Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
File:                     _ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft (raw, json)
Hash identifier:          x+Z3LltyhOoF0Iko5J6uO3zXBausXU7larZc9b6VZso=
Subject key identifier:   81:26:14:F8:72:36:B8:FF:6E:61:D8:20:BA:DE:00:76:9B:55:E8:CE
Authority key identifier: FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD
Certificate issuer:       /CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd
Certificate serial:       019D9B878DEB7E695B9FF9F9C97349531C05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 13:00:45 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:45 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:45 +0000
Files and hashes:         1: XObKO3ltJwjAm9or7k6NYiYPt_c.roa (hash: 7lZy4Wbsa7zNjERhyll32LTZE7YzAMI3aWuq/di2LaU=)
                          2: _ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl (hash: N2GWi0uS56ysc1WUxVfjwabDnhlemrW7z4iPzByGx0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:8d:eb:7e:69:5b:9f:f9:f9:c9:73:49:53:1c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd
        Validity
            Not Before: Apr 17 13:00:45 2026 GMT
            Not After : Apr 18 13:00:45 2026 GMT
        Subject: CN=812614f87236b8ff6e61d820bade00769b55e8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:26:41:8f:f1:20:28:7f:07:1f:e4:6d:c4:c4:
                    35:4e:74:19:f1:c7:a1:c5:f1:03:7e:4f:15:20:ac:
                    22:0f:3f:af:a5:14:5d:da:96:47:1d:d8:07:7f:d9:
                    5a:3e:7f:0a:6a:5f:c9:8f:7e:cc:92:61:55:cf:fb:
                    dc:d3:b1:42:02:83:77:26:be:e2:09:9e:10:9c:ad:
                    e9:bc:07:f8:0b:f5:1c:4a:7c:af:03:45:6d:11:2b:
                    05:52:f3:30:43:ee:75:40:21:3f:1d:cf:05:04:1a:
                    fc:fa:fb:71:03:3b:66:0f:18:28:97:57:8b:6a:8e:
                    77:9c:e2:4d:8b:bd:7d:ee:a5:d8:9e:45:ea:c7:df:
                    2c:f8:7d:41:20:11:40:b1:09:76:12:a4:0e:c1:7d:
                    69:93:84:5f:2a:37:68:62:0a:83:72:eb:c8:7a:55:
                    40:e1:a7:cc:ec:6d:16:08:53:3b:ba:74:5f:75:5b:
                    b1:1b:59:28:3c:e5:8a:62:e2:49:79:ca:c3:4f:2d:
                    fb:d4:7c:ab:8c:b7:4e:b4:a4:ef:25:78:56:b7:da:
                    5c:67:f0:44:15:8b:7e:73:05:6c:6f:ba:33:b9:e0:
                    64:a3:a1:5e:89:9d:8b:a1:2a:ce:35:2d:40:2b:83:
                    97:84:a6:9e:0e:08:27:ab:e2:9e:08:3f:17:0a:db:
                    e0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:26:14:F8:72:36:B8:FF:6E:61:D8:20:BA:DE:00:76:9B:55:E8:CE
            X509v3 Authority Key Identifier:
                keyid:FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:02:a5:7c:ea:0d:f3:cf:32:ce:f5:22:1c:45:71:5e:8d:76:
         11:61:e5:ab:b3:c4:39:8b:f7:ab:b0:0a:25:94:1d:83:02:a7:
         c0:6b:db:d1:8d:fd:65:a2:cf:1e:0f:2d:df:03:a5:a1:09:91:
         33:9e:36:fe:99:50:a8:c8:a1:dd:a4:d9:fe:e2:fd:9c:33:7b:
         f5:cf:26:e4:f1:06:95:3a:c3:3b:a7:ac:6c:29:d2:28:cc:97:
         2d:9b:aa:c4:91:d7:67:b7:28:be:69:64:ee:4b:b5:14:9b:2e:
         eb:1f:b1:6a:1a:6b:01:f3:84:c6:7c:61:99:31:19:98:72:68:
         cc:b8:93:7f:9b:d7:f0:00:43:96:8f:21:86:e2:03:1c:1d:90:
         bf:2e:d1:b6:77:c4:a9:91:97:0e:6a:93:79:3c:ca:3c:ae:cf:
         08:f4:1f:df:1d:53:c8:78:62:cb:51:91:00:c6:fa:01:ef:0f:
         86:b6:44:10:98:f1:d6:8c:7e:85:61:57:7a:65:12:74:ac:60:
         41:57:18:8e:14:3f:91:1b:d7:a1:58:0b:26:6f:42:b7:e3:9b:
         df:88:91:9d:57:e3:0a:90:18:5a:8b:80:51:ae:6d:f6:ad:d6:
         44:39:03:37:6c:24:26:76:d3:c1:53:9e:18:f8:32:55:21:bb:
         15:8c:bd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:24:30 2026 by rpki-client