Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
File:                     KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft (raw, json)
Hash identifier:          qT00EiO7JB2wNLLZXBmrPsm11Coq5evP5/LG3o4SKEs=
Subject key identifier:   9A:50:24:3C:38:C7:DD:CA:15:64:AA:BE:79:02:D3:61:79:6C:A9:F2
Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
Certificate issuer:       /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Certificate serial:       019D98BD63C340A00CBAFB37949BE4535318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
Manifest number:          18C6
Signing time:             Fri 17 Apr 2026 00:00:41 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:41 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:41 +0000
Files and hashes:         1: KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl (hash: E9x2dI0au7E98WKoBBdhU1ZMOtBOwi1Lyg+5pZ2xffo=)
                          2: Q2sWoej5DPGl5wIw-CeODcRVXlM.roa (hash: wQMcbtBLdOGU6mgU9d/xsDpXItDoVCXCwiC3i9zeKw8=)
                          3: m25_c1bwCRR27TwA0PikcbJqUsY.roa (hash: lmfRRJbGEXu9SMbs8RoEu8bImS24RY0gDFc2/wiVBQo=)
                          4: ojqh31F-z_PVmb3H-ysSta1HlSw.roa (hash: pXqwdQA/pZAOmvAosw/Ac3zfBMN1XJgVHOWfLUuvoMs=)
                          5: wsQWFnZ9QvU6rL4ZStrqghoI4IU.roa (hash: aqTWkdbUh2lUmpGqUaJazitQHO++p5bcYZRKvviqQCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:63:c3:40:a0:0c:ba:fb:37:94:9b:e4:53:53:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
        Validity
            Not Before: Apr 17 00:00:41 2026 GMT
            Not After : Apr 18 00:00:41 2026 GMT
        Subject: CN=9a50243c38c7ddca1564aabe7902d361796ca9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f9:90:9c:16:b6:5f:0e:dc:a7:0d:07:84:95:
                    6f:80:11:fa:2b:0c:fb:60:6c:b2:93:bc:a8:a5:1e:
                    07:10:4b:43:bd:1b:9b:1e:51:44:19:8a:7b:9f:8f:
                    2d:a0:dc:46:1a:ad:8a:f2:12:fd:08:cf:de:cd:c0:
                    3a:b7:c9:33:d1:e2:68:80:de:11:a8:89:5d:f0:09:
                    19:79:a7:72:9a:df:57:8a:b6:8e:57:89:1b:78:67:
                    08:87:c9:d0:43:06:4d:1d:1f:4b:ea:23:5b:bf:fd:
                    97:70:1e:f6:c0:88:39:eb:1a:98:38:42:68:fb:2d:
                    8d:a3:54:83:ae:bc:ad:ab:6e:23:20:57:aa:35:b8:
                    d2:65:b2:b3:48:f4:b5:2a:ef:7d:4f:0c:22:b0:0c:
                    81:43:28:93:ed:63:e1:91:5e:d4:0b:1d:a9:b9:56:
                    87:7e:8a:28:f4:4a:a4:4a:ab:7c:1d:6d:a8:af:fb:
                    81:a7:40:5f:3a:aa:7b:8e:f9:e4:e7:77:b1:ad:8d:
                    b6:2e:6b:93:65:bf:9d:56:25:da:e8:f1:dd:38:6d:
                    6d:de:53:07:a1:a1:2e:39:e8:36:88:61:d4:71:7d:
                    b1:25:d2:00:55:c1:ba:9c:83:44:f2:31:15:6e:8e:
                    b0:5f:c8:b4:91:c4:0c:89:77:47:d4:3a:1a:72:8b:
                    d1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:50:24:3C:38:C7:DD:CA:15:64:AA:BE:79:02:D3:61:79:6C:A9:F2
            X509v3 Authority Key Identifier:
                keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:82:01:82:4b:ed:dd:59:7b:6f:86:74:f6:16:7d:79:be:cf:
         45:f7:c0:75:9e:47:42:ba:9a:5f:dd:63:42:b7:60:cb:e3:dc:
         0b:9f:a5:96:0d:9a:a7:68:33:0f:9a:0c:2c:0b:92:f3:31:bb:
         87:ec:4e:66:d0:db:13:8c:29:e4:47:ee:51:73:7e:9e:53:ca:
         26:a4:3e:a3:51:04:c6:ef:87:64:38:fc:6b:bd:f2:bb:ed:c4:
         4c:5a:88:e5:31:20:25:c3:c2:ee:d1:f9:d6:88:2b:4a:48:eb:
         e7:31:ce:07:23:d6:9d:3e:7e:c9:a1:7d:e1:a8:72:4f:a5:c1:
         4a:ca:6b:9b:8d:37:48:c4:5b:2b:2b:59:dd:e1:6f:0f:dd:39:
         7c:30:55:59:12:5d:72:ea:7d:08:8b:60:c3:39:7d:37:b1:2d:
         4f:71:44:77:84:ae:85:34:53:f7:ee:1a:69:e5:98:f0:e6:10:
         87:14:ef:b2:38:ff:05:ab:13:27:ae:c5:e5:f8:84:11:ec:2d:
         b7:bc:e3:16:a4:28:e7:05:0c:fb:fe:db:1b:f6:4d:a6:6c:a6:
         0e:c4:67:64:f2:42:4e:29:a7:a2:46:91:38:b7:89:a2:8b:bb:
         dc:a8:4f:cc:af:b3:66:f5:60:ac:85:b8:ad:a4:b4:97:64:f7:
         12:be:22:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:35:29 2026 by rpki-client