Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
File:                     SoCVkn7lfM7iVqpDnxY2hrWMVww.mft (raw, json)
Hash identifier:          Hhsa+zE9XbwEz3o9DQDTBW/GtVkkAPqBM58EVLfvegw=
Subject key identifier:   F7:6E:1B:5D:9C:52:11:E5:B3:58:9F:54:49:7E:1D:45:20:63:EA:44
Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Certificate issuer:       /CN=4a8095927ee57ccee256aa439f163686b58c570c
Certificate serial:       019DB27D24C4D72A0456D4EA9E777CB54198
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
Manifest number:          18CC
Signing time:             Wed 22 Apr 2026 00:00:39 +0000
Manifest this update:     Wed 22 Apr 2026 00:00:39 +0000
Manifest next update:     Thu 23 Apr 2026 00:00:39 +0000
Files and hashes:         1: SoCVkn7lfM7iVqpDnxY2hrWMVww.crl (hash: mYbgjoGlUHHmHcP9xzioXkLte8ad9qhUtWTpUEerMkA=)
                          2: pth9nCfBOVCefSZjAlug7noCoiE.roa (hash: KUjSylzqEOQCJFtk+as86jaCnLWzKEeHrEArRWzUT98=)
                          3: ukI_HPYNJmvBtX0I8YnAqCqHIKc.roa (hash: V4VFe3RvbqJ8JaD1mJXWX5JH1StQafZpQ0cqoqd+N6E=)
                          4: z8VOUiSLPVMno5KoGBbOODeDDys.roa (hash: ReCSqOhvRxYoHh6okc3nEFEolgVxGfoS2RfPgFeXDJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b2:7d:24:c4:d7:2a:04:56:d4:ea:9e:77:7c:b5:41:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c
        Validity
            Not Before: Apr 22 00:00:39 2026 GMT
            Not After : Apr 23 00:00:39 2026 GMT
        Subject: CN=f76e1b5d9c5211e5b3589f54497e1d452063ea44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d9:c1:fd:c9:d0:74:00:8b:ce:55:d0:e9:59:
                    68:88:c5:cd:d8:9e:85:0a:79:5e:b3:42:04:40:79:
                    8c:3d:fd:0e:e5:70:24:f5:52:ce:95:fb:32:c2:91:
                    93:2b:b6:1a:e3:01:d2:06:e1:83:91:2f:d4:69:6a:
                    06:b1:cd:8f:19:77:56:fb:89:84:59:3a:b0:aa:4a:
                    98:ae:39:8c:d5:42:d5:b2:5c:d0:a4:63:76:6a:28:
                    01:8a:75:1d:82:9b:1d:1c:75:a5:10:b6:12:b3:0f:
                    86:d1:a0:4e:91:00:29:ba:96:35:2e:9a:54:25:72:
                    5c:13:aa:7c:87:22:97:b8:98:c6:36:5d:40:b0:ea:
                    46:b6:02:d7:b1:a1:a0:9b:d0:fd:b6:0f:f1:90:a0:
                    28:65:d3:a8:d1:21:d4:f9:ba:c3:6b:17:00:fe:37:
                    a2:fd:70:fc:99:ab:0e:e7:39:c0:87:5a:59:94:4b:
                    34:98:0c:d6:d1:24:93:57:4d:7e:55:06:88:8b:26:
                    fb:8c:83:fb:67:9b:f7:5a:4a:b7:20:30:9b:c3:5a:
                    42:8a:96:e4:11:af:46:5d:74:74:29:54:a1:11:cb:
                    30:c7:03:9d:b3:c4:02:f7:5d:d4:50:58:f5:1d:d5:
                    a6:70:b4:d4:8b:42:3a:59:ae:7a:b0:4e:22:cd:82:
                    00:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6E:1B:5D:9C:52:11:E5:B3:58:9F:54:49:7E:1D:45:20:63:EA:44
            X509v3 Authority Key Identifier:
                keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8b:40:0d:17:3c:dd:99:77:7f:c3:21:f6:0d:5f:01:55:30:
         e1:25:87:42:a2:1c:05:4e:c4:9c:fe:e9:46:b4:2c:b9:20:48:
         75:55:9d:17:ba:e8:2b:13:04:ed:c6:76:d9:8c:4e:03:a4:cb:
         c3:22:e8:03:db:2a:c6:3d:a6:60:f3:2d:48:23:8f:51:79:0e:
         db:3a:ba:d9:47:56:d0:cd:94:96:b1:c3:39:ce:bb:7f:e0:4e:
         8e:17:ce:2f:64:dc:ba:92:f5:e1:c9:f2:dc:1d:59:c7:be:36:
         2b:16:4c:30:a7:59:e2:0f:3c:76:89:5c:e7:e9:d8:5f:87:2a:
         f3:f9:00:c7:fe:69:1d:a6:8f:0e:7f:01:af:a1:1f:ae:bc:4a:
         5f:84:4e:41:71:32:a5:26:f0:4d:d0:c0:bf:ba:3e:b5:af:e6:
         62:b7:bf:1d:4e:4c:90:ca:a9:ac:94:7d:05:aa:01:7d:aa:b5:
         d2:1f:2a:b3:df:79:d1:2d:33:42:aa:86:f2:75:be:4b:d5:8d:
         ad:bb:08:d7:3a:92:42:04:71:93:55:c4:38:2e:2e:c6:e0:ae:
         6b:79:4c:06:cf:68:b1:73:bf:33:4c:d6:d0:6e:54:78:0c:38:
         1c:19:fb:ee:10:29:50:cb:25:f3:9b:d3:58:af:56:4d:10:48:
         6f:c1:17:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 11:28:58 2026 by rpki-client