Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
File:                     osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft (raw, json)
Hash identifier:          gzxSYfBqtET2Va3XrEDSvjOL7f8fyF8HAEfVl1XZsQM=
Subject key identifier:   93:63:3D:9C:3E:36:BF:E3:DA:7F:02:23:9E:72:F4:04:49:5F:7A:7C
Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
Certificate issuer:       /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Certificate serial:       019D9BF5B6450205DA3E375D615121F6BF76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
Manifest number:          18C6
Signing time:             Fri 17 Apr 2026 15:01:04 +0000
Manifest this update:     Fri 17 Apr 2026 15:01:04 +0000
Manifest next update:     Sat 18 Apr 2026 15:01:04 +0000
Files and hashes:         1: 6pgIGLkDK4SsPvd5O6nkCW0Aieg.roa (hash: e5J3SLEEVC0bCn42X4/k+intNwPoXVhopRIC0Xq8ZiQ=)
                          2: osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl (hash: iqnhpLImTnLm62JZ4Ne4V2MtqO2QGNW1dBpSdQKxWBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:b6:45:02:05:da:3e:37:5d:61:51:21:f6:bf:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
        Validity
            Not Before: Apr 17 15:01:04 2026 GMT
            Not After : Apr 18 15:01:04 2026 GMT
        Subject: CN=93633d9c3e36bfe3da7f02239e72f404495f7a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ea:8c:f8:dc:e7:bc:5b:fb:1f:dd:3a:9b:e8:
                    e4:98:4b:ad:dd:6e:10:47:33:6f:43:64:44:b6:29:
                    fc:50:6b:48:98:5f:8d:e6:f6:ec:1e:03:c7:fd:63:
                    a8:78:8f:a6:31:d8:1f:dd:19:b2:88:35:dd:25:60:
                    e2:d7:c6:cb:6e:7a:34:9c:bf:10:dd:4a:5b:08:b1:
                    38:ac:5c:6f:25:9b:41:e7:f2:8a:c9:f0:36:9a:8f:
                    ef:75:61:39:8a:5e:34:88:80:ee:ca:d7:d4:fa:6d:
                    82:99:3b:b7:66:15:89:ae:5f:83:0f:b7:d7:ae:83:
                    fd:f5:4e:57:96:41:53:5e:16:ab:ff:a8:d9:26:12:
                    cc:7d:81:db:a1:7c:ff:f9:93:3b:d1:d8:bc:33:c1:
                    37:29:72:6d:c6:06:b5:bc:bd:04:4b:8b:dd:68:8d:
                    02:f2:db:5a:52:9e:6d:3b:9f:a1:c7:03:a2:51:84:
                    a6:b9:3e:9e:1d:54:a5:5d:63:9b:4d:72:9d:1c:6e:
                    fc:55:00:87:55:c4:99:0f:a4:8c:13:3c:7b:c5:ef:
                    5d:90:11:03:ee:1a:4e:13:f3:4d:47:0a:4d:b4:24:
                    dc:1a:a8:9f:fc:e5:c9:b8:11:c9:59:f2:5b:40:10:
                    22:3d:8e:b4:10:40:fa:03:85:33:8b:56:10:ab:1e:
                    bf:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:63:3D:9C:3E:36:BF:E3:DA:7F:02:23:9E:72:F4:04:49:5F:7A:7C
            X509v3 Authority Key Identifier:
                keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:d5:d9:ca:79:ef:46:62:0c:92:79:06:d2:85:6c:53:8c:6b:
         73:2a:03:77:ba:b1:1a:ca:89:72:3d:b7:af:2c:ae:84:a0:97:
         87:6c:35:e5:28:6d:59:ee:61:51:c1:64:59:f2:af:4f:d7:f1:
         53:31:ca:51:2c:da:91:56:53:3e:f3:07:d0:e4:5f:89:f4:72:
         c4:5f:3e:59:54:d2:8c:68:37:73:ef:69:1d:4e:17:22:fd:13:
         9f:1d:87:90:3e:ff:14:34:94:a1:a7:ef:c0:50:60:af:5e:23:
         df:46:e2:77:7b:c7:c9:79:28:d4:57:c5:91:20:a5:1b:8b:c0:
         7a:46:81:78:58:2b:1d:4c:f0:34:64:7f:8d:f0:e4:8a:4a:a4:
         17:34:44:8b:13:2c:50:80:99:77:72:a4:92:6e:91:cc:9d:68:
         1c:f3:fb:95:e2:a3:02:77:19:3c:24:75:48:72:90:80:e6:76:
         ff:a9:a7:70:0f:a1:b3:15:cb:1c:91:28:51:d4:e3:79:71:9b:
         76:33:0d:54:25:64:05:e3:03:89:bf:6e:69:06:2d:af:de:f6:
         3f:59:02:2f:94:0f:33:97:c2:b5:b5:2f:d7:89:87:b1:c1:ff:
         9c:75:0c:a2:16:41:1c:ee:3e:81:2b:73:64:f5:00:83:98:fa:
         06:f6:cf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:44:44 2026 by rpki-client