13:c2:
         c4:5c:94:ab:22:9b:1d:c7:7d:06:9c:3d:e3:c9:0a:4b:d4:39:
         ba:58:08:88:c2:e0:50:96:9d:39:67:c0:fc:0b:c1:22:3a:0e:
         fe:8a:a4:98:9d:b1:37:9c:53:17:6a:83:64:fb:c4:30:ef:ed:
         3b:10:d4:a3:50:bc:c6:12:f6:c7:f4:63:4b:a1:8d:e4:e4:83:
         3c:a3:33:0f:12:ab:55:40:57:df:e3:9b:10:df:86:ba:25:1b:
         2a:b0:97:43:6c:6d:a9:bf:a3:d0:08:92:d8:8e:89:0b:f4:3f:
         63:89:9f:f9:69:53:ab:9c:3d:9e:b7:d3:79:19:49:d1:9a:03:
         e7:e2:59:5d:b4:88:68:42:76:01:69:2b:0f:4c:23:03:21:eb:
         b3:cc:7b:28:ae:07:4d:3b:8b:1d:3b:af:7e:61:fa:af:ec:72:
         71:33:d4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:44:35 2026 by rpki-client