Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
File:                     1-cGMsaUCf6FybxFLPv5io6l5zhs.mft (raw, json)
Hash identifier:          Fq+Z7QlM75swb3Lb3VkZco5iEjL0Gj5+uVEiRqjVgK4=
Subject key identifier:   49:7A:D5:6C:99:E8:30:86:17:AB:0F:B1:45:22:16:B2:11:8C:44:53
Authority key identifier: F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
Certificate issuer:       /CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
Certificate serial:       019DA566E075BA7941C435354C9B6C69B74A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
Manifest number:          084B
Signing time:             Sun 19 Apr 2026 11:01:15 +0000
Manifest this update:     Sun 19 Apr 2026 11:01:15 +0000
Manifest next update:     Mon 20 Apr 2026 11:01:15 +0000
Files and hashes:         1: 0P1RjYkUunzUVQsRql-6_fKRzc8.roa (hash: QQ0zolHUVpVnhMPlw+ijSEm88671++BfofXDGkViKYk=)
                          2: 1-cGMsaUCf6FybxFLPv5io6l5zhs.crl (hash: bsDlDMhTgQHrv7w4iQVrFpV3oDZnFh5XQ7wYtPDPQaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:66:e0:75:ba:79:41:c4:35:35:4c:9b:6c:69:b7:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
        Validity
            Not Before: Apr 19 11:01:15 2026 GMT
            Not After : Apr 20 11:01:15 2026 GMT
        Subject: CN=497ad56c99e8308617ab0fb1452216b2118c4453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d1:1b:3b:3d:53:20:8b:a6:d4:19:b4:61:a1:
                    4b:46:fd:1e:83:46:ba:fe:2f:86:06:14:16:ca:2f:
                    d7:17:68:f4:ff:4a:e4:fd:48:8c:f1:d4:65:32:a9:
                    c5:3d:20:ea:f2:9a:53:7c:25:8f:56:01:be:e4:cd:
                    e7:35:83:f2:8f:26:38:0a:fc:f7:1d:42:af:f2:ef:
                    57:8f:b6:31:14:24:d8:61:80:51:41:3c:ea:63:87:
                    50:fa:41:4b:c7:50:7a:aa:fe:a8:ba:08:b2:a5:2b:
                    9c:cb:f9:90:b6:ce:1b:e0:9a:27:df:c0:34:a4:ad:
                    b8:d6:44:5b:d5:b5:b3:be:b2:b5:d8:d3:e4:b6:d2:
                    0a:dd:37:fd:1d:8c:3c:0b:0a:14:b4:28:ca:57:06:
                    97:df:dc:29:22:8b:e7:00:2a:de:43:ac:b2:db:3f:
                    41:1c:27:2f:f4:e4:58:30:47:d8:90:d1:f1:38:14:
                    65:6a:85:5b:20:5f:d2:84:ee:ef:16:c3:ae:21:d0:
                    6c:ca:cc:0a:6a:93:0c:24:79:75:fa:de:50:b5:50:
                    32:c0:72:ba:cb:40:b6:10:95:50:12:02:e3:09:4e:
                    88:d2:07:58:57:9d:26:26:77:62:1a:20:d2:6a:ea:
                    55:58:a2:8f:b4:49:41:4a:1a:40:ed:54:17:98:8c:
                    0b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7A:D5:6C:99:E8:30:86:17:AB:0F:B1:45:22:16:B2:11:8C:44:53
            X509v3 Authority Key Identifier:
                keyid:F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:4d:85:20:02:68:5c:1e:9d:c9:b8:f8:12:22:17:14:fd:7d:
         02:b6:26:f1:b9:f4:74:6f:c6:45:34:e2:1e:9f:4f:22:35:7e:
         42:76:6a:82:84:07:44:2b:35:86:41:df:5a:19:ff:95:8e:f5:
         38:7b:77:6e:41:da:90:df:67:3e:cd:0a:5b:11:c9:bc:7a:ff:
         99:62:1f:61:a3:df:f0:b0:a1:97:92:87:1a:15:cc:aa:45:92:
         a5:a8:0c:a9:13:de:4e:b0:3b:65:09:21:bd:6d:a1:d6:63:fd:
         9b:75:93:9c:76:43:9d:09:ed:c4:ca:c9:43:ae:bc:b6:09:a5:
         aa:48:94:bc:b3:84:d7:28:d6:6a:65:98:d0:f6:87:f8:f8:cf:
         a6:6e:b8:61:f3:68:9d:83:9a:34:1f:7c:a5:2a:eb:48:ee:64:
         40:25:94:5b:07:67:f2:49:a7:9e:ff:b4:da:5a:4a:39:3e:51:
         0b:62:c5:e4:bc:e6:81:94:db:89:06:e7:4c:e1:b3:30:e0:b7:
         58:30:3b:ca:da:6d:fa:d9:d3:a2:78:c6:a5:14:93:59:5f:35:
         bc:0e:95:fd:43:2a:cc:d4:85:02:00:e2:da:cc:cb:b2:c1:9b:
         a7:57:8b:0d:d7:70:71:4f:26:91:57:11:39:75:02:44:40:88:
         df:eb:77:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:59:00 2026 by rpki-client