Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
File:                     k1AwYeGuUD7GPZcLMIdd2T_6u98.mft (raw, json)
Hash identifier:          U6swK0aRWH8VLQUK58TVpW5JcDKB+giPqJB7O2O+svA=
Subject key identifier:   8F:FF:9B:E0:58:1A:F5:4B:28:D0:E4:AD:34:B7:51:5E:AC:12:E5:0E
Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
Certificate issuer:       /CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Certificate serial:       019D9DE42CB14EF72D6A733C45143B1FE178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
Manifest number:          15F1
Signing time:             Sat 18 Apr 2026 00:01:09 +0000
Manifest this update:     Sat 18 Apr 2026 00:01:09 +0000
Manifest next update:     Sun 19 Apr 2026 00:01:09 +0000
Files and hashes:         1: KwoH9rX0fG1WK7HpMnqPB23ssB4.roa (hash: sjYd4LRAPn0dfzC2/zot0w98zlOUul3pMhPUiDIGgp8=)
                          2: QE7PLDiHb0x2muKYuWtBYtxL0Ts.roa (hash: YpAKtMU8tI8U8IsGd+RqIJCWCNQwjIwLB/IARRYcudc=)
                          3: k1AwYeGuUD7GPZcLMIdd2T_6u98.crl (hash: lTPFvSfHpAJy4Wjy9p6/vKn4cXXcR2ViRcJz4ZNX+Yk=)
                          4: oi0HFw6JtNN08QaNsA8THU8Vbms.roa (hash: zHlUEhPLG1p2ScID/nk2LlCxjRARDuLVIC4jlOT5y58=)
                          5: sFgFPnQJtYAI4EUbnjw6_T-C6b8.roa (hash: ruPE7+aitW/C9n9h5OlbX5hnSAYFeh1OYL3ysBGOgGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:e4:2c:b1:4e:f7:2d:6a:73:3c:45:14:3b:1f:e1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf
        Validity
            Not Before: Apr 18 00:01:09 2026 GMT
            Not After : Apr 19 00:01:09 2026 GMT
        Subject: CN=8fff9be0581af54b28d0e4ad34b7515eac12e50e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:30:00:97:9c:da:eb:ba:8c:81:5e:36:87:73:
                    6b:25:a0:ae:ea:a9:a1:f8:2e:77:1c:0b:98:ee:35:
                    2d:cd:c9:be:96:86:01:45:bc:92:4d:38:f1:46:5b:
                    c8:b1:13:b2:8c:25:1f:81:5d:ce:6d:5a:22:96:29:
                    85:c6:90:00:29:d8:8f:1a:0f:a7:0a:21:34:37:e6:
                    e6:99:cb:ba:17:59:ef:d4:c9:0c:ea:08:de:a7:81:
                    a6:4f:70:46:26:de:98:db:b1:cd:18:27:83:c1:39:
                    97:b9:42:fa:a0:3f:62:e8:69:6b:31:a8:15:0d:5a:
                    f9:7a:d4:74:69:f6:60:1e:c1:6c:85:5b:59:bd:dc:
                    bf:c2:1f:4d:12:eb:f8:c5:6e:f8:8b:17:b1:40:2a:
                    53:9d:6e:87:5e:60:c8:0d:7d:95:67:11:f2:88:78:
                    9a:0b:66:46:35:c9:46:6f:eb:94:95:17:8a:c8:61:
                    5c:88:fc:aa:6c:63:6e:ab:0d:e3:3a:b8:ec:45:de:
                    8a:f7:e7:a8:2c:d6:ec:6d:2a:a0:51:36:60:39:70:
                    63:59:0e:b8:6b:31:3c:6b:72:1c:65:2d:04:fe:17:
                    66:45:48:74:45:95:c6:c2:d0:4f:06:40:fa:05:c7:
                    d1:a4:c7:f4:b2:3f:ae:17:09:af:56:f1:b3:3f:8e:
                    e4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FF:9B:E0:58:1A:F5:4B:28:D0:E4:AD:34:B7:51:5E:AC:12:E5:0E
            X509v3 Authority Key Identifier:
                keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:16:e7:6b:ba:35:54:ba:c9:1d:8c:72:87:3d:a4:ae:cc:70:
         cf:e7:50:11:76:fa:82:77:75:b5:90:45:4e:94:93:f7:54:53:
         db:ca:fa:c1:fd:67:b7:c2:0f:21:cc:02:24:d5:8a:0e:a3:db:
         fa:fe:a2:65:00:45:e4:fb:8b:84:69:52:c4:55:58:23:87:91:
         ee:e6:a7:e6:a7:df:d0:26:25:1f:96:d7:d1:68:bd:15:e2:16:
         31:55:a4:75:b0:01:a6:67:c0:b7:39:b0:36:6f:7a:41:85:83:
         e6:8d:c2:c3:a9:4a:e6:d0:98:1b:cf:67:2f:96:7b:e5:ff:32:
         e1:bc:93:82:5b:7d:a1:23:a9:da:ba:2b:0a:6a:6c:79:ed:84:
         e8:d6:57:2b:51:36:0b:60:9a:ef:28:07:23:8f:e0:47:6f:b6:
         94:d6:79:3e:30:61:f3:c1:b8:08:63:22:4a:ee:75:cc:74:52:
         ed:56:15:7e:2d:c9:e8:ec:8e:62:e9:fc:42:6e:f2:32:a4:96:
         fb:e1:92:8f:da:65:14:d8:bc:7f:03:0c:17:b7:44:2e:23:f1:
         65:1b:a8:01:04:a3:2c:5b:9e:42:57:fe:ff:60:c2:d2:0f:f0:
         d2:3f:1d:53:67:b1:20:c8:a0:01:a8:eb:d2:bd:35:da:45:07:
         5d:27:08:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:11:00 2026 by rpki-client