Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
File:                     SbJERkTEM0jXxQ9OUOdDVumJbb8.mft (raw, json)
Hash identifier:          WKGN6tj7dmRRr1wWvisrBp4+YPbQlWWtsuXBS17IkXY=
Subject key identifier:   27:94:00:4B:61:A6:43:11:36:A4:4E:1C:27:BE:28:E8:3B:75:4A:D0
Authority key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
Certificate issuer:       /CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Certificate serial:       019DCFE35DABFD0514CB54DE8D4F163046E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
Manifest number:          1634
Signing time:             Mon 27 Apr 2026 17:01:17 +0000
Manifest this update:     Mon 27 Apr 2026 17:01:17 +0000
Manifest next update:     Tue 28 Apr 2026 17:01:17 +0000
Files and hashes:         1: 1y38PR10Vv3q34i9joY2RmqK9ws.roa (hash: WeX7D0CbRCituwqc2ZHAm4HR95Ee3JW1/xIonHquU3w=)
                          2: Py-y3i4hM_niS2FAlbK-g-CG53U.roa (hash: XmwAKXCN1UVsid2Ow64xLKVGJOuuu5RfqZ+9WMGZctw=)
                          3: SbJERkTEM0jXxQ9OUOdDVumJbb8.crl (hash: l/yQnR66pC/IlorW4UC0RCiwBt0jL0ldP262GZ8EoH0=)
                          4: yXa8XbTaH683GFEjkOW8VCRIjpE.roa (hash: l5nJIcq0a2VDJfhrhqSb9wFUsKAsvOaRuHeId15ZhA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 14:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:e3:5d:ab:fd:05:14:cb:54:de:8d:4f:16:30:46:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49b2444644c43348d7c50f4e50e74356e9896dbf
        Validity
            Not Before: Apr 27 17:01:17 2026 GMT
            Not After : Apr 28 17:01:17 2026 GMT
        Subject: CN=2794004b61a6431136a44e1c27be28e83b754ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:09:0e:a8:2b:0c:4c:71:df:d7:0c:50:26:
                    f3:60:fa:af:ca:c5:89:37:30:18:3d:fc:52:67:9a:
                    4e:f6:54:2c:e3:07:22:d3:73:f1:90:78:d3:0c:28:
                    ec:6e:43:11:cf:98:83:96:a1:1f:1b:09:ec:f2:32:
                    c4:ed:bd:5b:a8:08:d5:83:c6:ae:95:57:c7:93:30:
                    61:21:6a:e2:fa:97:b4:fb:52:c5:6d:6a:9e:aa:be:
                    7a:0e:e0:83:ec:36:a4:8c:be:77:c4:c4:93:18:31:
                    ca:bb:c2:22:a9:e3:fe:34:17:22:5a:cb:8b:d7:d6:
                    3e:68:0b:99:5a:8d:98:8b:48:1b:6a:fb:4c:a1:26:
                    ef:7d:19:c9:e2:47:74:de:75:b4:25:d3:a3:26:35:
                    a4:e3:a0:02:b3:58:e3:2d:80:0b:49:43:a5:66:85:
                    03:b5:1c:32:36:f0:d4:da:1c:b1:73:ad:e3:c8:cc:
                    d2:bf:f9:ad:d2:41:9c:d2:09:2f:2b:f2:ce:e7:ef:
                    7c:ca:af:44:ea:27:08:ed:16:2a:1f:4a:2f:71:55:
                    2f:6d:6e:84:30:a8:23:2b:9d:31:c0:16:65:28:1d:
                    5f:78:e3:6b:92:d1:66:c1:d4:f0:b1:2b:d1:b0:7d:
                    15:ac:8b:12:86:e3:67:08:ea:ae:75:24:d1:78:08:
                    c7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:94:00:4B:61:A6:43:11:36:A4:4E:1C:27:BE:28:E8:3B:75:4A:D0
            X509v3 Authority Key Identifier:
                keyid:49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ef:1a:40:8f:c1:73:5c:8e:3a:57:91:97:ba:b0:23:6a:a7:
         34:bf:e9:a0:be:2e:6f:0d:b7:e6:d5:89:c6:a8:3a:45:f4:66:
         dd:a1:97:bf:20:bd:82:eb:75:ac:23:a1:6a:1e:be:99:4b:9a:
         84:19:ab:fe:ac:8f:18:50:b7:b3:51:9f:7f:f4:92:cd:f4:7d:
         03:9d:50:d4:de:89:b0:61:05:9f:03:f9:c3:f1:11:39:1c:f7:
         00:71:de:b9:47:67:63:9e:34:6d:53:69:3d:c1:32:88:84:75:
         af:ef:1c:1e:26:db:55:d4:f6:aa:4e:8a:87:69:52:ea:4d:1f:
         cc:52:57:3a:de:e3:be:d9:d6:09:ab:58:22:c9:e4:03:0f:f1:
         28:1c:96:d6:c3:35:a6:f7:d6:94:dc:41:71:32:02:01:d9:a6:
         00:12:25:df:02:c0:d9:ba:6c:ef:37:20:4e:0e:2d:8d:c4:32:
         e4:79:b1:e9:04:4b:44:ae:49:7a:11:f7:87:04:82:3b:e3:89:
         f5:39:fa:d0:7f:ce:16:67:6e:93:db:3e:67:66:07:0a:7b:28:
         09:0a:cb:5a:40:a2:22:ee:94:8b:a8:06:04:71:b8:bb:86:0f:
         fb:66:8f:cd:d4:60:58:09:ff:de:c0:c0:48:fb:da:57:5b:6b:
         e3:95:ef:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:06:24 2026 by rpki-client