Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
File:                     M69dxinNSTdZfz_NhYylyA7ZfFA.mft (raw, json)
Hash identifier:          DeQ1RxZ1suKACufpOZ+2JQ9+1jS2ItUgsr8F8iYiSC0=
Subject key identifier:   DE:8A:56:5A:CF:79:26:C6:43:6F:B5:2D:D9:B5:52:1E:A3:35:17:24
Authority key identifier: 33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
Certificate issuer:       /CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Certificate serial:       019D9961EAF143003C5158114482DB9FCD09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 03:00:24 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:24 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:24 +0000
Files and hashes:         1: M69dxinNSTdZfz_NhYylyA7ZfFA.crl (hash: mk9YFB74qtFP5IlgleTrXIv7b0jl7eV+wCwMEk1Ekbw=)
                          2: O_VDSTEuqOGqu70pCxRmCW-6TUA.roa (hash: 9GMoYD3Uj1noF4pEvupjpvPMeufwxuuOufErPrD7SRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:61:ea:f1:43:00:3c:51:58:11:44:82:db:9f:cd:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
        Validity
            Not Before: Apr 17 03:00:24 2026 GMT
            Not After : Apr 18 03:00:24 2026 GMT
        Subject: CN=de8a565acf7926c6436fb52dd9b5521ea3351724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9c:80:5d:f4:6c:b7:7e:bf:91:32:5e:38:f0:
                    79:3c:b3:bf:9d:dc:f8:9d:2e:44:dc:89:4e:01:bd:
                    24:ef:c2:aa:69:7d:ad:ef:be:44:7c:25:e2:17:10:
                    6e:48:55:d2:1a:cf:9b:56:1d:97:cc:cc:46:df:ac:
                    25:e3:5a:cd:42:1e:56:f5:aa:af:1c:87:54:31:fb:
                    c8:ca:c6:7d:29:25:04:b8:99:fd:27:84:2f:f3:09:
                    46:eb:ae:0b:8d:67:89:23:7b:46:16:41:4c:b7:0e:
                    ad:a6:d4:9a:13:52:3e:8b:10:a0:26:98:f8:4b:0c:
                    77:f4:0f:50:ca:0e:81:4f:40:e5:22:09:15:f2:de:
                    3b:7c:a3:7c:9e:39:3c:f7:4d:c8:56:57:b1:8a:ed:
                    c4:be:a5:9b:d9:69:82:57:63:9d:f8:75:dd:82:ef:
                    b1:74:81:0c:c0:c2:c2:c9:af:99:12:01:a4:cc:85:
                    66:c8:2c:89:b0:3f:9e:dd:eb:13:bd:90:cc:f5:c9:
                    e1:f6:a9:84:04:75:b3:b9:72:12:3f:f9:6c:5d:be:
                    71:83:af:86:10:16:e1:61:29:a0:61:d4:64:88:aa:
                    7d:d3:9a:9b:dd:18:8e:b2:7a:3d:cb:7a:cc:8c:6f:
                    09:12:ff:07:fc:96:4b:b6:9c:ec:f7:3d:4d:12:57:
                    b5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8A:56:5A:CF:79:26:C6:43:6F:B5:2D:D9:B5:52:1E:A3:35:17:24
            X509v3 Authority Key Identifier:
                keyid:33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:e9:7b:e6:49:1d:86:f2:54:7e:e6:f8:b8:f8:f7:15:1b:0d:
         f3:f5:6d:95:16:83:db:f5:d5:19:0c:89:34:64:d3:f7:f3:1a:
         97:34:65:b1:53:45:71:04:d4:c7:69:b9:00:81:23:93:a7:0a:
         0f:00:9c:b3:99:29:dd:4d:7b:b4:a1:4f:6e:62:39:96:27:66:
         6e:e4:83:12:0c:a4:54:8e:32:86:03:af:e9:ed:ef:91:bf:fd:
         b0:c1:cd:2e:46:ac:71:9e:77:17:06:3d:05:a6:cf:60:f5:8a:
         9c:71:7d:0a:8d:ed:3a:98:7b:28:71:a4:17:47:fd:14:95:5f:
         10:ef:ca:1b:7e:1d:74:22:72:71:44:45:88:bc:9b:9e:dd:4a:
         30:88:e4:a5:c8:fd:95:08:d9:40:db:8a:9f:78:35:c6:cf:ce:
         1e:83:4a:bd:ee:29:03:c4:3f:a1:68:d7:cf:dc:18:eb:91:60:
         a1:83:f9:b3:5c:f2:fa:54:a2:9a:25:20:e5:00:0e:1b:8e:8b:
         8c:6b:61:0e:1b:ce:b7:4d:16:64:d4:77:a5:94:c6:67:00:14:
         a7:f4:bf:74:e1:04:45:78:24:67:40:82:1c:d8:69:09:2c:43:
         dd:5b:ae:b5:b2:d3:09:ce:dd:0b:8b:3e:d4:f4:e2:fb:aa:5f:
         07:4b:9e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:51 2026 by rpki-client