Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
File:                     ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json)
Hash identifier:          phbvJgXSTJzAlaSbTbruNBx9MKqqxxdU5vCs6ZNeJBQ=
Subject key identifier:   A9:1C:64:1E:A8:26:BA:25:3A:91:C0:FB:84:87:FF:D8:59:4F:9C:C2
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Certificate issuer:       /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial:       019D9C2C89EBF09BA33309C7CA7F47F84737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
Manifest number:          18C9
Signing time:             Fri 17 Apr 2026 16:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 16:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 16:00:57 +0000
Files and hashes:         1: CTL_XkMdcDz_-dbE2LKujOq_cPw.roa (hash: 0tP2+X0H7fwYa4FCqGt0jobEPqhB1skE7FCeOf0xvAQ=)
                          2: H65TgkcKS-a8hILxMZ_8VIGp_Q0.asa (hash: EHncor9xUQtHcVvs7d4fpQlv6e3PfXGs5zWe6/zrxDQ=)
                          3: Tgw2-QPBfHwWF5Mt4iaEfKWQTtM.roa (hash: EzrszZm8Tel+/kV3Hb11JBz6gi/eN1N+IU5w2IVFc9w=)
                          4: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: jkv+tayhicvpHp7kw4TgftFRI68bDDsQVcg1qI0L/kI=)
                          5: uqJ-WoJ0LMUzPyz6AyCWPdAMqaA.roa (hash: lX10IX/8pnEVBdXCqvOlS3MwC2z4PooE1DCcSVaJLYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2c:89:eb:f0:9b:a3:33:09:c7:ca:7f:47:f8:47:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
        Validity
            Not Before: Apr 17 16:00:57 2026 GMT
            Not After : Apr 18 16:00:57 2026 GMT
        Subject: CN=a91c641ea826ba253a91c0fb8487ffd8594f9cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bf:f5:b6:3e:b9:9d:e9:d8:e9:02:91:68:d1:
                    bf:f0:ef:73:0d:37:ad:69:89:4a:a5:b1:02:f3:47:
                    a6:62:d5:f8:6a:c0:bc:46:f6:88:de:2a:cc:94:7f:
                    c3:f2:a4:fc:5c:58:a2:19:b8:5d:a3:a3:1a:a0:26:
                    a7:cc:b7:c8:d3:cf:ff:ec:c5:ab:9f:bd:32:83:77:
                    98:72:d9:05:1e:59:75:78:5a:d6:08:4a:9c:91:44:
                    74:79:53:b7:6d:f7:1b:b1:72:19:a5:aa:10:d2:c9:
                    12:b3:db:2f:53:53:b2:88:63:84:48:b1:de:74:17:
                    9d:98:ac:1e:62:8c:6e:a9:ca:b9:90:0d:92:aa:a4:
                    20:b5:a0:63:63:72:ab:a3:8a:72:47:c2:61:f0:02:
                    df:07:4f:76:3a:47:9e:84:5b:28:11:5c:b0:b8:21:
                    ac:ab:1d:a3:13:82:0a:08:15:22:e0:80:88:f1:2c:
                    0c:3d:03:15:4b:90:76:96:dc:c3:5c:a7:33:e3:f7:
                    34:f3:fc:7b:03:23:98:08:35:5c:12:e3:06:24:f0:
                    fb:f3:9e:34:2a:21:6c:4f:11:45:63:78:ff:5d:0a:
                    aa:f9:fb:93:6a:ca:9a:36:c9:f7:1d:0a:78:ea:af:
                    e5:e5:dd:b4:1d:50:2f:b1:37:b7:55:6a:73:31:dc:
                    0c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1C:64:1E:A8:26:BA:25:3A:91:C0:FB:84:87:FF:D8:59:4F:9C:C2
            X509v3 Authority Key Identifier:
                keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:0c:5c:d8:23:ff:96:ec:3f:0b:77:57:a7:c0:3e:a4:0b:f7:
         a8:eb:94:e4:c5:99:26:9c:47:55:52:25:0d:c8:84:35:45:21:
         1f:e2:3d:02:2c:7c:d3:44:18:6b:4d:e6:4a:3e:92:9c:f9:27:
         a0:7e:0b:fd:c6:3a:db:f7:eb:b1:87:89:e4:ce:9d:45:9c:27:
         ef:ce:25:c9:06:eb:d0:13:d0:cc:1d:51:9f:9f:0f:02:4a:0b:
         c8:f0:17:ee:a9:2f:15:84:62:9a:21:5d:ac:b4:c3:f7:e3:76:
         66:87:fa:45:41:b4:fc:99:a1:53:59:67:3f:fd:63:fb:b0:b6:
         73:ea:78:8b:52:a1:32:be:7e:e5:21:65:e1:d5:c8:99:37:bb:
         49:44:d9:43:33:11:9b:27:6c:65:7c:36:22:41:68:9a:eb:a2:
         98:f4:b9:3c:59:82:3a:5a:61:6e:bc:d5:63:ae:c6:f3:33:74:
         db:1c:b8:be:50:1e:25:36:e1:c9:fa:7a:a1:29:bd:95:4c:17:
         31:9d:30:7a:b2:b2:2e:e8:af:5c:58:5f:69:3d:ee:f2:1b:e6:
         f0:6e:59:08:f0:fd:25:4e:66:9c:58:ee:57:25:a7:53:14:e8:
         7e:40:f4:50:21:cb:14:3e:64:7a:d7:8b:02:0d:4d:8e:65:0e:
         65:ba:88:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:09:50 2026 by rpki-client