Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
File:                     vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft (raw, json)
Hash identifier:          krvd6fheBzlF8TnwQvwMjwgq8KMrfJgAGgRiG5X4gVw=
Subject key identifier:   D3:44:BE:DB:1D:FB:F0:B7:BA:8F:38:9D:78:57:67:C7:57:70:ED:62
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Certificate issuer:       /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial:       019DCF74C6437275F33809C6E6BDB03D7182
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
Manifest number:          16FB
Signing time:             Mon 27 Apr 2026 15:00:29 +0000
Manifest this update:     Mon 27 Apr 2026 15:00:29 +0000
Manifest next update:     Tue 28 Apr 2026 15:00:29 +0000
Files and hashes:         1: R-q6ieQ5ZRpyZAS3VuKsjP1lbqI.roa (hash: LE0wpmfemoMC71Up9yLLrAR45HiWA1m8U6namnoo6+E=)
                          2: RoC9yHrjkOJ0GiednXz9KzpBgEI.roa (hash: kugJughWaN4KyRcT9vU8DskQM03Ay2SChRmN27jdndQ=)
                          3: Uj9qErLJ7z3sRt5hNWIVbAoCTJU.roa (hash: XmHbyEYbwLMwHEMXeqgjX8MuDffCoDklGaGBFZdSn00=)
                          4: u_BnVwDhAa2ItOuzTxp9mi3OVGk.roa (hash: DT0/HarFisk4IStUU9LzkErJGL5WNt4QSQVHnd5C+vo=)
                          5: upv2bkah2kmcgwzii9vlsV1YYx0.roa (hash: DdoCoWJ4MAXwMUb9LrgBORU0OoZ8wqZEHBq3WjBn6lw=)
                          6: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl (hash: +wmEwaduRdRIWZui/Mok/7DEiumkB4twAh9qL+Z3SHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 15:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:74:c6:43:72:75:f3:38:09:c6:e6:bd:b0:3d:71:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
        Validity
            Not Before: Apr 27 15:00:29 2026 GMT
            Not After : Apr 28 15:00:29 2026 GMT
        Subject: CN=d344bedb1dfbf0b7ba8f389d785767c75770ed62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d8:0e:e3:dc:7c:48:b1:b5:d8:8f:2e:a6:98:
                    90:51:0a:26:ae:36:7d:6f:35:07:12:39:1d:c4:9a:
                    96:87:f7:0c:70:cf:f7:e4:9d:73:10:c1:6d:8e:17:
                    9f:8e:c4:f8:13:52:38:94:bc:0a:26:eb:d3:c8:e2:
                    63:87:e6:f4:fa:0b:49:e2:74:bf:16:f3:3e:f6:4c:
                    b8:7c:1d:1c:61:48:c9:17:b2:02:f1:2c:2a:db:70:
                    dc:2e:b9:f6:db:8a:1c:9c:53:14:77:a6:d5:55:59:
                    3b:15:22:95:58:ce:53:87:73:d8:86:ca:87:75:69:
                    45:35:fa:65:34:3f:30:99:8f:0b:2a:36:97:5f:82:
                    ce:05:7a:b4:1a:11:02:56:df:21:a5:24:0a:65:04:
                    b4:2c:d1:79:df:d6:a9:35:fb:fb:f1:c1:da:a5:19:
                    c2:fc:af:c2:1b:98:52:81:77:01:dd:49:b3:22:99:
                    1f:14:1b:82:29:d0:80:b8:90:09:ec:bb:da:6a:fc:
                    47:ae:27:e5:94:45:fb:75:68:c7:c8:4b:27:4e:44:
                    4a:b3:b6:f3:d4:e7:9c:66:d9:37:6d:2a:04:90:bc:
                    4b:3b:f1:bd:be:6d:44:bc:84:55:aa:90:cf:77:aa:
                    2c:55:d7:6d:82:14:b8:4b:39:87:e0:4d:dd:50:51:
                    44:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:44:BE:DB:1D:FB:F0:B7:BA:8F:38:9D:78:57:67:C7:57:70:ED:62
            X509v3 Authority Key Identifier:
                keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:b7:36:73:88:04:e4:61:53:9f:b7:8d:aa:91:ca:2e:29:ac:
         89:70:86:7b:4b:57:d0:5b:54:55:27:61:f1:8e:7b:65:75:4a:
         aa:42:d5:5d:e9:90:c7:fb:34:35:57:6a:78:9d:90:f8:46:c6:
         40:b5:c1:4d:46:8e:cf:50:0a:96:63:a4:02:86:1c:ba:1c:db:
         f1:5b:54:b4:c7:ff:0e:7e:7f:ff:dc:11:c4:70:7c:c2:b5:da:
         6f:2e:6a:5c:ed:fd:5c:8e:c1:38:18:48:51:4d:be:d7:fb:a9:
         b1:e9:b9:a2:e6:14:b2:02:12:7e:f1:65:55:d9:b2:05:9c:37:
         4c:1c:fc:e0:53:fd:9b:45:f5:c3:9d:a7:aa:65:42:04:97:61:
         a2:52:2a:ad:ef:ca:08:c0:c4:f7:3b:af:61:6e:96:73:2a:5b:
         06:70:0e:f2:a0:4d:b2:8f:b7:57:e8:95:a1:f6:d2:6c:0b:34:
         92:eb:ab:da:e5:53:e3:2c:cf:36:35:8f:8d:85:b9:2a:58:d4:
         44:22:8c:3d:26:55:d7:ef:d1:b4:61:ac:10:b0:54:be:53:3f:
         12:d7:71:5a:0c:53:19:15:18:57:7b:e7:f5:07:47:37:ef:cc:
         19:ed:07:db:2e:a0:ea:ac:06:c4:ba:82:11:3b:b2:65:82:b6:
         7a:45:a6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:53:19 2026 by rpki-client