Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
File:                     aTddinP2XuMh63wI24OAslhkuRI.mft (raw, json)
Hash identifier:          wAVKVJqq0XlwPcqbdCs4aJKs5bog+e450sdDxcW6icc=
Subject key identifier:   18:6B:D4:BD:AA:DA:E6:B2:44:70:06:78:75:72:2F:82:4A:53:13:BD
Authority key identifier: 69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
Certificate issuer:       /CN=69375d8a73f65ee321eb7c08db8380b25864b912
Certificate serial:       019DA59D2700E56BB38FF04BF6C697F4B72A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
Manifest number:          9E
Signing time:             Sun 19 Apr 2026 12:00:32 +0000
Manifest this update:     Sun 19 Apr 2026 12:00:32 +0000
Manifest next update:     Mon 20 Apr 2026 12:00:32 +0000
Files and hashes:         1: KAS5oJnMRBLN3CMFfME2h-Rh7mU.roa (hash: LS/iW/nevmUgfZkUxmuVR5hiIsYE32zEMVLICjYAf/4=)
                          2: aTddinP2XuMh63wI24OAslhkuRI.crl (hash: VwHF6+JOltB4R+Cp0nI/Qr2tsPZMgJEh/Zwpk/7dZSo=)
                          3: rQM6hcyKgdO32uWWqq-FwzbquX0.asa (hash: zP7bH4dme0HxeY/+twvXjeQeEdIkjoodZuLEIhQlKzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:9d:27:00:e5:6b:b3:8f:f0:4b:f6:c6:97:f4:b7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69375d8a73f65ee321eb7c08db8380b25864b912
        Validity
            Not Before: Apr 19 12:00:32 2026 GMT
            Not After : Apr 20 12:00:32 2026 GMT
        Subject: CN=186bd4bdaadae6b24470067875722f824a5313bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2e:83:46:ca:7c:70:79:f8:54:fd:8f:d2:5f:
                    d4:e0:8a:c0:fb:db:e6:6d:09:0d:08:58:c8:4c:ce:
                    92:8d:03:fe:4c:de:7f:b7:e5:99:77:20:01:65:ab:
                    f5:80:c9:78:28:dd:fc:a2:72:14:36:aa:c3:3f:71:
                    88:25:94:0a:95:6d:50:cc:60:84:bc:cb:b6:f5:f0:
                    94:98:02:a7:ac:98:df:a1:e9:1b:52:c9:d4:cc:2d:
                    2d:af:a2:fa:5f:11:f0:06:fc:bd:e3:02:82:8c:f3:
                    5e:66:8f:3d:20:88:fe:e3:63:1d:4a:fb:fb:66:6d:
                    85:e7:b4:94:b8:fb:06:44:81:1b:b3:98:e8:93:6c:
                    e1:d6:7e:a4:63:92:87:03:2d:70:56:33:97:91:71:
                    01:25:f5:24:c4:00:e1:6f:be:7c:f2:95:e7:98:15:
                    f6:fd:47:81:96:cc:cd:b8:28:77:8e:81:c6:b7:50:
                    a8:df:81:6a:34:87:9b:71:a8:2c:64:18:7d:7b:38:
                    95:c3:d4:75:84:1e:03:75:9a:c7:1e:3c:4b:5a:30:
                    ef:c0:90:03:ea:66:20:f7:04:71:e3:f2:24:f8:1c:
                    6b:fd:e2:3a:90:48:fc:06:ba:e0:35:65:2f:04:ed:
                    98:36:e5:a6:14:f2:fb:dc:40:af:bc:d7:4f:93:5b:
                    93:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6B:D4:BD:AA:DA:E6:B2:44:70:06:78:75:72:2F:82:4A:53:13:BD
            X509v3 Authority Key Identifier:
                keyid:69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:7c:a9:e8:75:d0:af:80:1d:c0:6a:38:6b:96:d8:b7:db:38:
         3b:b5:e2:67:30:04:35:26:ba:9a:6e:bc:b0:a3:48:ab:8c:21:
         4b:20:0e:aa:6d:3a:12:15:2b:64:7c:6b:8b:5f:1a:14:9d:d7:
         83:14:5b:7d:68:73:ae:90:97:2c:c4:5f:91:da:f7:ae:4b:f5:
         9a:dc:c5:d5:43:30:95:11:ac:7c:69:44:61:3a:3e:ec:04:9e:
         a5:3f:06:04:94:89:e0:f1:37:e5:15:00:8b:4d:96:62:55:07:
         cb:be:f6:38:eb:43:02:75:0a:1c:8d:87:e6:d9:27:ff:a1:c1:
         76:46:01:e9:e2:e3:b0:7e:19:36:42:e3:59:78:9f:db:e4:20:
         d7:15:d4:59:dc:56:f7:d7:f4:c0:1b:04:a3:46:1d:c3:8f:19:
         a9:72:1b:d5:40:0a:ef:1f:4c:8c:a0:6a:43:ca:5b:98:03:c1:
         9d:d2:41:90:6b:09:e5:45:9c:c2:40:ac:49:04:d6:79:d8:fb:
         cf:9d:43:00:5d:96:7f:6d:b2:f1:0d:30:15:3c:33:c3:9a:8e:
         e5:13:a0:89:de:e8:89:79:1e:1c:c1:a3:f0:1a:f9:d1:89:a6:
         41:ce:3f:1a:6b:50:44:e1:b0:a2:ce:7a:33:61:bb:f6:41:42:
         fc:39:45:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:45:34 2026 by rpki-client