Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
File:                     HRV4JMY4xxige1NeDYJMskr8Bww.mft (raw, json)
Hash identifier:          rgWqJiVZLTpRAiD+5naTeO8e+Mn25eK2dhuXKcef/Mc=
Subject key identifier:   BF:A2:CD:D1:4F:42:33:36:46:0D:27:09:90:66:A2:59:FA:19:BF:2D
Authority key identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
Certificate issuer:       /CN=1d157824c638c718a07b535e0d824cb24afc070c
Certificate serial:       019D98BDCF065FFB2F904402F0E851D24793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 00:01:09 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:09 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:09 +0000
Files and hashes:         1: GzWcoTtAUqi5IHJ21cRxIUTLGpc.roa (hash: AGr5HxX1J7ElW4g5zJTR1ojXT/07CVW4IMiNxRldrY4=)
                          2: HRV4JMY4xxige1NeDYJMskr8Bww.crl (hash: aj+7je/FLF6lfuno9Nqhj65GEIoSibW1k/1GYdzdu5A=)
                          3: LcM90VNnvvV-Cm1OaIsrEHhQa8g.roa (hash: xXnlrcw8FbAmWQ6ks2MamfhjxI8QiO91NWqPRN/S9Bw=)
                          4: eHc6pv_nsOEvOj1b6H0UUy3Hz5g.roa (hash: 0jFiwjosF+a+C3GZzSfiQX91cGdMln4C3x+2DMdzk0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:cf:06:5f:fb:2f:90:44:02:f0:e8:51:d2:47:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d157824c638c718a07b535e0d824cb24afc070c
        Validity
            Not Before: Apr 17 00:01:09 2026 GMT
            Not After : Apr 18 00:01:09 2026 GMT
        Subject: CN=bfa2cdd14f423336460d27099066a259fa19bf2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e1:42:0f:4b:1e:81:27:ed:7b:a2:f5:40:f4:
                    d9:65:3c:59:f8:90:e3:19:27:57:c5:37:76:6a:81:
                    bd:f4:b0:21:d9:48:69:fc:12:97:ac:57:43:b2:b9:
                    e5:a6:b3:06:f5:00:04:9e:1d:7d:19:c1:2e:2b:af:
                    66:b4:b0:86:fe:2c:b4:7f:27:8a:2f:c8:8c:e3:83:
                    cc:98:df:7e:14:6b:e9:3d:2a:62:5e:4c:df:6e:07:
                    f4:4f:a4:da:20:27:40:9f:02:25:75:33:1e:db:ee:
                    ad:ec:22:41:4a:62:a4:d7:47:6a:d7:65:3f:a7:a6:
                    0a:ef:3b:42:fa:27:ed:35:35:9a:77:a4:87:2c:2b:
                    ab:5d:81:f8:25:c5:a0:fc:f9:01:3c:35:82:d3:af:
                    81:1d:69:78:87:b6:f9:19:d3:75:52:45:82:eb:6d:
                    81:3a:a0:1b:6d:9f:25:47:bf:93:bf:2b:33:60:0e:
                    38:15:16:87:88:30:d7:81:f5:02:82:62:1e:2b:45:
                    12:33:67:82:1b:ea:d2:85:df:23:68:d7:db:9c:18:
                    69:07:64:d9:50:52:2c:6a:d8:02:56:ab:ce:6e:ef:
                    c2:81:84:5e:2f:fc:50:76:79:c9:22:79:25:b3:83:
                    35:14:96:cc:ab:fa:87:9d:11:cc:da:2c:7f:7a:46:
                    9d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A2:CD:D1:4F:42:33:36:46:0D:27:09:90:66:A2:59:FA:19:BF:2D
            X509v3 Authority Key Identifier:
                keyid:1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:93:7e:f5:f6:71:a4:14:b9:e6:0d:03:bf:3d:be:11:b8:98:
         90:93:ad:93:73:90:33:97:11:64:ab:f6:ec:92:35:d8:f7:67:
         89:6f:59:f7:7e:3c:f4:68:96:26:6d:45:c0:79:4b:72:a2:fe:
         22:c5:79:8a:89:b9:f3:d1:b0:4c:8b:be:32:aa:1e:a2:04:b5:
         4e:93:65:83:a4:8a:1a:1d:4f:ab:4c:7f:12:23:d2:53:5c:35:
         e0:28:01:9f:ab:86:bc:1b:d6:5a:9c:47:9b:8b:66:a3:9c:7b:
         de:78:02:7a:19:82:0c:97:1c:e5:f3:4e:bf:b7:48:a1:0b:0d:
         21:b4:8f:32:0a:80:cb:b3:7a:18:2a:3d:93:d5:b4:aa:64:77:
         84:a7:f6:b8:fd:94:2e:fd:19:fa:89:33:f3:1a:a0:b3:41:eb:
         a2:73:18:36:f9:6b:52:ad:b2:cd:12:6a:e7:ef:db:01:af:aa:
         5b:43:bf:a8:22:93:3c:b7:6d:a1:3e:f8:3e:75:08:ed:cf:e3:
         b7:cd:2b:c8:b5:de:a0:37:48:2e:8c:5a:df:67:b0:e0:4a:c9:
         f0:ef:1f:bc:e1:3a:7e:83:06:13:66:a3:3a:f6:bf:f2:ba:19:
         5b:7f:7c:5c:30:3b:89:b1:5e:df:ea:54:81:a3:b4:94:f0:03:
         4b:a6:96:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:31 2026 by rpki-client