Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
File:                     TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json)
Hash identifier:          fLKWnW7SWmA7rImnLWi+izJyES4ngETTv/UCRnefCO4=
Subject key identifier:   6F:DB:30:9A:4F:5F:20:03:2D:5F:34:45:1F:F3:5D:5D:FA:4A:77:36
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       019D9999B48855141950605BA491C225F9D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
Manifest number:          18D8
Signing time:             Fri 17 Apr 2026 04:01:20 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:20 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:20 +0000
Files and hashes:         1: 02kOZkpvmw6H06A_7TJUg4SFXaQ.roa (hash: TpRuYePLiA4791T1EEAGr2x5CqL+fTtzRjsvGFbZMFE=)
                          2: 2uonQk8lw16FeBIvKKSSmhsYIS0.roa (hash: 2dNCmgQW6KMhs3bZJLn40BJuFp8E7ETzKi/EDLa0p5s=)
                          3: 5ziyZMsm-eF8rQKEiPIRLUjKrJc.roa (hash: ST0tOCj/lVMKy70YCsjUG8APQaOubaCeSEbJbdk4mkA=)
                          4: 8EjBwuh_9in2Z1YECnIBdQ9VNrg.roa (hash: PZyLvuJ766MtPxGWe7ycqZ9uJ2ybPMELzypr1ODKQyU=)
                          5: 8iq73EY8SNEMLGjWaX4ccQq1LKw.roa (hash: JmTLodfb4oaon3Tv2+zOKzJurk+8nq1oEroEJejbuII=)
                          6: FwWBUFukI5sYaoIJXPQl_VpBKGw.roa (hash: 1A5Wlz49N8I7V2ONwfh6sYJRe2syIOSrNYZlIXmZWdY=)
                          7: Gy-LFbASJWTVYACt4LtWc2cmLuw.roa (hash: ujJsb5LhZ8X8O1ISoHR/MP5k+2QVAPis3/2ApXdZZ3g=)
                          8: MO6J3ImYDWqYVzymL0l4FvP1thU.roa (hash: e0dvPY/H6He44W+ZncCzFUHFzRAKvhD4nFOOCJSgnhw=)
                          9: NjCxVetchGZ0XWn7taqHcdtexeY.roa (hash: luZWHi8jfVZ+lGh40HXz9Aj5QcdjwpUbYNovF4whMXA=)
                          10: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: nWSMF6kWUNWC9j4GX+8kzmDu1FrTBD8FVdz9bOeVT7w=)
                          11: YtD0hgbunNZVqmVM-mTLvyyQEfg.roa (hash: bXNfm9p7iVN39qRXUc3z+rEBdxvoCN2D2p6tjPh77Uk=)
                          12: aXSOc-PVHMUBKt_487iYToOm7qo.roa (hash: TgcrpfHL47vgaiMhXn3iuqbilgXgoWpFYf29PAeU7PQ=)
                          13: esYBbdHlmzNrFPaZHG9t4u-VPHc.roa (hash: lkNqbXeTq7xSvC4HTyeLweRSSMj+JVz2/1P8Io014A8=)
                          14: gH8loGqHuQUgS7s-27j8UFtooRI.roa (hash: 3c/uPZsoFkC/+vu1WnVFt+9jcD0vxFLrQc/tSOZVhig=)
                          15: irMc3rrBTtXnxu6Y6x7SlrREl3k.roa (hash: odarHoY4Wy3X+9/gV/9gi100gxxZ4b3sXjkX8UmBWCw=)
                          16: jSXCL2nU6ig_-VGukqzzbg83BZk.roa (hash: Az+cF5wKpW/d6F9stZPF4IUccQjeYz6jWseSjP0L2T0=)
                          17: kYEWFQU5-czKs7zv1vGT343BJ-g.roa (hash: xWtvvMN7qcqpohmug6+MXQLfldtO5B6k2u+O9bf+VTA=)
                          18: oitUYkAPeYiroXJK68BhqiN_Xek.roa (hash: zYA61o9aLXKLXeSg2vp84zehihqtVq61hd+jWJCYfGg=)
                          19: rbrxUA36Uj_W2cv5ysZhTVIwxp4.roa (hash: OT7C6O/C6TgYrrzLBRPYDZUiybzraaRPGIJN5wW++Ak=)
