Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
File:                     ioludoVA84eh3U_52qS4W6SKkG8.mft (raw, json)
Hash identifier:          0CCo7EkYKePcxT6TscqYCO1yZbyzJpIHz7RuDW+R9jM=
Subject key identifier:   B3:F1:3F:B7:08:05:7B:42:3B:35:25:B6:6D:B5:FA:50:C5:12:94:A3
Authority key identifier: 8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
Certificate issuer:       /CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Certificate serial:       019DB35924786BDD09E33C6F67637F801B80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
Manifest number:          1212
Signing time:             Wed 22 Apr 2026 04:00:56 +0000
Manifest this update:     Wed 22 Apr 2026 04:00:56 +0000
Manifest next update:     Thu 23 Apr 2026 04:00:56 +0000
Files and hashes:         1: ioludoVA84eh3U_52qS4W6SKkG8.crl (hash: G2DhW1MwS3ifw/CcrrN3wtBMiYtHefnQdyqzsmNNTv4=)
                          2: pl9mzp_8YMyJw55sEo1vdEjuXI8.roa (hash: gvQ9YBNcPAS5X5E1J1OqXa8f8Nq/+m7113n6v9qADuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Apr 2026 04:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b3:59:24:78:6b:dd:09:e3:3c:6f:67:63:7f:80:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
        Validity
            Not Before: Apr 22 04:00:56 2026 GMT
            Not After : Apr 23 04:00:56 2026 GMT
        Subject: CN=b3f13fb708057b423b3525b66db5fa50c51294a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a8:ba:b9:80:3e:4a:ef:4f:bf:01:58:91:28:
                    74:0b:8d:66:00:09:45:fb:02:e4:c2:4d:5a:89:de:
                    19:b0:84:0a:73:11:8d:4f:6f:62:4c:21:2a:89:a7:
                    9a:f7:10:f4:8c:cc:bb:c9:66:91:f9:ce:e4:2a:d7:
                    8e:ea:45:97:c9:9d:71:17:76:81:65:01:66:55:67:
                    9b:76:c1:6e:05:a8:0b:e9:8c:bd:a1:cf:75:11:5f:
                    a6:74:c6:54:ea:f3:18:d9:3e:c0:6b:a4:46:23:84:
                    f0:f7:06:7a:cb:bd:76:85:84:9c:63:16:eb:9f:ea:
                    3c:2e:68:2e:77:b6:c7:27:cc:86:b4:8f:b0:f7:b2:
                    5c:98:29:66:de:2e:e1:2b:9e:53:4c:4a:5f:10:75:
                    5d:70:c8:1e:6a:b8:aa:8c:7d:e7:2d:a1:9f:c0:a5:
                    c0:ff:49:11:f6:df:fc:4e:bd:dc:88:08:35:5f:f9:
                    1a:c4:b9:d0:97:23:44:57:63:d2:c2:2a:93:bd:fb:
                    e9:f9:2c:ab:6a:2b:92:ef:2f:71:91:25:2c:66:ba:
                    ea:a7:6d:0c:99:33:d5:1c:0a:af:69:f3:7c:2f:1e:
                    94:a0:b4:ff:4c:eb:f1:f4:f1:1b:0a:da:9a:cf:ba:
                    79:1f:33:0a:74:8c:27:dc:ea:00:3c:ef:7e:22:ec:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F1:3F:B7:08:05:7B:42:3B:35:25:B6:6D:B5:FA:50:C5:12:94:A3
            X509v3 Authority Key Identifier:
                keyid:8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:a4:81:a4:b7:36:88:c1:17:1e:d8:cb:1b:6a:8c:38:88:ee:
         92:5c:8d:dd:53:03:14:00:a2:91:f8:b8:0d:4c:c4:8a:22:5d:
         86:7d:0f:83:c5:5d:7d:11:a3:b5:8e:c3:8f:80:70:66:ed:62:
         a8:f6:40:25:84:d3:b6:4e:42:15:ed:3a:32:f9:55:36:9f:2a:
         8b:48:ba:ce:25:6d:a3:84:0c:0b:f5:73:f7:02:14:1c:e5:19:
         67:91:16:fe:58:5c:6f:b4:e2:fd:76:56:34:8c:34:11:c3:8f:
         09:64:4b:a6:04:9f:8c:9f:3c:a0:72:22:2b:ae:57:83:66:08:
         30:8e:4d:71:8d:cf:7f:92:51:4b:4e:ea:dd:65:2d:d1:ec:e4:
         d8:9f:26:77:64:00:4d:89:04:64:90:da:e3:ed:bb:b2:7b:7c:
         19:e8:a6:19:2f:78:1d:70:6b:41:50:91:f9:3c:5b:47:04:dd:
         64:5f:2a:82:da:3d:26:34:6b:fa:77:7a:ac:40:ef:46:0c:22:
         a5:6c:50:e1:20:4c:7f:27:9e:59:c5:14:20:63:10:08:ef:f9:
         f7:ee:66:6c:65:4b:02:00:3d:7a:fe:ae:cd:c3:12:50:44:27:
         6e:38:0b:6f:00:1d:cf:bf:be:4a:76:1a:f1:34:3c:47:52:6c:
         d9:ab:e0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 10:41:03 2026 by rpki-client