Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
File:                     adXUUqjtU1KH_rNlFLyHwCI1WkM.mft (raw, json)
Hash identifier:          29AUgPh2eKpufjFeigQURRROsmBXQFjz99RWt8dl32o=
Subject key identifier:   BA:49:C5:97:17:CD:D4:0A:69:65:C6:57:1F:4B:B5:46:2C:99:E5:84
Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
Certificate issuer:       /CN=69d5d452a8ed535287feb36514bc87c022355a43
Certificate serial:       019D99D0D2A469735E83ECB4D3A978940778
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 05:01:32 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:32 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:32 +0000
Files and hashes:         1: 99ukKo0G5E-X61ucxhUYzuXviMg.roa (hash: klMpZV7tFP7vNV7veN/nv8e/MQyS41qIS69khsoXMUw=)
                          2: adXUUqjtU1KH_rNlFLyHwCI1WkM.crl (hash: 8TtzXvvqh0ao3HUobT2Td76E7W2oACWp3okENXhe/lk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:d2:a4:69:73:5e:83:ec:b4:d3:a9:78:94:07:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43
        Validity
            Not Before: Apr 17 05:01:32 2026 GMT
            Not After : Apr 18 05:01:32 2026 GMT
        Subject: CN=ba49c59717cdd40a6965c6571f4bb5462c99e584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:e6:34:3a:1a:3e:6f:ce:77:93:c5:01:ab:
                    66:81:ad:21:b3:a9:7d:a8:c5:42:48:48:e7:35:c7:
                    22:03:c9:9a:b8:3b:b6:7d:57:59:f8:31:ad:04:30:
                    9c:87:f7:b5:7f:46:ed:4c:79:a5:23:13:33:ac:36:
                    2a:6b:09:5d:da:4f:b0:7e:7e:9b:d7:87:cc:fa:dc:
                    57:8f:19:81:27:30:f6:83:1c:fb:2b:6f:94:70:d9:
                    79:5f:20:97:0a:be:55:f5:db:53:7f:2f:36:fd:19:
                    db:db:10:b6:fc:0e:3b:9e:e8:b7:9c:e8:40:33:60:
                    d8:d5:bf:dc:57:c0:4a:c0:0c:a1:b1:05:4d:8e:88:
                    3b:f7:6c:e2:82:90:29:e9:0b:a8:2e:9a:c5:c9:c6:
                    0e:ea:04:bc:45:a3:2d:75:59:15:95:49:b3:f4:41:
                    db:f5:2d:77:a0:45:3f:07:d0:e7:2f:c8:46:dd:f4:
                    10:73:42:49:af:5c:e1:90:8e:86:d2:63:2e:95:d3:
                    be:a9:ab:a1:09:b0:f3:3d:13:d9:07:ed:0b:b4:75:
                    a0:40:4a:d1:64:00:30:6e:26:bb:c7:b0:5b:6a:dc:
                    ed:ff:e9:86:71:b3:0f:9e:af:db:84:42:0c:aa:c9:
                    52:69:dc:cd:d8:03:2b:a4:48:41:e2:9c:06:57:23:
                    74:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:49:C5:97:17:CD:D4:0A:69:65:C6:57:1F:4B:B5:46:2C:99:E5:84
            X509v3 Authority Key Identifier:
                keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:5f:9c:73:f3:59:b5:81:02:4f:fd:71:75:0e:c9:e4:16:22:
         a6:f5:6b:85:7c:12:d3:c0:be:1c:ea:ce:45:53:88:40:32:a5:
         67:cf:58:bc:02:70:b8:a4:6e:d6:71:99:33:9b:c6:a7:43:fb:
         aa:d8:2c:00:16:28:dd:ae:cb:92:32:b0:30:65:1c:dd:e0:28:
         44:a6:8b:35:fa:27:42:38:ee:fe:2f:93:18:13:6e:68:f1:37:
         c7:9a:d9:bc:c7:c6:42:41:8b:35:74:b7:a2:de:26:01:3c:f8:
         1f:cc:39:7a:12:14:33:23:d8:a7:fc:e8:15:29:2f:62:23:b4:
         1e:f8:08:ee:7f:f8:e6:21:5e:e0:fe:51:ac:3e:99:c8:f3:61:
         59:2f:1e:83:e8:e1:19:79:96:6d:a4:d1:41:a5:a9:1f:91:41:
         2e:4c:40:d6:15:86:d8:20:ee:e8:40:e0:4f:02:82:5b:fb:bb:
         37:44:9c:8d:f7:0b:ea:80:46:1e:f8:56:c1:48:a6:e6:89:df:
         78:9b:c6:75:93:0f:1f:c7:48:cb:06:d4:96:09:78:29:74:ff:
         ab:da:32:0f:0a:34:43:e6:4f:31:3e:2c:2d:15:7d:b5:36:ab:
         74:8a:35:cd:6e:02:7d:34:c4:6e:e6:8e:41:c0:93:23:a6:d5:
         07:f6:03:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:49:25 2026 by rpki-client