Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File:                     9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier:          OiK7qlSo3mZcghmqxjRbgXpgKUj0zwFZVrXr1TcZtwY=
Subject key identifier:   FE:FA:31:F7:19:D8:A3:26:1F:2E:91:4D:79:0C:BF:1C:A3:0A:3F:7F
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer:       /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial:       019D623D2CDBA068AF1B986E7A4ABF46E586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number:          1838
Signing time:             Mon 06 Apr 2026 10:01:09 +0000
Manifest this update:     Mon 06 Apr 2026 10:01:09 +0000
Manifest next update:     Tue 07 Apr 2026 10:01:09 +0000
Files and hashes:         1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: R6KF2/l4BF7dXNBAY0V2AKK4usjno3b4oSnagVpbIP8=)
                          2: PmvPeyfuH32uVVKqSfQ5RmaGzZA.roa (hash: 9iQB+r4y8DYdCOUHJllDHq/E35qdiIubyMUUaFVIXsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Apr 2026 10:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:62:3d:2c:db:a0:68:af:1b:98:6e:7a:4a:bf:46:e5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
        Validity
            Not Before: Apr  6 10:01:09 2026 GMT
            Not After : Apr  7 10:01:09 2026 GMT
        Subject: CN=fefa31f719d8a3261f2e914d790cbf1ca30a3f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bb:d5:fa:29:57:50:18:5d:89:a8:62:62:c5:
                    dc:8d:d2:81:d8:f3:36:84:5a:5c:52:c7:d9:3e:c3:
                    54:79:dc:dc:fa:31:ec:90:48:a5:2e:33:43:54:46:
                    5a:14:45:ae:28:c0:a2:6f:c3:52:1a:90:8e:95:d6:
                    a8:e0:f7:89:1c:ba:f0:b8:11:4d:e1:d4:ac:2d:ac:
                    70:ae:6c:f1:38:24:77:7c:f7:4f:31:c9:89:25:4b:
                    08:32:57:bc:22:68:57:5b:48:08:92:4e:5d:04:c0:
                    bd:01:56:0e:e7:d9:29:8b:ac:0d:86:f4:47:ae:09:
                    18:00:75:e0:b9:8f:77:22:22:a7:78:91:3c:09:38:
                    3b:70:99:37:2e:e5:9c:a6:d5:65:1c:d2:94:8a:c3:
                    95:34:ac:52:5b:ab:a5:54:1d:64:d0:5d:0a:ae:18:
                    27:12:74:e1:23:96:a8:90:06:65:76:bd:42:cd:3e:
                    0f:f9:6e:a3:f4:12:ab:4f:13:55:cc:7d:8d:41:fd:
                    4c:9d:f5:36:b6:91:ea:f4:cb:e9:63:be:77:6c:14:
                    00:87:76:23:dd:1c:a3:a0:9a:96:ca:90:22:8e:9a:
                    37:23:b9:68:20:82:6f:77:82:6c:84:ba:f2:54:6d:
                    2e:51:19:20:d1:aa:c3:2d:fb:4d:be:d3:18:3f:59:
                    5c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FA:31:F7:19:D8:A3:26:1F:2E:91:4D:79:0C:BF:1C:A3:0A:3F:7F
            X509v3 Authority Key Identifier:
                keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:50:d3:02:17:26:ce:43:25:42:99:71:d7:9b:bf:7e:a2:8c:
         5c:f1:f9:33:e5:99:18:ec:9e:29:32:fc:50:63:ed:37:87:db:
         fa:12:ce:d5:2f:73:d6:fa:01:a5:87:1d:5b:9c:30:d9:ee:c5:
         eb:b3:04:4c:b6:dc:55:3a:0b:29:10:15:a7:0c:6b:ee:55:e8:
         73:16:24:93:04:1f:de:a2:48:cf:af:51:2e:db:6d:13:05:66:
         39:e4:d5:3c:b3:37:65:1e:24:e3:6f:07:4f:04:1c:71:e3:ff:
         fb:ea:a2:92:2a:84:53:e9:be:20:71:a9:db:87:b2:1b:86:db:
         3a:25:d2:3d:9a:95:41:94:b4:6a:24:16:f9:2f:fb:9e:e2:73:
         9c:82:c8:cb:e9:d5:85:a1:c7:fc:5d:43:e1:37:76:97:9b:16:
         a0:a5:80:46:86:b7:e3:f8:26:99:39:84:2f:af:5a:24:33:c0:
         0a:be:cd:40:ba:52:ca:bd:37:80:3e:42:9b:19:e7:98:c9:1e:
         83:ac:7b:2d:d2:19:3e:17:e5:1e:5c:cb:11:e4:7b:bc:a9:b3:
         33:65:f2:61:87:a8:1e:ba:2e:89:7c:f7:ee:48:d9:2b:ee:38:
         f4:9c:52:ae:b1:7a:d5:bc:25:5e:87:24:b2:a5:d5:0a:c9:d9:
         5a:fd:c4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 16:57:14 2026 by rpki-client