Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
File:                     f1byiUjIMvLUNLtE1d4OoSJgGwU.mft (raw, json)
Hash identifier:          lH3pHkZWQoCpdKG4BmlRWe4SztHs/VzQ7cY0qsmU4dA=
Subject key identifier:   75:84:D1:0B:C0:17:04:6A:16:68:5F:66:67:78:9C:28:66:A9:7F:9D
Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
Certificate issuer:       /CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Certificate serial:       019D9818FE93CEA9B4BF120AA5C0228E758E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
Manifest number:          18C1
Signing time:             Thu 16 Apr 2026 21:01:08 +0000
Manifest this update:     Thu 16 Apr 2026 21:01:08 +0000
Manifest next update:     Fri 17 Apr 2026 21:01:08 +0000
Files and hashes:         1: 3BxhZ35N8Qx2oPV8uifmlMo5dOs.roa (hash: bD1bjEPm+DLe/WM+85t8bSN4Tr3PbaJNuazlrJ3Q/3o=)
                          2: SoyEFopk-R4dS6W4GId_dIzG6Fo.roa (hash: 8Qh9O/rztM/wDJzj5wDIv0KZPNCBmgUCZ7Xbj18mMsE=)
                          3: f1byiUjIMvLUNLtE1d4OoSJgGwU.crl (hash: 8xjgTb2wCLUCpADwDpXiL6EYcAapZaQZ5wDfwKq2eNE=)
                          4: zfvsegXog0j8iHhgS6fpZB-7wA0.roa (hash: bFu3gDNhMpBoThiANf0cCs15MmxVpxeF1StwYMxxHlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:fe:93:ce:a9:b4:bf:12:0a:a5:c0:22:8e:75:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05
        Validity
            Not Before: Apr 16 21:01:08 2026 GMT
            Not After : Apr 17 21:01:08 2026 GMT
        Subject: CN=7584d10bc017046a16685f6667789c2866a97f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:85:c6:28:40:f9:5a:44:7e:c1:e3:7b:29:c7:
                    74:2c:11:95:a7:da:e0:ef:0e:2c:f6:60:e8:1a:87:
                    c0:06:84:e4:60:71:c9:59:81:34:6b:40:8f:4c:da:
                    08:db:ab:7b:92:20:7c:64:a7:e1:fe:b7:9c:91:0b:
                    ef:8a:80:3d:76:12:0c:cd:25:34:96:61:c8:2a:b8:
                    ec:ca:5c:10:c1:38:fd:66:84:99:a6:56:fb:46:1c:
                    90:e5:77:cb:19:b5:2f:59:4c:bb:7d:33:30:1f:28:
                    8e:b5:74:0e:89:f7:71:dd:55:c7:21:4a:df:df:dd:
                    c2:0a:31:88:d9:5e:15:96:dd:45:6a:34:ef:b4:bd:
                    aa:0f:90:82:79:eb:6b:80:ac:b3:49:bd:6a:24:ac:
                    dd:50:4c:3f:e5:87:63:e2:57:e8:4c:c4:d9:fb:38:
                    29:96:16:ac:e1:55:32:2b:0e:2e:3f:b3:04:77:2b:
                    60:73:e2:29:0b:09:2d:53:49:81:77:bf:02:9a:b0:
                    6a:f0:00:4b:e9:97:b9:82:26:87:d3:03:80:fd:60:
                    88:55:13:29:d2:9d:50:52:b7:f1:b1:bb:0b:85:70:
                    f2:79:e0:9f:bc:3f:a4:a0:44:c7:07:b9:60:7f:62:
                    3c:4d:4d:34:d6:0a:6d:e6:a0:6a:4e:4a:9b:07:ba:
                    d7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:84:D1:0B:C0:17:04:6A:16:68:5F:66:67:78:9C:28:66:A9:7F:9D
            X509v3 Authority Key Identifier:
                keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:21:95:68:4d:8d:b5:98:29:f6:b9:e0:7e:be:e8:fb:19:6f:
         ad:2d:34:1a:b1:55:a7:69:dd:98:ef:b7:4c:ea:f8:8a:10:b5:
         aa:cc:85:90:94:26:c3:24:1b:e2:cf:54:28:92:dd:a1:0c:f8:
         35:07:a4:05:32:e5:08:06:e6:fc:2e:68:5b:ec:de:7e:3a:b4:
         6b:70:19:4c:d2:66:5a:76:b3:5f:6c:54:d6:83:2e:0a:a3:84:
         9d:55:c6:db:d0:59:f7:db:2d:d0:1a:90:1e:d9:52:06:7c:bf:
         9e:54:85:b6:af:01:9a:be:c9:3c:15:b5:45:83:e3:03:c2:f3:
         cf:d8:dc:fe:78:c4:05:38:03:e3:4b:e7:4f:e8:c1:4f:36:0b:
         44:17:36:10:10:e0:cc:ec:0d:4c:64:e4:7c:b3:0f:74:cb:52:
         51:d4:6b:38:31:f3:48:8a:bd:04:a4:2c:57:af:36:3b:e5:40:
         71:b5:b0:11:4a:8e:c3:fd:0f:5a:09:06:05:a7:e9:15:88:e7:
         98:78:6f:60:be:84:b5:fa:96:1d:33:f3:a4:3f:df:de:2a:84:
         1c:e6:95:27:af:79:45:67:b3:3e:6a:bc:17:c2:1c:5f:29:df:
         f9:69:89:2d:29:85:d6:0b:7c:e5:ca:5f:f6:51:5d:70:bd:4d:
         2e:dd:b2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:25 2026 by rpki-client