Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
File:                     96oDm4hrImV4vbakJ4G_WQRLsTg.mft (raw, json)
Hash identifier:          DtQVi3o5c1ljPXXsFQ6T/CPt14R6672kZZfZsDOND4o=
Subject key identifier:   F9:F2:CE:4D:8C:36:54:00:67:56:E2:F6:5C:62:1E:51:02:AB:79:28
Authority key identifier: F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
Certificate issuer:       /CN=f7aa039b886b226578bdb6a42781bf59044bb138
Certificate serial:       019E013DBB12D53954D32F14341E1C552B42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
Manifest number:          18FD
Signing time:             Thu 07 May 2026 07:01:23 +0000
Manifest this update:     Thu 07 May 2026 07:01:23 +0000
Manifest next update:     Fri 08 May 2026 07:01:23 +0000
Files and hashes:         1: 96oDm4hrImV4vbakJ4G_WQRLsTg.crl (hash: j21gqFmcahpSEKJCnQqQyY6UkYOqeQKSkNOI6MaQG6Q=)
                          2: AdZDptogFPfZkzR5C2w7ewUy5fM.roa (hash: eY6m5Pfp09t+29CrdJcppfTJAkMyMsubBMzfDZuh9Pg=)
                          3: Mhow_zubVnvAcwQbBcXt37SkVbo.roa (hash: 6hC28liE87/PAEstEfDeR9v3wr68y7o5n3aUzo7i9jo=)
                          4: lyKU2cRz1rwVy67EiMdpJEVU-uw.roa (hash: MyEdGCpP2vsnLyoMOlKjt9pc63D/h3XJBUfmhnb515g=)
                          5: qS5aITzh8bm2lSNZ9w-1v_OwEkM.roa (hash: nyRJgnJF5E43/9qDPBbeFHXa4kSfjJ0ENxyk0mTysYQ=)
                          6: uBEokvW7aAgryoMWD6Cv0elcFmo.roa (hash: H/a3hMppgWLont3KdCAnRpO2zISV9Otu71OhQuyZUU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 May 2026 07:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:01:3d:bb:12:d5:39:54:d3:2f:14:34:1e:1c:55:2b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7aa039b886b226578bdb6a42781bf59044bb138
        Validity
            Not Before: May  7 07:01:23 2026 GMT
            Not After : May  8 07:01:23 2026 GMT
        Subject: CN=f9f2ce4d8c3654006756e2f65c621e5102ab7928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:39:b8:fc:43:d3:f0:09:ee:19:cd:3f:4d:37:
                    28:5e:f8:9d:b3:82:1f:75:9f:c2:5a:2b:22:15:77:
                    16:78:67:9f:4c:2a:8b:cf:12:d4:2c:be:9c:13:dc:
                    11:e1:54:44:83:6a:2d:12:4a:02:45:0e:77:bb:b5:
                    31:bf:82:5c:a0:69:de:fa:ad:0c:d7:a8:fe:48:ac:
                    87:11:dc:c6:21:78:c2:8c:f1:1e:d9:f3:d3:f4:fb:
                    25:74:81:39:a9:3f:58:b8:16:33:7b:fe:76:a5:9b:
                    f0:bf:07:32:89:33:3b:bc:5a:96:04:68:5d:89:6b:
                    d0:a0:a3:f1:2e:b6:d7:be:3e:71:16:26:ac:67:ac:
                    80:2a:e3:95:e9:e9:d0:5b:99:b9:2b:2c:e8:d2:8d:
                    82:d8:b5:7f:44:bd:df:e3:36:d7:da:69:46:79:42:
                    e1:77:9b:16:18:b2:c9:ef:eb:7f:15:35:f9:7b:23:
                    59:0d:e4:0d:6d:5e:0a:04:0c:4e:26:4d:b9:59:72:
                    ee:7c:1b:72:ab:47:35:48:1e:e5:e1:dc:7a:c1:2c:
                    2d:5a:ba:1f:97:28:d0:61:be:f3:1c:03:d8:ce:ba:
                    c5:50:b4:1e:ef:6b:bc:ae:7c:e5:ec:d8:24:17:24:
                    75:5a:38:23:98:55:48:33:21:c8:b1:7f:b8:2a:69:
                    30:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F2:CE:4D:8C:36:54:00:67:56:E2:F6:5C:62:1E:51:02:AB:79:28
            X509v3 Authority Key Identifier:
                keyid:F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:0c:bb:96:ce:e1:a1:73:c1:f0:8a:cf:76:24:cd:5f:90:61:
         b7:ea:41:1c:6c:15:a2:41:7a:a8:7b:93:43:d1:42:19:0b:6e:
         a5:24:1e:c3:62:53:59:9d:b4:3e:22:67:2d:25:94:f1:4e:f7:
         b5:db:c9:22:96:eb:49:94:08:5c:75:3d:61:52:59:c5:7e:51:
         0e:34:57:38:47:ca:75:32:84:c4:85:e2:82:30:b8:16:23:05:
         55:6e:23:d9:ef:73:f3:a0:1d:e7:ef:56:3f:69:a6:31:5f:98:
         55:c8:f6:de:33:f9:0a:17:6b:29:a8:6e:52:e4:df:77:ab:bf:
         b2:d7:ee:c3:af:ac:51:86:fe:fa:79:ab:68:a2:68:6d:d7:a9:
         fb:c3:53:95:21:de:a2:4f:ee:bc:89:b0:97:2d:6f:37:cc:81:
         30:e5:e8:a2:58:bc:25:99:51:fe:d2:75:e8:07:11:20:6e:c5:
         97:4d:26:59:47:e0:c7:8f:ed:d3:86:7a:14:1e:a1:a8:14:81:
         66:7c:e7:e4:ea:2c:7d:59:db:3b:5a:a7:fc:91:a0:1c:dc:51:
         09:a2:ed:7c:2a:75:54:84:11:dc:54:03:d2:7a:b5:26:2b:66:
         e1:a3:c1:9e:9c:80:0b:63:c6:8e:0c:44:1c:53:ed:1c:3f:4d:
         91:85:41:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 10:17:45 2026 by rpki-client