Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
File:                     sZtkf-ChCzQAqQP68utko8WP6wc.mft (raw, json)
Hash identifier:          sGhd/JUqX7OlDrG/PcqtFVyZyvBSiEBchGeUGXQYu+s=
Subject key identifier:   F9:29:48:14:62:49:79:39:21:AA:36:91:61:E4:6C:77:A3:5E:03:8C
Authority key identifier: B1:9B:64:7F:E0:A1:0B:34:00:A9:03:FA:F2:EB:64:A3:C5:8F:EB:07
Certificate issuer:       /CN=b19b647fe0a10b3400a903faf2eb64a3c58feb07
Certificate serial:       019DDE0CAAF668B6498D951B2BE3009A55CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
Manifest number:          82
Signing time:             Thu 30 Apr 2026 11:01:05 +0000
Manifest this update:     Thu 30 Apr 2026 11:01:05 +0000
Manifest next update:     Fri 01 May 2026 11:01:05 +0000
Files and hashes:         1: NS0OG_158yBgKw1hv5HZLbP9gNU.roa (hash: hWWft4kE5qapcxE+YsKdnh8JxcvLJHffpGfQiJ+unY4=)
                          2: WLZwejPiTsGj3L9WWmyBlMUa03Q.asa (hash: NvnlIzfI7uEtt14QTA2ioVybslPnmkhw44zqG8hYsrI=)
                          3: _iJFcG2sgekOOkyWmNE601znn2c.roa (hash: tJKrcJXxI5249vfDepqcTcwbwny+qpaz1JP2S0AoM0g=)
                          4: sZtkf-ChCzQAqQP68utko8WP6wc.crl (hash: HbbGU1wrLX/CP25VHSCZE4hSnwFFQ7af43FhdE658Bk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:de:0c:aa:f6:68:b6:49:8d:95:1b:2b:e3:00:9a:55:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b19b647fe0a10b3400a903faf2eb64a3c58feb07
        Validity
            Not Before: Apr 30 11:01:05 2026 GMT
            Not After : May  1 11:01:05 2026 GMT
        Subject: CN=f92948146249793921aa369161e46c77a35e038c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f8:be:b9:dd:b9:98:4e:09:58:a8:f8:52:c5:
                    47:a3:13:34:6e:a1:5b:2b:2c:d0:60:26:c2:f8:42:
                    15:f5:1e:d8:89:9d:6e:b7:64:b0:56:c0:de:58:31:
                    3b:38:9c:c2:15:a6:06:b8:71:80:c6:83:d9:18:41:
                    34:70:e3:b2:dc:20:10:57:a7:66:95:d6:32:41:91:
                    12:fd:6a:0f:be:22:58:a2:37:56:cb:c8:20:f7:0a:
                    5f:b0:55:74:ce:85:0e:ea:12:e6:a1:87:3a:14:ae:
                    98:b2:b9:20:d0:bf:bb:b6:6e:2e:08:48:3c:ed:a5:
                    6f:ec:41:0f:a6:cf:fe:8b:57:04:66:0f:71:de:2a:
                    6b:f0:f4:c8:90:67:68:00:d4:55:81:cf:66:29:af:
                    c6:50:e2:93:c9:3b:fd:23:84:0f:46:61:63:14:be:
                    fc:7e:1f:df:22:55:c3:11:86:07:b0:ed:f3:35:89:
                    a8:b4:d7:9e:02:3d:1f:df:43:93:93:bf:e8:42:44:
                    44:cf:dd:f9:74:22:2c:f0:d9:bd:e1:9d:9a:3f:90:
                    b6:0d:a0:7f:58:73:01:03:38:69:03:eb:bc:6e:71:
                    50:f6:19:01:61:a1:89:97:fb:5e:57:32:90:16:0f:
                    50:66:00:b8:50:eb:8e:07:2d:33:bc:42:7a:62:65:
                    03:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:29:48:14:62:49:79:39:21:AA:36:91:61:E4:6C:77:A3:5E:03:8C
            X509v3 Authority Key Identifier:
                keyid:B1:9B:64:7F:E0:A1:0B:34:00:A9:03:FA:F2:EB:64:A3:C5:8F:EB:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b8:78:f7:9c:d5:78:ea:cb:be:63:77:f4:99:9c:9e:b5:b1:
         3e:04:98:91:5d:26:96:fb:d9:75:3a:da:41:17:c9:f3:04:ab:
         4c:28:41:a9:0f:01:fd:82:95:f7:4b:f2:a4:11:da:b8:e8:da:
         05:c0:c9:86:57:42:43:a5:65:a9:87:2a:96:f3:6e:ac:08:24:
         eb:44:5a:e1:74:85:71:59:c1:a9:fe:4d:a2:6a:73:45:be:58:
         42:bd:33:81:79:b9:53:11:2b:c5:02:9c:6d:33:04:9a:88:8c:
         ca:8f:a3:d9:1d:ec:8f:b8:f0:4d:93:b4:ab:89:f7:e4:12:97:
         c3:20:4e:c8:07:71:a7:5e:f3:ab:04:a4:7b:71:e4:6c:d9:da:
         9f:dc:a6:60:4b:b2:19:30:bc:6c:f7:ca:b2:07:61:58:ca:f4:
         2a:ef:2d:57:55:89:32:62:76:f1:9c:4a:52:bd:70:a0:d3:cc:
         7d:2e:e0:df:43:e3:ec:de:db:d1:f0:6b:20:69:26:c6:ab:3b:
         17:41:f0:12:6f:8d:0e:fe:7e:85:be:7e:37:60:d2:a2:4a:25:
         a7:c4:9b:05:02:98:c0:91:2c:cc:69:d3:3c:05:2e:36:0f:1b:
         fb:a9:a6:33:8d:3f:05:b5:13:77:2f:db:43:78:0a:44:35:8f:
         d3:b4:9b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:48:11 2026 by rpki-client