Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
File:                     Fd3Uydwj-sNVdPzitClDmK3YUhw.mft (raw, json)
Hash identifier:          6XluMippsxkENAw6GhFxfFoqe9d/BBMAB/GF9eWf8Yg=
Subject key identifier:   C7:26:C7:A1:8B:66:37:DE:5C:28:A5:DC:31:C3:39:78:A5:A7:64:DA
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Certificate issuer:       /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial:       019DA8302C6C7D3ACC5C163F0D72C0059AFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
Manifest number:          1065
Signing time:             Mon 20 Apr 2026 00:00:22 +0000
Manifest this update:     Mon 20 Apr 2026 00:00:22 +0000
Manifest next update:     Tue 21 Apr 2026 00:00:22 +0000
Files and hashes:         1: 3x_eNlfqr-pzS31r85Kyh1RTzhw.roa (hash: ca0B1hA6S7RSMd4p7jDgIrOLafYEE67HR7dN2aYSue0=)
                          2: AU0mK3kvJWDL6WvTMDBwruIk9Yo.roa (hash: UJ521U9kX8KbpPJ5yoTgLuBYMW8RZw/CsvE9VFkznzw=)
                          3: Fd3Uydwj-sNVdPzitClDmK3YUhw.crl (hash: ljQl3d7LwO31L/9YU3pEeGQjfeYcR3zwTfwluYHRV7k=)
                          4: k3Io6XWMMdN-bVtwln4_8KO-IVA.roa (hash: Aa8iwiJFepHxrsbFSA+APkKdOhzyuMHdrvQewpxY1oA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a8:30:2c:6c:7d:3a:cc:5c:16:3f:0d:72:c0:05:9a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
        Validity
            Not Before: Apr 20 00:00:22 2026 GMT
            Not After : Apr 21 00:00:22 2026 GMT
        Subject: CN=c726c7a18b6637de5c28a5dc31c33978a5a764da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:7f:bc:eb:50:b5:ac:a0:35:ab:68:fc:4f:
                    fa:63:7e:90:9d:fb:c1:52:c7:a2:64:93:a1:a9:45:
                    fe:e0:a0:38:aa:f1:83:6a:67:bc:c6:98:4d:cb:0a:
                    f8:aa:cc:fe:6a:73:32:49:0f:ca:40:8e:15:df:89:
                    14:6b:fc:1b:44:fc:82:01:ac:4c:4d:03:9c:29:85:
                    8c:8a:61:4e:26:7d:ee:9f:39:a2:dc:60:75:c7:0b:
                    0c:99:df:eb:71:37:f1:83:be:48:7a:2c:54:b5:27:
                    79:88:08:aa:26:a0:c2:c4:39:9d:9d:d5:49:c0:0c:
                    bc:df:88:f2:28:c6:72:69:b2:00:fd:a1:a7:74:e8:
                    e4:30:5a:21:6b:1e:35:8b:73:41:65:ac:ab:fa:d1:
                    57:00:06:3b:86:d2:3c:b9:0e:f4:f4:ae:ee:39:63:
                    6d:d1:a4:98:0e:af:54:81:e1:a1:04:db:5d:d1:fd:
                    41:7b:0e:8e:8c:80:ee:f6:18:cc:f2:96:eb:13:a1:
                    d9:a7:19:30:c5:47:19:1b:18:e1:f9:38:6e:f8:b9:
                    d8:b8:fb:23:14:75:f5:bf:6c:f0:2d:28:e1:36:18:
                    c2:fd:d5:01:4b:b3:b0:ba:fc:36:0d:93:54:7a:ca:
                    7e:d5:cf:5d:6f:7c:15:54:40:51:8e:d8:17:c7:2e:
                    3c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:26:C7:A1:8B:66:37:DE:5C:28:A5:DC:31:C3:39:78:A5:A7:64:DA
            X509v3 Authority Key Identifier:
                keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:7d:a9:0d:09:ea:ae:be:61:e3:25:04:89:11:32:2b:06:45:
         61:70:b7:61:d5:31:5a:c3:bc:02:19:6b:45:88:8a:95:00:b1:
         e0:0f:ac:81:5e:d1:16:41:3b:0d:e8:4e:b8:7c:1b:11:96:df:
         48:1d:ba:2c:3e:7c:31:51:01:b5:31:db:6f:34:cb:a4:ab:c2:
         d8:2d:c6:83:0c:d2:4b:6d:08:0b:9b:93:d2:fe:73:10:c1:b2:
         7c:a6:3a:66:fa:96:ee:7c:c4:e7:ec:73:85:78:d2:bd:77:3f:
         de:43:30:47:ad:be:07:39:23:0c:35:3c:8b:58:a5:7e:61:97:
         1b:41:c8:28:da:9b:84:fb:58:2e:bc:97:af:8e:5a:0c:4e:93:
         d0:ff:c1:33:ba:10:aa:51:ae:67:b3:3d:fc:ab:d2:65:9a:25:
         b8:f3:73:cb:59:73:bb:64:e0:3d:7e:7d:49:41:7e:ec:97:ae:
         c8:e5:fe:4b:a5:3f:94:e3:26:75:30:55:7d:11:00:59:84:7a:
         68:c1:20:c2:33:1a:05:b1:88:e5:da:63:f0:91:e4:50:ab:45:
         98:cd:57:b8:23:ca:ea:30:84:fd:e8:76:f9:cc:c5:a1:b9:45:
         bd:ca:13:99:9c:1f:f5:77:50:18:0e:49:f1:49:bf:4b:94:42:
         54:29:22:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:33:12 2026 by rpki-client