Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
File:                     l_RnToI2vdw9IyegKwq_unmlSDw.mft (raw, json)
Hash identifier:          We+uwP7Vwm0eOUgELKoNSON5NugG/PzqTsQ5EP6zld8=
Subject key identifier:   CA:60:1A:F0:F3:40:52:77:2B:FF:88:07:CD:7C:43:0D:D1:C9:49:E5
Authority key identifier: 97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C
Certificate issuer:       /CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
Certificate serial:       019DA453CB69F9C104D53229466B89D8E8B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
Manifest number:          18C6
Signing time:             Sun 19 Apr 2026 06:00:48 +0000
Manifest this update:     Sun 19 Apr 2026 06:00:48 +0000
Manifest next update:     Mon 20 Apr 2026 06:00:48 +0000
Files and hashes:         1: jWXMDv13AWDAzHmG3AwphA0uU3I.roa (hash: gbSC++TyPC7wR0U95OM82la8DG8eXm7v1JK7SFOBZRE=)
                          2: l_RnToI2vdw9IyegKwq_unmlSDw.crl (hash: QYhzHsnV/XbWFohshVNG6KbSeAFuiQfbAK2GnCZ7/gY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:53:cb:69:f9:c1:04:d5:32:29:46:6b:89:d8:e8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
        Validity
            Not Before: Apr 19 06:00:48 2026 GMT
            Not After : Apr 20 06:00:48 2026 GMT
        Subject: CN=ca601af0f34052772bff8807cd7c430dd1c949e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e6:a6:42:d5:78:29:a0:a1:24:de:4a:60:db:
                    51:25:b0:0d:56:26:e0:07:21:a5:f9:cf:0c:61:0c:
                    4d:dc:36:f4:bd:69:d8:65:18:36:b7:12:49:34:22:
                    a2:25:78:23:aa:15:84:02:a0:5f:3a:76:0e:18:ce:
                    db:4f:36:62:ec:6b:8b:96:1b:e0:c5:12:1a:1f:a1:
                    c5:98:08:7b:1a:ec:6c:a1:ee:ad:1a:49:3a:df:24:
                    5b:8f:3e:0d:4e:e2:ff:c7:4e:ce:c6:f5:8d:37:e3:
                    40:8b:dc:77:0b:d1:99:f6:64:83:91:71:9c:57:28:
                    cc:6a:af:b8:90:b5:52:97:ec:de:77:fa:17:6f:2c:
                    86:f0:97:dd:92:97:90:73:2e:7b:b9:6b:08:56:6d:
                    a3:c7:ff:13:6b:69:ff:b4:a0:5a:72:07:6c:85:85:
                    47:5a:78:61:23:56:3b:c9:6d:91:5a:f2:1d:46:c5:
                    33:e0:15:3c:c9:78:be:65:b9:30:a1:9c:df:71:ef:
                    96:88:bf:5e:08:a3:ce:62:9b:4a:d5:8a:8b:d7:18:
                    f9:78:8f:42:4a:ef:b4:df:3f:89:bb:d8:25:62:86:
                    e1:5d:99:b6:4d:83:17:3b:78:54:71:4e:0e:49:b0:
                    52:28:24:d4:ef:1d:80:fb:4c:4a:64:d6:4d:8d:8f:
                    a9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:60:1A:F0:F3:40:52:77:2B:FF:88:07:CD:7C:43:0D:D1:C9:49:E5
            X509v3 Authority Key Identifier:
                keyid:97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:3d:44:5d:7b:7a:34:5a:53:4a:cf:15:9c:eb:12:3a:2f:5e:
         83:64:61:03:5f:8d:7e:ef:e8:3d:89:ee:61:bb:63:c3:09:49:
         08:32:57:d0:20:9d:91:5a:ac:c7:76:70:fb:96:8d:2d:40:99:
         6c:b5:fa:8b:7d:be:43:18:a7:85:5e:63:43:04:33:75:20:04:
         1d:0c:47:27:42:25:58:c6:cc:d3:b2:6d:8c:92:d7:16:72:dd:
         ec:c1:a8:0a:4e:c5:a6:e4:e5:31:8b:f2:29:80:13:6c:13:44:
         7d:94:1a:55:bb:aa:4c:da:78:0b:15:7a:3c:6f:1a:1b:21:c0:
         56:f6:f4:79:c3:12:70:8e:0f:c7:a5:17:e6:1b:91:33:d8:65:
         c8:a1:aa:5a:ea:f0:ee:8d:52:0b:ea:45:c6:10:ae:28:60:75:
         f4:30:63:49:d8:df:4b:e5:df:ef:5a:49:7a:ae:dc:de:56:74:
         c5:02:ee:32:58:26:3c:80:ea:9b:3a:a3:16:b3:7d:db:1b:c9:
         e7:53:95:2f:51:41:67:fd:46:2a:03:b1:f2:50:4e:3b:5a:8c:
         c3:1d:22:1a:31:9f:8a:ff:37:a6:96:02:20:94:84:e5:5b:9c:
         43:b0:ec:6e:12:1c:bf:55:ca:3d:76:cc:b1:ef:7f:a2:c0:14:
         39:05:93:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:24 2026 by rpki-client