Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
File:                     Rg0xSfxQypeX9Q_engKggxNMUBk.mft (raw, json)
Hash identifier:          L+vXGZpHzAQrAGGe6kChTTHHRHq71sX8bZuuYk0oXNw=
Subject key identifier:   8C:B9:15:46:42:99:4C:E0:51:B6:CE:7E:23:82:0F:34:11:1B:E4:C9
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Certificate issuer:       /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial:       019D9D7658134B4ADF8661AD11BABEC97E0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
Manifest number:          178C
Signing time:             Fri 17 Apr 2026 22:01:11 +0000
Manifest this update:     Fri 17 Apr 2026 22:01:11 +0000
Manifest next update:     Sat 18 Apr 2026 22:01:11 +0000
Files and hashes:         1: 80AHb416dPFtah1nGaAc_7l46Ec.roa (hash: 2D/X4apH00Mk7Ti0XtGlvP9oq+7ZpgnstiU/IgSvOD0=)
                          2: ANo9L73aObGqzdP0orWNPP3485k.roa (hash: Q3dDG3+jQe8HP6goxHrxtXjwKKzMb7l9p077g0BZffQ=)
                          3: KXpXJO-YFLLgP89XzYYz7qcHQUY.roa (hash: GGh45Wv5joUkRSI7WVUZH33rmAafKbq5cLNpmunXMXY=)
                          4: Rg0xSfxQypeX9Q_engKggxNMUBk.crl (hash: 4tF7Qd4HChoCWpulbsx0jUZbsQSaq9HbvZfWP4qsc2o=)
                          5: ZGPQKEDVE9F1MV2KWCts_BoufGk.roa (hash: epehMPMwEjYywMBrhnF1PZ/wa0g0S9LNY7+R460jN/I=)
                          6: iWOLIa8CHwTMmCIWqUjl6myNeCQ.roa (hash: rcAH7VEF8TBjliKTDv/7zF+IYhohItkkjWceaK+DiMY=)
                          7: uUDFzxBxpPtA7UjADRUOTQEPY_Y.roa (hash: h5Q3Ax5wjUbWsPmn7ajHFEGC0r7tCkijHeUzTOQ9fVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:76:58:13:4b:4a:df:86:61:ad:11:ba:be:c9:7e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
        Validity
            Not Before: Apr 17 22:01:11 2026 GMT
            Not After : Apr 18 22:01:11 2026 GMT
        Subject: CN=8cb9154642994ce051b6ce7e23820f34111be4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e3:41:88:c7:f0:0f:cb:b7:de:9c:8f:00:e7:
                    2b:16:50:35:51:95:0d:40:c3:2d:60:53:db:38:fb:
                    2d:48:6d:4a:4f:ed:a9:0a:6b:75:ce:0c:9c:4f:7f:
                    13:00:cf:b8:9d:46:a1:c8:4b:06:ce:64:91:20:be:
                    2c:95:c0:e4:d7:fc:66:f1:0f:e3:18:23:4d:53:e1:
                    3d:29:64:40:c0:f8:af:c7:8a:ff:a9:4b:48:cb:b2:
                    be:13:eb:d8:50:03:cb:4c:87:57:c3:7b:08:4c:79:
                    58:c2:ba:29:d8:d9:be:3d:5b:c5:2d:e7:5d:09:25:
                    ea:61:16:41:8c:64:28:01:23:69:2c:17:34:3d:5e:
                    a1:dc:7f:02:9e:f5:ea:f1:9b:5a:6e:dc:23:98:a9:
                    30:8a:32:12:3d:30:92:3b:76:a3:d8:cb:a3:28:f5:
                    b1:4e:eb:84:a5:50:ee:35:f2:ee:f7:44:50:e1:82:
                    21:9f:94:90:49:e8:4e:e6:74:34:ee:0e:0a:89:92:
                    cc:ee:16:8b:e0:b6:0b:3c:36:90:97:13:9b:b2:e4:
                    c4:e6:5a:f8:48:82:44:9b:bc:ea:11:5a:fa:67:61:
                    5b:9d:7d:15:a7:c3:98:68:cc:a1:43:61:93:9f:53:
                    ed:63:a4:9c:49:24:fa:7b:11:5e:ad:72:be:1e:38:
                    fb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B9:15:46:42:99:4C:E0:51:B6:CE:7E:23:82:0F:34:11:1B:E4:C9
            X509v3 Authority Key Identifier:
                keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ae:67:44:a9:09:46:03:4d:b2:a5:33:65:97:4b:3e:21:be:
         c0:1a:f1:39:ee:93:e9:54:35:c1:4f:9a:64:d2:1c:ba:63:4a:
         d6:b4:22:c3:f5:ea:dd:0a:ce:9e:5d:24:a1:89:17:71:1e:9a:
         fc:cb:6b:92:2a:d0:a1:82:b2:e2:29:dc:7d:4c:42:e2:bd:dc:
         28:a3:fa:a5:8f:07:34:cc:6e:98:d0:0e:46:cf:ea:2a:09:f0:
         d6:c7:83:6d:fb:c5:5d:b8:d1:e4:72:7e:a4:87:06:2d:57:81:
         70:f8:45:31:6b:37:46:3e:dd:64:9f:1f:a1:5a:0a:4c:d8:fd:
         d4:e3:fd:dd:45:6e:10:a2:9e:7f:f9:2b:5d:ba:6c:fc:ce:42:
         85:61:c6:fd:ff:a0:21:c0:29:56:28:77:0c:bf:d1:a1:3c:e7:
         2c:bc:8e:4b:ec:d0:5c:7c:14:53:36:5a:c3:b7:4e:b3:29:fb:
         f4:64:f7:35:51:c8:d3:7b:ed:9f:43:c1:37:f9:de:d0:c5:e6:
         ff:23:94:53:8d:77:87:28:2b:d1:c9:9b:10:25:98:65:47:7a:
         ca:cb:26:77:a3:65:2b:ff:54:53:3a:32:57:3e:46:34:4c:09:
         7f:f4:b5:ec:f6:55:b6:3c:98:2c:7e:99:a9:08:3b:4b:3d:f7:
         a3:22:f4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:43:06 2026 by rpki-client