Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
File:                     imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft (raw, json)
Hash identifier:          YLN8pp/J0R1noc+liLfnTRCkKk59hMy/droeB+0zLwc=
Subject key identifier:   3A:9A:0A:1A:3D:4D:4B:24:FA:76:93:91:38:EE:21:2B:37:BC:2D:5D
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Certificate issuer:       /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial:       019D9B5149539A83DA5568CCB02FF373D3C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
Manifest number:          18E5
Signing time:             Fri 17 Apr 2026 12:01:28 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:28 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:28 +0000
Files and hashes:         1: LpI3PyYDEsil-gJ9EybHYHEQzSw.roa (hash: Bj0/Slyl4mS0qWkcQjxpCqfI9YGYFKmWx9MPsOE7/Uk=)
                          2: imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl (hash: 4Ydunr6mscIlAMfbqDkSdX5rBbFel9Gk/92FzCGEDFA=)
                          3: wP0JXiaPHK1PWypoONdu1P4k-xY.roa (hash: hOHj+bHUfpcBNhAym5OZKL6pfElusgMVxMa3fRinXoc=)
                          4: zbPHBRrSSTxxm5GjBesQOmg5BOU.roa (hash: 2nuGIy4NdEBraXqbAUjxFu75DMqgnt0PJMHdEvGwETc=)
                          5: znypVRB8HdELH7t-EZvR2o9mzZ0.roa (hash: VtWRBjrQreIxKps4k8DyQN35GM7QKv0koJ0vJoZMRsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:49:53:9a:83:da:55:68:cc:b0:2f:f3:73:d3:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
        Validity
            Not Before: Apr 17 12:01:28 2026 GMT
            Not After : Apr 18 12:01:28 2026 GMT
        Subject: CN=3a9a0a1a3d4d4b24fa76939138ee212b37bc2d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:22:b8:c7:83:58:ef:3b:77:e8:80:92:29:3f:
                    e1:3b:73:c4:77:8a:bc:b0:cd:29:ca:ba:3c:26:87:
                    1c:a3:03:31:be:48:16:4f:b9:5c:b5:62:2a:c3:17:
                    e7:02:45:08:b1:24:79:45:8b:ac:2a:58:50:5b:ec:
                    2e:83:28:3c:97:1a:7e:a7:29:00:9a:06:1a:9c:4f:
                    d6:57:c8:e0:a3:35:fa:cd:3d:d1:41:4b:2a:b3:2e:
                    00:50:1d:21:d8:a5:b2:c3:3f:2f:1d:84:b5:42:0c:
                    a3:b1:ee:94:2e:df:46:0d:8e:50:91:a8:69:6a:1e:
                    30:38:8b:34:2f:f9:71:e5:95:2e:6f:9b:69:b5:29:
                    f5:34:6f:7c:2f:3e:db:01:80:66:7d:a7:5a:95:da:
                    aa:5b:a3:01:c1:a8:af:68:67:53:69:42:ba:b3:77:
                    3f:f6:72:50:8e:d1:f6:51:86:08:46:ac:55:04:d7:
                    6e:c5:cb:c9:94:12:a8:9b:c0:4e:ee:18:97:af:7a:
                    50:86:d6:b0:53:99:7c:c8:6a:88:36:4b:59:cc:a2:
                    25:72:40:e3:4b:31:23:d9:1e:ac:61:5d:33:82:d1:
                    54:c9:e9:27:19:13:4b:24:45:21:8b:ba:6b:72:8c:
                    71:1e:fb:c2:e2:5c:52:f0:69:e5:f9:f3:ca:0d:66:
                    ef:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9A:0A:1A:3D:4D:4B:24:FA:76:93:91:38:EE:21:2B:37:BC:2D:5D
            X509v3 Authority Key Identifier:
                keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:fc:40:d8:f1:9f:ac:0a:cb:3d:ea:02:f4:42:b8:bc:92:58:
         67:97:b8:91:4c:0b:be:d8:4a:68:4e:6c:ce:4a:4c:a6:39:66:
         f0:0c:b3:bc:7f:5c:f6:0b:21:b4:42:86:e1:bf:b3:ea:c2:c0:
         e5:74:09:1b:e1:84:17:15:fe:6c:bc:38:1c:77:c2:ed:90:47:
         0e:42:04:5c:ed:14:7d:45:7d:41:5a:54:72:32:20:f0:75:f8:
         4a:1a:21:26:fc:97:9e:40:64:ed:e4:87:0d:88:b4:24:8a:ec:
         58:83:c5:ef:30:9d:24:f1:8c:f3:c3:e3:0a:fe:42:98:39:ea:
         a0:39:f3:72:a6:03:df:70:be:7f:04:5d:a5:bd:58:3f:f8:da:
         ad:ad:57:df:2d:a3:cd:bc:36:7f:e8:af:87:7b:7e:05:da:54:
         ea:91:50:d3:2d:fe:f0:88:5f:97:9b:5b:af:25:de:16:8d:17:
         dc:cd:f4:63:e2:c6:5b:43:f0:20:8c:b2:9a:d4:95:8e:23:42:
         93:93:91:4f:62:b4:0e:32:23:e1:39:6c:36:0f:d4:16:9a:fd:
         8e:a8:f7:18:c9:77:bb:91:38:7b:e9:21:68:dd:c1:df:ff:a0:
         b6:56:b5:8c:0d:8f:e9:aa:9d:84:57:76:f8:13:1f:a2:55:f1:
         33:1f:35:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:52:10 2026 by rpki-client