                          20: u0RIuGfpHnx-Tn2Xp-wlaIQU95A.roa (hash: VuT5SalQp4yYIzm6lgKxTmu1Rlv5TD85uBnxUVTY7eo=)
                          21: yLMV5lCxmugxTcjR0kvs8qTvDQs.roa (hash: VAFUfjT6/8ZbId3UHCjjJDfpK2X5rUeLGtPsXPOBDAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:b4:88:55:14:19:50:60:5b:a4:91:c2:25:f9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: Apr 17 04:01:20 2026 GMT
            Not After : Apr 18 04:01:20 2026 GMT
        Subject: CN=6fdb309a4f5f20032d5f34451ff35d5dfa4a7736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3c:d6:f6:78:d1:27:e4:87:d7:ae:8e:7f:56:
                    4a:b3:8f:a0:1b:a2:70:f7:fc:c4:b3:ea:e5:e8:11:
                    7d:fc:02:b1:12:04:30:e0:da:ed:7a:04:b9:5d:4c:
                    07:33:3c:41:58:97:6b:a1:5f:57:cc:68:76:50:1e:
                    a8:bd:20:b5:f9:1a:a7:51:41:7c:91:25:42:92:6a:
                    09:bf:92:57:5f:a5:3d:33:5f:0d:17:22:12:d6:30:
                    07:e0:12:47:95:e8:d2:25:ac:ef:7f:48:62:66:ae:
                    21:ef:23:94:1c:f9:bb:16:5c:b6:05:d2:0e:b7:5b:
                    d1:63:64:ee:f3:72:21:38:35:c3:8e:f6:ed:1f:96:
                    d8:fc:4a:bd:5f:7e:41:c2:9b:78:8a:2c:b9:c9:2f:
                    fc:f6:7b:fe:33:3a:3b:ef:de:9f:f6:00:d1:8a:27:
                    17:fc:2d:4a:ad:24:c8:b0:8b:0f:c8:e3:d0:76:23:
                    89:58:ef:74:96:5b:ed:4c:85:94:f3:86:f5:43:44:
                    1a:9e:eb:00:bf:af:13:bd:bc:5e:4a:10:a4:48:c9:
                    60:0c:09:17:86:e7:67:05:86:cb:23:67:59:a7:7f:
                    1e:39:5a:ac:30:f6:08:44:b5:b2:0d:15:96:83:b8:
                    aa:be:93:d4:ed:fc:5c:ad:e9:c2:12:ff:b7:77:fe:
                    e5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DB:30:9A:4F:5F:20:03:2D:5F:34:45:1F:F3:5D:5D:FA:4A:77:36
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:32:8b:60:99:38:28:53:d3:05:0e:e1:e7:e8:b5:1f:fb:a9:
         79:79:9e:9b:47:cd:56:1f:71:a5:d2:f7:28:ad:9f:47:8e:05:
         5e:81:6f:e7:17:ce:9a:76:b7:51:e2:b5:0c:96:30:ab:18:46:
         c1:29:7a:ab:31:bf:8b:c2:5f:9e:41:9f:a2:93:99:72:c2:da:
         39:ec:65:4b:22:0f:8d:e6:f5:bf:65:f5:8d:8b:d4:4a:4c:16:
         62:49:1d:c4:fd:93:a4:9d:68:7a:1a:2b:e0:6b:17:54:b1:f6:
         56:5c:db:8c:75:21:1e:38:bf:4f:6d:25:1e:70:01:88:e0:9c:
         cd:49:24:8e:83:10:6a:c7:06:6c:0c:42:b0:4d:d0:f9:de:e2:
         5c:97:c2:fe:a2:65:87:51:62:b1:46:f8:2e:dc:2f:41:df:3a:
         59:37:bd:39:e4:b2:a6:13:36:0c:e4:cd:91:6f:ea:79:83:88:
         d0:02:e3:c6:6f:0c:57:1e:f6:26:79:78:23:28:64:0d:d5:7d:
         47:c8:ce:4c:7f:96:f5:4e:9f:43:8d:ae:e7:83:31:be:95:d7:
         6a:34:33:61:6a:64:8b:df:02:5c:19:89:ab:94:65:f3:73:7a:
         1f:b2:42:74:f3:0e:c6:2f:27:cb:9c:82:36:1c:26:9d:67:41:
         89:3e:dd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:37 2026 by rpki-client