Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
File:                     lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft (raw, json)
Hash identifier:          nPx0v+OzGfu4HjKYV5DMqYkKyELCWQ8zy78zleQt9jA=
Subject key identifier:   F3:BD:FD:B0:E6:75:BC:74:2A:F7:46:E9:1C:0B:A1:74:4F:CD:57:32
Authority key identifier: 95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
Certificate issuer:       /CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Certificate serial:       019D9B87FF4C4C6D7660C1CF3EA8A1E9A52E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
Manifest number:          05A4
Signing time:             Fri 17 Apr 2026 13:01:14 +0000
Manifest this update:     Fri 17 Apr 2026 13:01:14 +0000
Manifest next update:     Sat 18 Apr 2026 13:01:14 +0000
Files and hashes:         1: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl (hash: SRSR3UmfjadxJEd8x9mN09lXsMD7D48tflJnVPebMZA=)
                          2: ubtmDBZWL-_XbVApVZixkkSYAus.roa (hash: ur+VLKLd0ko7liueH3AQXPuJrl5bo0viE+tYtSib7Kc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 13:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:ff:4c:4c:6d:76:60:c1:cf:3e:a8:a1:e9:a5:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
        Validity
            Not Before: Apr 17 13:01:14 2026 GMT
            Not After : Apr 18 13:01:14 2026 GMT
        Subject: CN=f3bdfdb0e675bc742af746e91c0ba1744fcd5732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:cf:c1:69:45:6d:c8:c5:03:42:68:6b:1d:
                    5e:11:9f:95:55:86:40:b3:c6:08:7c:65:44:96:96:
                    0e:fd:95:56:f2:bf:7e:be:e5:f0:20:73:1b:86:f7:
                    09:6a:17:82:75:90:d5:7e:f3:f4:61:70:39:ea:f5:
                    31:75:72:4b:ba:f0:c0:ef:21:91:8b:b7:99:f4:cf:
                    a9:75:f0:66:54:2c:67:85:a2:53:9a:47:e1:eb:46:
                    0c:28:49:7f:dc:e5:c0:2c:89:dc:86:16:36:a0:a2:
                    66:ee:f8:14:1f:62:09:b4:25:28:80:24:dd:b5:ed:
                    a5:c1:f2:a6:41:ee:54:c0:1f:5a:27:66:bd:5b:e5:
                    3e:b9:e6:75:cd:e4:30:11:67:02:9b:21:e2:16:d2:
                    27:e0:3f:1e:56:bf:6f:15:73:ec:b0:b3:7b:8e:23:
                    07:da:b2:75:11:d4:c1:a5:d3:1a:6e:f6:1b:f6:62:
                    c4:a2:a5:39:8e:03:27:45:f0:e4:d5:37:93:d2:f5:
                    e4:ca:35:20:8f:1e:3e:70:21:e0:4e:1f:ab:59:aa:
                    57:94:67:c4:c1:42:aa:a9:71:e6:6c:45:34:a6:3a:
                    a5:15:a1:aa:43:aa:30:47:af:ca:72:a0:f8:83:0c:
                    df:50:5b:ed:a5:01:95:4a:f4:0e:20:ac:9e:90:06:
                    99:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BD:FD:B0:E6:75:BC:74:2A:F7:46:E9:1C:0B:A1:74:4F:CD:57:32
            X509v3 Authority Key Identifier:
                keyid:95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ca:40:ba:ab:36:c4:38:aa:88:75:76:16:54:3e:44:06:a7:
         cc:c7:47:87:39:3d:53:7b:d0:31:99:03:82:d6:4e:95:90:36:
         d2:33:19:39:3c:c6:9e:bb:fe:43:c7:7e:8a:99:77:1a:be:6a:
         6a:4a:4a:0d:2b:c0:f9:88:94:c7:9a:6c:ae:e2:23:7b:96:bb:
         7a:cc:1f:d3:f6:90:60:de:cd:8d:8f:7f:75:4e:05:09:88:81:
         b9:90:ed:49:da:24:fb:b5:78:3c:38:e3:bd:18:1c:61:23:69:
         79:42:47:ae:9e:55:2c:5e:58:74:df:ba:1b:f8:79:d3:27:8a:
         45:66:13:6b:29:f1:b4:e6:5d:53:b9:22:3d:82:4f:07:b5:2b:
         b0:45:47:a2:8b:61:a6:85:de:4e:e3:d6:f3:65:31:1d:a6:26:
         86:76:60:45:af:29:38:7a:71:36:de:f3:2b:94:f6:5e:6a:a8:
         d2:05:bf:98:48:be:0c:96:b4:c5:c0:32:ae:2c:b7:2d:ab:55:
         27:8b:fb:39:1a:f7:34:75:b9:aa:8b:61:0f:de:a4:62:75:f7:
         3e:3d:40:f3:ed:07:00:ab:8c:33:ac:d4:c9:a9:25:e4:8f:35:
         34:ce:8d:27:93:2f:8e:7f:4c:66:49:8c:44:46:3b:0c:b1:e5:
         6f:f2:e2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:16:22 2026 by rpki-client