Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
File:                     cGt_6orTURHKaHqc0ApJ-aTwRZs.mft (raw, json)
Hash identifier:          KA3Lca8ttC0CksGFmQQajv+j6J9NpR0+n+3bkNQ5UfA=
Subject key identifier:   2D:10:BA:5A:B1:98:7C:4D:27:90:DA:A9:D4:AC:77:CA:7F:3E:9A:98
Authority key identifier: 70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B
Certificate issuer:       /CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
Certificate serial:       019D9AABD6798179609BD3967A91B3E511EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
Manifest number:          18BB
Signing time:             Fri 17 Apr 2026 09:00:45 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:45 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:45 +0000
Files and hashes:         1: 3mRFvb6f33KmA31Wa3PPdgxjRxc.roa (hash: MiE5PdWpWMnyQs7sOHf+pEyweupb9aFtOXGfUjzPuCk=)
                          2: RAfopN6tdeJL1sjFRpqIy4imIeQ.roa (hash: 4hFaV9gs/RBpS6I2/H1rs69idfo3PhuX0d8XFhEvMeM=)
                          3: TbO3p9BaQ_X9-4f96XiNGxzkuFw.roa (hash: v3vwX/rnfU0pht1yHzZosZwM8qWsFePSYoMrkrYm3gU=)
                          4: WlB9YLYhSliFMj5epuERd5qEZAE.roa (hash: Oedmof1Wu9NtwtMyhtlElFL2nm6OxYZaEnrIDhS86S4=)
                          5: YpBsHbpimwIlAlhChqTHWu0SrjE.roa (hash: dfAnmwPEESyQsxLDnMoSSBvKQiPlbGyS6lnr8b8V888=)
                          6: cGt_6orTURHKaHqc0ApJ-aTwRZs.crl (hash: nhiC58aSLAxYdf/jAkvsacvS0oCVq3iVqq6YVCMSzv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:d6:79:81:79:60:9b:d3:96:7a:91:b3:e5:11:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
        Validity
            Not Before: Apr 17 09:00:45 2026 GMT
            Not After : Apr 18 09:00:45 2026 GMT
        Subject: CN=2d10ba5ab1987c4d2790daa9d4ac77ca7f3e9a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:83:05:9c:7d:f5:43:73:a8:1d:1a:5a:35:25:
                    9f:fc:6a:2b:cb:9a:44:0c:1f:bf:8c:32:ee:eb:8a:
                    86:7e:b0:30:42:91:ec:76:9f:c0:48:c8:8a:e2:85:
                    60:94:95:f7:87:74:e3:95:90:b0:b9:30:45:52:86:
                    3b:e3:8f:14:52:88:b3:bd:7f:85:d1:7b:3a:b1:e7:
                    c1:9b:c6:ce:d6:fb:0c:80:f5:46:7a:3e:b4:35:b6:
                    76:0d:b3:c0:8f:1e:36:ae:d6:5b:b0:89:6a:d4:c4:
                    d4:f8:ac:50:86:eb:3b:34:36:ac:06:34:6e:82:3f:
                    24:27:a9:8a:87:3f:0c:43:cd:39:7f:0d:88:56:42:
                    5f:3a:63:bb:b2:cf:cb:6f:3e:39:1c:ea:88:3f:9a:
                    9f:1c:4a:72:53:9f:55:80:2f:c6:fe:b8:b5:01:ca:
                    7d:1a:04:f4:73:9b:3e:6b:1a:5f:21:cd:fb:ce:49:
                    2b:4e:d1:d8:a4:b9:bc:e5:d1:79:f2:d5:7f:65:4b:
                    01:6f:7f:d1:6c:9f:62:56:9d:0b:39:8a:ff:c1:20:
                    e9:c2:9b:68:4b:1c:c4:95:82:5d:55:13:65:f3:cd:
                    bf:c4:f4:ef:61:cc:a1:44:6f:2a:fa:f2:33:be:68:
                    3e:7e:d7:6a:0b:18:59:3e:b9:67:01:9f:a6:d2:a9:
                    34:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:10:BA:5A:B1:98:7C:4D:27:90:DA:A9:D4:AC:77:CA:7F:3E:9A:98
            X509v3 Authority Key Identifier:
                keyid:70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b4:cc:7c:b2:3f:6d:ec:d0:4f:e2:46:c4:85:c2:50:f9:01:
         a7:20:92:80:1d:fd:85:df:b9:68:b0:0a:79:99:53:60:aa:7c:
         63:1e:33:e3:ba:35:8f:10:02:ca:1b:e6:e3:4f:20:15:1c:87:
         a8:85:9f:ee:52:c8:52:44:f7:7b:ef:82:6b:35:fa:a1:2b:d3:
         30:54:72:89:4c:f5:9f:99:04:19:51:9f:2f:7d:49:34:4e:be:
         11:90:2e:1a:bc:af:41:4f:fc:14:98:63:90:2c:09:f1:42:2d:
         ff:35:74:e7:e0:e4:e1:36:c0:aa:80:65:9f:e0:44:c3:96:9c:
         f0:5b:7b:91:35:e9:c5:e3:43:49:2c:03:d3:36:5b:fa:20:95:
         fc:76:c0:0f:bf:3d:db:78:ce:97:d0:00:bc:50:cb:86:46:28:
         b9:e6:46:40:29:5b:0c:3e:aa:79:38:72:ee:61:6d:8f:32:d0:
         95:da:1c:76:c0:56:b3:3d:6d:96:7d:47:90:66:fe:e8:cf:10:
         96:b7:8e:f4:ea:bd:da:a0:94:db:c8:45:c4:fc:f5:12:bc:28:
         d0:bc:ab:cc:12:d0:d4:a5:cb:fc:a5:f3:9f:c6:38:26:6d:03:
         07:c1:57:50:b2:19:34:a6:2b:31:19:7a:25:fc:69:c6:32:a0:
         85:6d:3f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:15:38 2026 by rpki-client