Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
File:                     FqBO4EsSgj6FP_JD02VR5M5oOnM.mft (raw, json)
Hash identifier:          61ZKMRysK+KHuQUPLRBmtVORY/LrVeY9L9GJsuZ3QLI=
Subject key identifier:   1A:00:0A:C6:A4:FA:01:09:22:C3:22:90:2D:2E:0D:A4:C2:AE:E4:91
Authority key identifier: 16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73
Certificate issuer:       /CN=16a04ee04b12823e853ff243d36551e4ce683a73
Certificate serial:       019D9AABD51B3921D4164FC8DA28859C2692
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 09:00:45 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:45 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:45 +0000
Files and hashes:         1: FqBO4EsSgj6FP_JD02VR5M5oOnM.crl (hash: lg16dQ9IbvUOlFxxW3HAmykqr+Ta9Cos+Auc4ZQPTA8=)
                          2: vPfcpvhTzwgHZxkn9QHqISGa93s.roa (hash: tACs5TPIEpB3nwqH0vyYX3d8zy0v3YaCIyLPccgrw84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:d5:1b:39:21:d4:16:4f:c8:da:28:85:9c:26:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a04ee04b12823e853ff243d36551e4ce683a73
        Validity
            Not Before: Apr 17 09:00:45 2026 GMT
            Not After : Apr 18 09:00:45 2026 GMT
        Subject: CN=1a000ac6a4fa010922c322902d2e0da4c2aee491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:f5:ab:4b:4f:94:7a:75:4f:15:44:da:95:
                    f6:16:dc:01:96:96:c2:e5:bd:48:52:ba:7c:2c:ce:
                    48:a0:33:e9:8c:d7:41:43:77:6e:ba:0d:df:20:bd:
                    83:9c:5f:91:37:ac:4d:ef:26:f5:8e:07:6b:91:d5:
                    95:ff:7e:84:f4:5b:85:da:18:6c:17:5e:df:61:f8:
                    58:a5:62:90:0f:39:37:9f:a6:ab:37:f8:b9:c0:d0:
                    04:70:f7:5b:4d:42:4b:50:a1:52:73:07:8d:38:74:
                    08:90:46:c3:fc:9f:71:d0:77:27:25:96:fd:e2:e1:
                    7b:db:6c:3d:18:93:05:ab:71:de:7e:24:4a:2b:59:
                    02:76:72:b5:11:50:b6:17:cc:4f:9c:69:6c:cc:3f:
                    be:1a:bf:9b:64:9f:c7:42:3a:52:a9:5c:fc:89:a1:
                    95:83:67:fb:25:05:52:b8:60:d5:72:76:fd:dd:14:
                    d2:9b:3d:79:2c:2e:35:ea:0f:1e:8e:5c:b1:35:00:
                    43:8b:a2:b8:a5:17:14:e9:a0:2b:14:c9:ed:94:10:
                    d6:b5:15:fc:c4:da:81:93:30:70:1d:34:e1:a7:33:
                    45:4a:f8:46:23:70:d7:0c:99:45:31:20:04:5c:48:
                    bf:3e:a6:d1:01:de:a7:88:71:9d:5c:4e:ba:8c:ba:
                    84:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:00:0A:C6:A4:FA:01:09:22:C3:22:90:2D:2E:0D:A4:C2:AE:E4:91
            X509v3 Authority Key Identifier:
                keyid:16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:f2:e9:1c:f4:4d:71:98:de:49:cd:bf:96:23:d1:bf:24:86:
         a3:e3:4c:07:6e:3d:e3:c0:f5:90:38:c4:68:c2:d5:f9:0c:85:
         12:41:93:5a:cc:38:d0:c6:32:07:3f:ae:b3:73:49:d3:d5:53:
         5b:1f:dc:da:3f:ba:90:b0:db:fe:d7:b6:e4:3e:85:50:6a:85:
         2e:e0:c7:66:24:ef:f7:ba:73:9b:af:41:36:e9:e6:17:bb:6e:
         0a:99:21:48:75:59:2d:30:76:71:ff:fc:aa:dc:6f:88:84:53:
         2d:89:18:f3:df:13:62:6c:00:b9:c7:15:fb:07:7f:dc:9f:b6:
         d1:c4:44:1b:57:6f:8c:9f:a1:e6:f6:fe:cc:e0:1e:d5:29:17:
         58:da:43:c1:a6:bf:c3:d3:4b:b9:88:f7:e6:e8:56:0f:a5:36:
         b5:6f:87:0c:4c:df:c3:1e:60:14:c6:ca:de:d4:bd:d8:26:cb:
         0e:cc:45:56:ff:af:25:5c:d2:aa:04:ac:a0:d6:1f:d6:f5:cc:
         fd:fe:60:87:d3:b8:20:16:5f:93:06:59:ea:08:87:ca:8e:eb:
         d2:82:8f:b0:69:59:5f:23:43:59:82:04:08:ed:36:f2:13:df:
         9c:f6:fc:63:9e:24:ad:0e:56:ae:c3:79:68:f8:45:03:cd:4a:
         b8:4a:2c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:37:44 2026 by rpki-client