Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
File:                     1-K1UNiT40ygeyXBFjudS8QpCRSk.mft (raw, json)
Hash identifier:          oSs3YHyrw41XiDtzicut3zANu97H+MA+xNiemo90IJE=
Subject key identifier:   3B:00:81:1C:EA:FA:50:CB:17:F7:4A:61:93:46:95:3C:42:B6:30:24
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Certificate issuer:       /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial:       019D9A3E65BB0D9F7EC0E54FC696B8F580AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
Manifest number:          18CB
Signing time:             Fri 17 Apr 2026 07:01:13 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:13 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:13 +0000
Files and hashes:         1: 1-K1UNiT40ygeyXBFjudS8QpCRSk.crl (hash: Kr/SbXZlZ1Zz2MaroHRnevawxYSmgosscAdHlcQCfIQ=)
                          2: 8l0SWe3b28HgD7mm-CfnmnFy7uE.roa (hash: /HXGsu05kBaXf36m4kHjfdsrMe8Gwl63OVzSaOcPq2E=)
                          3: Lz9R6m5SK-yqZEob6cadmxCThHs.roa (hash: jc9B6VAewdJSUcgfHIRXwP2EIxv1ywTev7YQ165P/Qg=)
                          4: TlJFBm5D9j5YuMmzp85IiQTh8co.roa (hash: i++B3U0x1IS6mONz4BFbN/RmzEvmNewnucDBcHMUTt8=)
                          5: wil6FkxZYkrOZGc5qcrYgtNzbBQ.roa (hash: wp6PV3mdjd5yDzGVuaZQJ4OXj/z8YAFEvDtk3UkLrvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:65:bb:0d:9f:7e:c0:e5:4f:c6:96:b8:f5:80:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
        Validity
            Not Before: Apr 17 07:01:13 2026 GMT
            Not After : Apr 18 07:01:13 2026 GMT
        Subject: CN=3b00811ceafa50cb17f74a619346953c42b63024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:27:3a:74:35:76:ab:ef:8c:a0:9d:e7:c9:32:
                    9a:c4:52:a2:0c:14:9a:f1:75:11:eb:f3:77:d6:d6:
                    63:84:b9:35:f0:b8:3d:19:dd:63:ed:e9:9b:4b:16:
                    88:54:3e:27:dd:5c:3b:05:ec:42:b4:7f:94:36:c0:
                    d4:a9:3b:6e:06:ca:45:be:29:13:28:15:78:00:f1:
                    82:97:cb:82:f1:b3:f0:90:ab:fd:ea:e6:72:e7:bd:
                    e2:02:8d:17:26:ee:32:1d:c0:f9:37:9e:45:f8:79:
                    a0:5c:6a:53:bc:81:77:6a:c2:d7:16:9f:a1:40:48:
                    c7:0f:23:ad:42:a9:c5:73:52:6f:18:81:c4:58:65:
                    5a:71:9e:d0:2a:f8:87:48:c2:49:10:95:d3:0b:aa:
                    b1:49:79:18:12:76:54:c8:14:fc:08:77:f9:77:a9:
                    bd:82:f2:10:d7:b2:6d:02:26:ca:d0:d4:fb:f7:08:
                    12:65:b8:d3:ae:9b:6a:14:c7:59:13:8a:39:b3:ef:
                    d7:54:32:8f:08:41:d6:9c:5b:28:67:de:dd:a2:ba:
                    02:9c:bd:4f:e5:75:95:b5:e4:d0:c3:d7:ad:a2:e8:
                    6c:b2:e8:a0:88:2e:bb:3b:4e:87:fe:9e:f2:b3:8b:
                    c0:51:c8:d2:57:bc:f4:05:7d:f3:62:a6:ca:55:6b:
                    67:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:00:81:1C:EA:FA:50:CB:17:F7:4A:61:93:46:95:3C:42:B6:30:24
            X509v3 Authority Key Identifier:
                keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:e6:c0:cd:15:5f:b3:fa:cc:c3:a3:a3:e7:bd:08:e7:0a:2e:
         3b:f8:88:79:50:d2:47:f8:5c:f9:b9:41:2f:ce:ea:29:84:95:
         dc:4a:26:cf:1a:1a:7c:81:d3:b7:e9:03:3d:a9:95:80:90:f9:
         a2:6b:0c:83:23:74:fc:0c:d4:9a:ef:8c:8f:ac:a2:ff:f8:0d:
         77:6c:ce:83:51:b0:f2:51:6c:5f:24:64:27:48:81:67:36:f1:
         d7:1d:3a:df:61:83:83:41:89:ae:5a:f6:3f:93:1a:2d:e3:53:
         ae:06:32:c4:4d:f1:00:d1:48:d2:76:db:13:ba:ab:16:ee:9c:
         79:e0:d7:fd:4e:57:b3:5c:f5:7c:46:f7:b4:d3:7f:50:5f:bf:
         20:12:ea:0c:d4:ce:33:10:dd:5b:73:8b:9f:ea:70:a5:d3:27:
         dc:bc:60:b9:83:1a:7c:98:72:1d:fc:46:9b:9f:70:ff:fc:ba:
         df:38:20:ec:58:28:ee:51:9c:83:c1:a2:54:7a:3a:47:22:09:
         d4:fe:a2:41:28:d6:55:57:b1:ca:42:51:62:29:bd:f1:6d:cd:
         e6:72:b1:27:42:aa:5b:fe:d5:b5:71:13:b3:9a:91:68:5e:31:
         65:ce:dc:87:80:fa:42:14:70:d3:73:ce:50:8f:1f:01:14:80:
         2d:c3:70:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:13 2026 by rpki-client