Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
File:                     imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft (raw, json)
Hash identifier:          R6OaOeVR9qidstqT+kQukpCikBDIQOXGejK1dRSX5BY=
Subject key identifier:   2E:97:4E:6A:0E:97:4A:DA:80:24:D0:1E:61:F7:19:E4:21:F6:0C:66
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Certificate issuer:       /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial:       019D99628AF39F980140A0AA96F8F8030F9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
Manifest number:          18E4
Signing time:             Fri 17 Apr 2026 03:01:05 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:05 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:05 +0000
Files and hashes:         1: LpI3PyYDEsil-gJ9EybHYHEQzSw.roa (hash: Bj0/Slyl4mS0qWkcQjxpCqfI9YGYFKmWx9MPsOE7/Uk=)
                          2: imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl (hash: kLfEESWYbQXje7LgploAezgKCoUYV9vZaRUChA87ups=)
                          3: wP0JXiaPHK1PWypoONdu1P4k-xY.roa (hash: hOHj+bHUfpcBNhAym5OZKL6pfElusgMVxMa3fRinXoc=)
                          4: zbPHBRrSSTxxm5GjBesQOmg5BOU.roa (hash: 2nuGIy4NdEBraXqbAUjxFu75DMqgnt0PJMHdEvGwETc=)
                          5: znypVRB8HdELH7t-EZvR2o9mzZ0.roa (hash: VtWRBjrQreIxKps4k8DyQN35GM7QKv0koJ0vJoZMRsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:8a:f3:9f:98:01:40:a0:aa:96:f8:f8:03:0f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
        Validity
            Not Before: Apr 17 03:01:05 2026 GMT
            Not After : Apr 18 03:01:05 2026 GMT
        Subject: CN=2e974e6a0e974ada8024d01e61f719e421f60c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:40:74:7a:0c:45:a3:11:29:6a:ed:e7:a1:86:
                    e0:9e:4a:ef:81:0e:cc:86:aa:be:8e:63:25:2d:fc:
                    69:12:03:d7:3f:6d:e7:ca:29:a2:83:6d:d1:57:a4:
                    4c:46:21:18:75:18:2b:ee:77:e1:ae:8a:4f:ae:16:
                    71:ff:5c:e6:d6:57:d3:e8:3b:95:4d:1e:b2:12:72:
                    30:9d:bc:a5:15:d1:eb:92:21:f2:a4:41:71:5a:49:
                    9e:2a:3d:0f:e3:e3:c7:89:15:9b:0f:6f:b2:aa:d8:
                    de:29:79:82:f3:39:2c:2c:9c:01:96:65:90:b1:1c:
                    a9:00:ed:be:8c:51:f9:89:7c:a2:62:ba:6c:36:eb:
                    6b:63:a8:7e:96:9b:76:57:37:f4:af:c3:75:20:1a:
                    84:2c:17:18:47:9e:ba:ae:94:65:60:4f:bc:74:19:
                    2e:d2:25:86:75:f4:f5:b0:44:14:51:4e:d1:ec:3a:
                    ed:74:cc:de:2e:99:97:96:4c:fd:57:fc:f0:6d:e2:
                    10:fc:84:69:f2:79:32:09:76:9f:5a:b6:c0:85:bf:
                    19:ba:29:c1:21:a9:8a:1e:23:fa:5c:25:c1:f3:0a:
                    13:8b:33:cf:c6:08:ab:94:9a:49:d9:f9:cd:a1:56:
                    a8:0f:f3:ab:b0:24:98:ba:2c:ed:b3:4f:a2:d4:e6:
                    8a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:97:4E:6A:0E:97:4A:DA:80:24:D0:1E:61:F7:19:E4:21:F6:0C:66
            X509v3 Authority Key Identifier:
                keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:10:eb:a1:5f:57:9f:86:60:e8:0e:07:3f:d5:6b:df:49:25:
         1d:be:12:ed:48:c0:b1:10:e7:fc:f6:a3:99:dd:63:9e:a3:a7:
         42:46:30:02:d9:59:a7:c9:f1:b1:7c:1d:14:6c:55:38:ef:ad:
         12:4e:1f:a2:4d:81:e1:88:d8:bb:f5:d0:cd:63:5e:42:6d:89:
         c8:da:29:ec:13:a2:f4:5d:31:07:ed:5b:87:a3:c4:24:09:86:
         a5:ed:c6:cb:8d:c0:86:28:3f:93:0c:ce:63:e3:8d:ed:0e:15:
         2a:8a:22:8a:6a:e6:76:34:f2:c8:7d:52:84:2d:4d:6b:f2:58:
         38:cd:98:8e:96:3f:5f:a8:02:bc:5e:9b:d1:99:f9:55:7c:61:
         da:1c:ce:e4:4e:d3:a5:46:5a:97:0e:08:5e:44:a8:50:44:fa:
         71:70:e6:91:bc:dd:35:62:37:0f:0f:95:e9:30:43:1d:46:6e:
         ce:c9:b3:70:37:31:22:4f:92:84:d2:9e:4e:97:4f:6d:97:24:
         c0:1c:b8:c3:00:dc:e9:49:13:dc:14:2b:48:34:ba:d1:38:1a:
         3a:20:f9:72:e4:3b:31:09:1c:d8:b4:30:bb:f5:a6:2d:ff:8d:
         ea:b3:dc:41:61:01:39:7e:14:d9:a7:54:5f:67:6f:87:81:82:
         9e:0d:e3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:07:43 2026 by rpki-client