Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
File:                     sCqpYbR31UI9hbfUPz76JjJtcJA.mft (raw, json)
Hash identifier:          En47bRfoQZ2ZHYp+UdZ+1BGmic36n/gMAT9oA+l5RZU=
Subject key identifier:   2F:6D:58:24:F4:A9:A7:B4:0A:08:CA:34:5F:14:8B:E6:93:EE:9B:47
Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
Certificate issuer:       /CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Certificate serial:       019D9A74A961C50CFF7C025A3B598D912EEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
Manifest number:          18C9
Signing time:             Fri 17 Apr 2026 08:00:29 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:29 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:29 +0000
Files and hashes:         1: 8InJm95Mi61k0QTHHB2HlAmtVMg.roa (hash: 2odNj3E7Z3QzMXWZ7rRREN25MF9JDV8cWqw57luNOH0=)
                          2: EfZsQaoIf8J8bD_DTWAkF4-4WvY.roa (hash: ZJAEhbG64a9keH57hooL+GRwWBCFlIxTwwhv09FZ6zU=)
                          3: PEbeUkZb1apX7_y2826D9boddVg.roa (hash: HYxz0iV6fbIzFyu4KMUmllBnnOxRGfy9DSevgJ2/mV0=)
                          4: SeDJ1hAulV7F8UvJZdo94_98zCY.roa (hash: 2+EBqbTY3BogbTiuWVXf6LiOVDqJoUQjJrYdOmKpJQU=)
                          5: q1jBfLjL1kb_PCa_qTBjMZyucu0.roa (hash: /UBBiN7oTDbe2+3aCUtdKp43MVDaJatnqNvvyJu2c6k=)
                          6: sCqpYbR31UI9hbfUPz76JjJtcJA.crl (hash: qxyyoOrHMi6U83AoNijKrlb5TifBAsxAZWW4ByA3gI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:a9:61:c5:0c:ff:7c:02:5a:3b:59:8d:91:2e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090
        Validity
            Not Before: Apr 17 08:00:29 2026 GMT
            Not After : Apr 18 08:00:29 2026 GMT
        Subject: CN=2f6d5824f4a9a7b40a08ca345f148be693ee9b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c5:0a:86:dc:c2:30:86:3c:d8:80:43:19:76:
                    f4:06:93:0a:12:db:a9:2a:49:68:09:22:88:67:e2:
                    24:0c:99:4f:23:b0:b8:ed:05:9b:90:2e:f2:76:e2:
                    9a:74:12:4f:43:0e:a7:8f:c7:ef:28:49:38:33:e9:
                    bb:ea:36:c0:3a:3b:68:67:00:30:59:54:a5:ea:c8:
                    63:1a:cd:35:42:3c:39:20:b9:06:e1:0c:99:8b:74:
                    63:ab:ed:d9:91:1b:cb:5f:c5:54:3c:a1:3a:ea:5a:
                    63:22:1e:53:29:e7:01:8c:2c:2b:c4:cd:3e:9e:c7:
                    17:e6:30:c1:c2:e9:31:6e:e5:e8:20:17:99:ea:57:
                    90:4c:dd:dc:b1:b0:4f:98:f6:67:80:87:9b:e8:f4:
                    48:a4:0a:24:b4:8b:0f:47:1b:c0:a4:e0:24:f5:30:
                    20:57:2f:2b:67:1c:d9:d6:d8:01:b6:db:d2:4e:e0:
                    d8:8d:b9:24:d7:33:11:9b:03:84:c7:a9:3a:67:e2:
                    0d:2b:d8:f5:a4:61:50:8c:f7:29:6a:22:99:bc:c7:
                    a8:20:37:71:8a:56:3a:52:2f:35:8e:ed:28:69:d4:
                    ee:a6:71:3c:96:ee:b6:f9:b1:a6:d0:27:cd:fe:17:
                    2c:01:dd:ac:ee:7a:06:45:c8:59:98:08:67:6d:5c:
                    65:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6D:58:24:F4:A9:A7:B4:0A:08:CA:34:5F:14:8B:E6:93:EE:9B:47
            X509v3 Authority Key Identifier:
                keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a6:99:a2:4f:5e:70:0b:04:24:84:11:b0:87:9a:e7:12:84:
         44:f6:41:ed:fe:e3:f4:58:1f:73:07:64:08:af:19:30:a3:4c:
         42:65:73:3d:77:5e:f4:40:d4:d1:90:31:68:ce:ed:ad:13:90:
         ea:cd:14:2d:15:d8:49:0c:d8:ad:4b:7a:d8:97:7f:65:bf:4a:
         69:3b:64:f5:2a:57:04:49:39:1f:06:5e:f8:2c:d9:68:7f:e9:
         d0:95:60:d2:06:0b:30:4f:e4:78:7b:78:79:e7:c8:02:f5:40:
         b4:6f:fd:dd:29:f1:cf:e5:b2:77:eb:ec:a7:70:fb:f1:7e:78:
         ac:7f:68:26:6f:8f:41:57:cc:3c:e0:ef:c4:ba:c7:d4:36:d2:
         eb:31:fa:da:f3:bd:81:e3:bb:34:71:fe:31:c2:f3:a5:02:19:
         46:ef:5d:8d:2a:10:62:a1:f4:fe:90:41:da:b8:16:fa:46:13:
         52:0c:fc:68:0c:60:18:1e:37:5d:3a:b3:ff:e5:92:ab:b3:04:
         2a:3c:43:2c:73:c9:47:49:71:76:b9:f7:a1:6e:ae:f5:b8:05:
         dc:dc:ca:f7:23:7d:c7:c9:49:a1:52:72:39:8b:4a:b8:07:cb:
         04:15:1d:dd:92:f5:72:59:66:ad:1e:6f:ff:72:ea:a9:94:51:
         d9:f7:02:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:29 2026 by rpki-client