Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
File:                     quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft (raw, json)
Hash identifier:          q5wnnw4O4dcyois/AfIwM99FE7LXL4jaXwgQowb874Y=
Subject key identifier:   E9:23:6B:B3:AE:53:4F:92:AF:D5:C6:DA:45:2E:DC:D9:A0:E7:D5:06
Authority key identifier: AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
Certificate issuer:       /CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Certificate serial:       019D9A75403441A4958E62EC20F6FC076C6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
Manifest number:          18C6
Signing time:             Fri 17 Apr 2026 08:01:08 +0000
Manifest this update:     Fri 17 Apr 2026 08:01:08 +0000
Manifest next update:     Sat 18 Apr 2026 08:01:08 +0000
Files and hashes:         1: HqmBNUdmEip8S3rZUAEXbYeiMDE.roa (hash: g5QXvRrB37nz+UezkbR2qYuv3hfWDz55OyBzCv5F3cs=)
                          2: gn4jpmqvHPR6rBGCBxZHXL4XW7Q.roa (hash: zEyp0ISXI99Ue+kTnL8hqnoTwJyraQRvQCykId/nY+Q=)
                          3: quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl (hash: NOpE7VkFytWIAevs9GtDFNt+NLsGwDKqC2PPdGn3hPc=)
                          4: slzLq75d_2U3gzXMediesPc1y_A.roa (hash: o+7OLqNyBmfA/DpIWOrqjBa7X/0F+NH08pgpTA/9P1E=)
                          5: vFoLoBh7oWb6usXmjNjvyipGBRI.roa (hash: 0j1EDxGflRhorx1jgVNGqb1+St0JzyMh9AI0pVLut9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:75:40:34:41:a4:95:8e:62:ec:20:f6:fc:07:6c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
        Validity
            Not Before: Apr 17 08:01:08 2026 GMT
            Not After : Apr 18 08:01:08 2026 GMT
        Subject: CN=e9236bb3ae534f92afd5c6da452edcd9a0e7d506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8e:65:d9:99:fd:58:95:7a:54:05:34:fa:6a:
                    9b:50:6f:7a:5a:85:3b:29:e5:22:9c:44:c3:28:c3:
                    2e:86:2b:2c:3f:fb:cf:98:dc:93:b5:30:01:b2:ff:
                    2b:a3:33:bd:fb:38:82:cf:68:a6:b0:dd:a8:18:b3:
                    32:44:9b:24:4a:63:1b:e2:4d:81:60:e1:d5:21:7c:
                    53:60:17:9c:f0:06:75:20:62:2b:07:6d:82:ae:e4:
                    91:4e:25:45:80:55:8c:52:c4:2c:91:8e:6b:00:86:
                    36:26:b0:6e:ac:ef:58:a0:d3:d7:6a:8e:99:eb:15:
                    4b:98:78:59:de:0d:84:4e:6a:29:cf:1b:01:20:62:
                    68:af:b6:d3:83:76:8d:d9:20:76:c6:5a:68:7d:8b:
                    79:43:b8:77:7f:d2:31:be:fc:b2:77:7a:4b:64:22:
                    72:37:50:14:81:36:57:fc:03:50:36:a8:0b:f9:5f:
                    ca:06:49:a8:cb:bf:68:40:03:23:db:75:b3:07:a1:
                    00:38:09:78:70:9c:bb:63:bb:4e:9d:93:f3:5f:e7:
                    a7:95:dc:7b:e9:d4:26:ad:94:ce:b8:3a:b2:8a:b4:
                    2c:a7:3c:44:3c:92:a7:0a:af:b0:e0:9d:d3:e3:bf:
                    7e:c2:af:98:06:a9:e1:0c:b0:63:ab:0e:89:56:ff:
                    7d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:23:6B:B3:AE:53:4F:92:AF:D5:C6:DA:45:2E:DC:D9:A0:E7:D5:06
            X509v3 Authority Key Identifier:
                keyid:AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:40:3f:1c:7a:4f:d8:91:c4:e0:f2:01:21:b4:cf:47:64:b2:
         72:2c:98:e9:e7:32:94:f6:31:06:cd:08:66:b7:51:e2:1a:4e:
         7c:36:1e:57:04:91:03:7a:a2:b5:12:57:98:22:8e:64:82:17:
         5b:96:43:d3:76:af:e4:29:0c:81:e3:b4:e7:d4:c2:b2:29:08:
         17:b5:56:60:1f:ab:d4:b3:7f:b3:fb:c8:96:c2:bb:b2:2a:67:
         3c:15:bf:9d:e1:db:24:ed:c3:b4:5c:9a:cc:6f:22:f9:69:ef:
         be:7f:9a:d7:f7:ea:3c:48:d6:a3:fb:44:44:82:76:30:ee:6d:
         5e:4c:da:ce:f5:01:0e:c1:02:ce:56:77:9c:16:f1:fb:f9:3c:
         43:f4:cd:49:44:e3:43:78:31:37:a3:d6:d7:b1:0b:16:53:64:
         60:c1:79:21:d4:dd:d8:ac:ad:b5:1c:c3:a2:37:e6:be:7b:79:
         f3:6c:85:dc:a5:0f:9b:7f:c8:5f:ce:6c:c6:75:0e:16:11:05:
         8a:d7:fa:2e:28:e2:f8:f9:bf:63:e0:81:c1:6c:b2:3a:8f:47:
         0d:4a:83:d7:2a:90:81:2e:8d:10:bb:3b:0a:9a:9f:54:4e:27:
         fa:98:e1:90:29:91:c4:ca:b2:1a:80:58:49:e1:fc:01:9d:30:
         ef:15:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:19 2026 by rpki-client