Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
File:                     v5gt73eibXzBlHOzpAZNzFIX5HE.mft (raw, json)
Hash identifier:          ZWRpeQ6xoS6BxSpMUdTT9udO37n+lQwxBr6igPc2O9Q=
Subject key identifier:   6A:3B:2B:0D:B2:39:75:D6:2E:AB:44:37:12:38:8B:31:6F:38:82:A8
Authority key identifier: BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71
Certificate issuer:       /CN=bf982def77a26d7cc19473b3a4064dcc5217e471
Certificate serial:       019D992B8C58B1B662DF755653029AB21542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 02:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 02:01:01 +0000
Files and hashes:         1: MavdUwtL9hXRYTucFdVXRHkrrIo.roa (hash: yraXNEacytf4HbmMAZg6e64667WxeEaDmWzKdMpCXxk=)
                          2: v5gt73eibXzBlHOzpAZNzFIX5HE.crl (hash: kdZ/NcRVof4J5gxEOvnP+9MJW2biHB10bZFRdO5kUcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:8c:58:b1:b6:62:df:75:56:53:02:9a:b2:15:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf982def77a26d7cc19473b3a4064dcc5217e471
        Validity
            Not Before: Apr 17 02:01:01 2026 GMT
            Not After : Apr 18 02:01:01 2026 GMT
        Subject: CN=6a3b2b0db23975d62eab443712388b316f3882a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:31:bc:e1:13:91:53:79:1c:f6:9a:db:21:
                    84:87:cf:c3:a8:63:64:05:f6:cf:6f:99:b9:98:71:
                    5d:ff:97:d4:a3:fd:e1:bd:4e:9e:ea:db:a9:ae:27:
                    68:02:25:f6:dd:ce:0f:61:36:f3:12:e5:99:1c:79:
                    62:ab:e9:3e:07:50:82:12:ac:6b:ee:f3:ec:70:85:
                    44:bd:94:62:ec:83:7f:15:39:13:bf:c4:9b:16:ef:
                    0e:eb:1f:77:80:6a:20:1d:a0:f6:92:07:68:8d:79:
                    78:d6:88:d8:ad:73:6a:13:e3:aa:5e:e1:1e:5f:ec:
                    ec:4d:d7:df:d6:48:fe:bf:52:95:8d:a1:1c:c7:43:
                    a9:6f:21:fe:9d:58:c1:71:95:8a:6e:85:cc:b8:bb:
                    9b:64:79:4e:22:23:81:bd:d3:db:4c:b7:c6:ac:ca:
                    c8:36:6b:35:3b:7a:50:e9:64:ae:40:c0:77:53:af:
                    93:0d:8f:e9:15:77:22:52:1c:1e:a0:e6:e6:8b:e9:
                    5c:ca:7a:d6:97:22:f7:d9:87:be:c5:58:cd:3a:be:
                    e8:8a:52:9a:f1:f5:5c:f2:42:0c:ca:77:f8:6e:4f:
                    a2:b0:01:0b:88:44:9e:db:8f:19:07:3b:5d:f4:3a:
                    20:b8:57:86:4d:98:80:0a:49:26:87:ad:8f:e5:fb:
                    0b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3B:2B:0D:B2:39:75:D6:2E:AB:44:37:12:38:8B:31:6F:38:82:A8
            X509v3 Authority Key Identifier:
                keyid:BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:09:96:b0:53:38:81:0e:f9:70:40:03:d9:b2:cd:17:9c:a8:
         5d:d4:c5:cd:16:a0:54:f5:ad:69:00:26:c5:c2:03:ad:33:48:
         42:25:5a:5c:e2:3d:f6:92:50:ab:32:9e:84:69:04:cc:21:75:
         bf:f5:da:40:6e:7c:d5:3f:01:d7:bc:cd:6d:5c:a3:88:d9:19:
         9a:dc:f6:6f:e3:f0:47:60:00:b1:f2:11:4e:1e:0e:f0:22:4b:
         6a:c5:68:c6:07:9c:1c:48:0c:d7:93:d1:6f:9e:3f:9d:7a:2a:
         0a:26:3f:e9:1c:29:36:2f:a5:68:25:b6:df:26:cb:57:05:e6:
         c2:e7:67:df:1f:92:3c:36:c7:d5:fc:46:60:1d:a3:5a:9f:4e:
         6b:55:3e:1c:0b:94:a8:fc:9c:54:d7:08:d4:31:ed:28:70:96:
         aa:27:19:72:f7:ea:30:86:5b:da:8d:56:16:d6:11:66:56:b0:
         75:a5:e2:1b:3c:ac:e3:22:04:4b:cb:a7:9b:60:64:5e:16:d0:
         55:47:1e:4c:fe:93:b3:85:e8:b7:b1:6b:50:3f:d7:6f:78:1b:
         e6:14:c0:6d:5f:65:76:48:f3:ba:e2:88:2e:e2:4c:a0:38:df:
         78:cc:80:29:53:72:e4:e3:e8:7e:51:29:0a:5a:1c:55:5f:c3:
         7b:30:0a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:04:33 2026 by rpki-client