Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
File:                     fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft (raw, json)
Hash identifier:          dUzih0sHEZ2j92M9quEqEfSyxsE49Gl2aA6dvIyUS2A=
Subject key identifier:   E6:AB:94:97:54:CE:9F:B0:22:AE:08:8A:C3:13:BB:16:64:BE:D1:7E
Authority key identifier: 7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9
Certificate issuer:       /CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9
Certificate serial:       019DD0F5C477522749D059B0C04E64B44C8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
Manifest number:          0106
Signing time:             Mon 27 Apr 2026 22:01:00 +0000
Manifest this update:     Mon 27 Apr 2026 22:01:00 +0000
Manifest next update:     Tue 28 Apr 2026 22:01:00 +0000
Files and hashes:         1: F-MQ4_q16IIp-IO6Aj9rbXh6FAg.roa (hash: O9ss77MomSSt907FsLWzdFo2wbDsc9Vaw/c7NY0bUPI=)
                          2: Lv7nZi0Ca4VD-5H2MSb5yq4Mxf8.roa (hash: kAeb16gDeMymOsy5vSRtUWw4R89UmFmfcQyy8hoRkQs=)
                          3: a6ILxs7AfRiz-iaAF-l64QD3g3c.asa (hash: 7o07rC7UvT5It+u+RtYxdmApc9D4ts/fYHhAKB3o4vs=)
                          4: fl-aO37XXQmTdf9bFQvR4sML3I8.asa (hash: 095zE2TxY8ZX1/zGISHc5yzKNCHD1HSK1z5BPh0SZNU=)
                          5: fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl (hash: TKEAZgO62DCb2Dvu6+ONi3wdEtXL82BuoPXSaZC2wQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d0:f5:c4:77:52:27:49:d0:59:b0:c0:4e:64:b4:4c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9
        Validity
            Not Before: Apr 27 22:01:00 2026 GMT
            Not After : Apr 28 22:01:00 2026 GMT
        Subject: CN=e6ab949754ce9fb022ae088ac313bb1664bed17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:70:5c:73:3f:5e:68:3c:b4:ec:30:61:06:cd:
                    5c:21:f2:a0:82:7c:2b:0d:f4:0f:ff:7c:c9:fb:ba:
                    46:16:16:70:9b:18:5a:7a:d0:a9:b9:37:c1:ae:6b:
                    31:29:b0:0a:0f:68:f6:1f:fd:1e:8e:b6:b0:e8:2e:
                    18:26:94:89:ba:b6:d2:a4:c3:d7:f4:95:4c:a5:17:
                    2f:19:e5:9e:c5:e7:e9:d8:52:20:0f:3f:b6:51:39:
                    e5:46:39:56:56:56:45:34:f9:38:4a:a5:9e:fd:34:
                    9c:f4:40:25:e4:89:07:e1:04:a3:a7:f1:cb:96:d5:
                    13:a8:70:34:19:bd:10:42:27:b9:1b:92:30:fd:38:
                    6b:8d:49:ce:16:3a:fc:bb:83:95:8a:56:49:ef:b5:
                    36:0d:6d:de:24:17:c6:d6:98:00:96:2c:f6:77:20:
                    90:e9:28:17:0f:c5:bc:57:ee:08:7a:03:76:a2:73:
                    eb:c3:e9:1b:9b:d1:83:e4:28:ef:45:4d:f4:f6:01:
                    09:a6:28:73:28:c5:85:a3:5b:82:95:77:5e:2d:54:
                    50:d7:42:3e:7c:c8:89:8f:ae:be:27:d1:88:f1:34:
                    e5:d4:ed:5e:92:e7:5b:af:46:69:c6:ad:a1:ef:38:
                    0d:f1:63:4d:ae:3c:f5:d6:9b:fc:6f:e6:d3:d4:d5:
                    e7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AB:94:97:54:CE:9F:B0:22:AE:08:8A:C3:13:BB:16:64:BE:D1:7E
            X509v3 Authority Key Identifier:
                keyid:7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:12:e2:7a:fa:7f:b6:c0:07:0b:95:08:18:f6:c3:fa:02:22:
         60:fb:fa:49:b7:3b:0f:5c:58:9f:33:99:da:2b:d6:b9:da:3c:
         e5:53:43:67:7f:47:c5:22:f3:79:59:8b:f5:85:bf:b6:f2:2f:
         70:9b:11:65:cd:d2:d6:e9:9a:cc:fa:23:0a:a0:ae:04:8c:1b:
         08:86:7b:5f:4b:0e:c9:7f:84:04:a9:61:7a:f5:a1:bc:b2:cb:
         85:41:a5:ca:46:8c:79:0d:e6:76:7c:a9:8a:81:69:10:87:20:
         34:62:62:1a:0c:0b:d1:94:31:e7:61:54:d4:ba:1c:bd:07:53:
         92:de:ed:26:b4:8f:3a:5d:61:1a:0b:75:c8:67:56:9e:14:d2:
         de:59:18:76:34:c3:fc:f9:13:d8:a8:d3:94:04:9f:99:42:88:
         cf:7e:c4:9b:0d:73:bf:94:49:db:4a:21:f3:83:40:47:3a:04:
         69:65:47:82:4c:72:a9:4d:b6:13:75:6c:43:8f:98:bc:6d:a5:
         e7:71:15:fd:a5:80:34:5c:2c:b2:fa:81:fe:93:9d:4c:9c:46:
         c1:91:9a:6d:d7:cf:00:df:17:7d:1a:b5:ff:27:ab:0a:ca:59:
         03:1a:d5:0a:0a:74:c7:ab:51:c9:e3:14:87:ee:80:52:e9:fb:
         df:4a:48:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 01:14:13 2026 by rpki-client