Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
File:                     N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft (raw, json)
Hash identifier:          IfAGAj1CNjQdeL2LW8gXIjA8j5ScfSHkEIV2RXP8z6w=
Subject key identifier:   DE:22:93:56:55:86:50:AD:D3:52:D9:0B:F0:F4:6E:29:0F:DD:E8:72
Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
Certificate issuer:       /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Certificate serial:       019D99D04CA4BAD991D15FB9AD2AF6453F23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
Manifest number:          18C6
Signing time:             Fri 17 Apr 2026 05:00:58 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:58 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:58 +0000
Files and hashes:         1: 2a6CDxxUrQGBmDt9bRl1JF_nyvc.roa (hash: ZSsnNRN6qb6nlLwR6tJUMByyx0s8BQTn0qVgNGvcWZc=)
                          2: N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl (hash: xc+bWi1Qukn2N5RySswHRQxlvGwHLkckd+Tc5MkDT7Q=)
                          3: Ol3Cdb1XyRY6urO3sw4yVDwme94.roa (hash: tfUvfQzgGXJJiO1C8x+8AL672Tfl8NCYZs94wHKASfw=)
                          4: fJoKECLKUeD5DLyAzQSfUcqojno.roa (hash: 3zNqg/msTStClL6VJhx0R8PHg/rjNiAgrUFnWqVj+Y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:4c:a4:ba:d9:91:d1:5f:b9:ad:2a:f6:45:3f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
        Validity
            Not Before: Apr 17 05:00:58 2026 GMT
            Not After : Apr 18 05:00:58 2026 GMT
        Subject: CN=de229356558650add352d90bf0f46e290fdde872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f4:eb:2f:78:13:50:19:52:8f:2f:7f:e0:90:
                    08:89:5d:1d:0a:f0:9f:ae:91:07:86:5a:ff:a0:de:
                    21:26:b7:7f:04:57:3d:6e:1d:ca:29:12:fc:86:45:
                    f8:ab:60:f8:9a:95:7e:ba:9c:81:21:d6:a5:5b:ad:
                    ec:07:2d:3b:34:03:80:d5:f1:65:72:d8:ae:ac:0c:
                    0e:b9:c3:1b:2d:34:0c:c6:11:64:70:b1:ee:76:87:
                    3a:e6:3a:b8:75:d3:63:76:43:d8:5c:9f:50:70:27:
                    fe:77:af:0d:12:1d:bd:b1:7b:b7:b7:0d:56:c3:b9:
                    1d:56:a6:7b:1e:c9:01:0b:a2:1e:0a:2c:05:19:cf:
                    7e:78:b3:56:91:3b:27:60:e9:c7:09:ce:ab:49:37:
                    99:f4:cf:3f:ad:8f:9f:bd:04:b8:ca:9b:de:7b:81:
                    1d:0e:12:62:59:12:c0:ab:cd:aa:d8:8e:b8:30:e7:
                    63:aa:d9:f4:be:18:0e:c8:da:1d:8b:8e:36:16:c3:
                    16:ee:24:d3:a7:35:ec:d4:11:59:84:ed:b4:fa:40:
                    23:d5:ab:1b:96:8e:4b:07:92:8d:6c:dc:c3:85:86:
                    ab:83:2e:49:23:01:0d:7a:62:96:2d:52:85:14:61:
                    44:98:80:6e:74:79:3a:2c:17:44:bf:7e:01:95:85:
                    c3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:22:93:56:55:86:50:AD:D3:52:D9:0B:F0:F4:6E:29:0F:DD:E8:72
            X509v3 Authority Key Identifier:
                keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:05:ff:74:87:ec:48:ab:07:05:29:93:2e:c3:1d:64:aa:84:
         79:fe:8b:33:6f:3a:7e:1a:d3:39:fe:57:07:6a:ec:6a:20:5b:
         84:cd:cd:67:74:68:d2:ac:da:a6:4e:14:05:75:22:eb:7b:52:
         0f:b2:67:d1:49:88:c7:0b:84:80:44:0d:df:55:80:c0:da:37:
         03:68:a2:df:62:72:bb:97:5e:4c:f9:a5:86:d2:2d:6f:10:ff:
         76:d4:c5:26:fa:f8:c7:1c:f5:a5:24:db:c3:58:46:80:7a:7e:
         63:55:38:ac:d8:42:10:fb:c9:2e:b1:9b:7c:4d:d3:ee:74:3f:
         07:16:af:a3:67:5e:53:d6:61:52:ca:8c:a7:ea:e5:d2:15:b4:
         dc:91:b5:08:32:d6:b9:73:de:61:c6:52:7f:3b:bb:aa:35:e2:
         7b:1f:91:d1:ce:3d:ed:04:ac:f8:fb:83:aa:ba:07:c1:42:5e:
         f7:2c:a0:d5:13:e6:4c:0a:ef:5e:40:fd:a8:c5:d2:d2:4a:e6:
         8a:4a:35:db:81:bd:4d:8d:80:da:61:d8:04:b6:f4:9f:57:0a:
         4d:1b:ae:ec:5f:84:ef:af:73:d2:23:64:6f:a4:6a:45:65:41:
         10:71:8e:9e:d5:ce:e7:1d:13:c4:a8:23:7e:df:eb:f4:20:71:
         1a:35:96:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:39:17 2026 by rpki-client