Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
File:                     R6guVXeaHqTvmWf4IdXMBbe9mek.mft (raw, json)
Hash identifier:          f1QdW3fHF8UOZzdXFyy4BLrO6W70m1woQPfxbAU1/Qk=
Subject key identifier:   D1:E4:89:51:52:AD:AC:19:D0:20:61:02:F6:00:87:0D:22:0F:0D:CF
Authority key identifier: 47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
Certificate issuer:       /CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Certificate serial:       019D99D05C0F3AAA5085BBB27668CF1ED461
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 05:01:02 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:02 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:02 +0000
Files and hashes:         1: Nq9p6JOG9d1MPZ5qd-sAijdFSJ0.roa (hash: yO2lwMxsUQ5IOFH/LC6sgXWOkjPeUa5h0hHMk+SpB7A=)
                          2: R6guVXeaHqTvmWf4IdXMBbe9mek.crl (hash: T1Y7tqf31yLVj2FRvQRVrEpwTUjpRfNMOOyc4StifYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:5c:0f:3a:aa:50:85:bb:b2:76:68:cf:1e:d4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
        Validity
            Not Before: Apr 17 05:01:02 2026 GMT
            Not After : Apr 18 05:01:02 2026 GMT
        Subject: CN=d1e4895152adac19d0206102f600870d220f0dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:5e:ae:95:4b:07:cf:93:c2:c3:29:82:aa:
                    0c:e4:36:36:85:80:5d:79:7d:58:dc:e9:96:f5:2c:
                    c6:a8:9b:b6:6d:38:82:40:a6:fa:a1:2e:e9:f9:d4:
                    35:3c:44:22:fd:3b:32:f7:91:14:7b:05:78:be:a6:
                    ad:b5:a4:9b:00:ca:ce:8f:02:92:34:c1:df:d8:a0:
                    b7:2b:9d:11:c5:e5:06:47:95:f0:e9:6d:e7:2c:2f:
                    dd:00:02:09:e3:53:2b:c7:86:01:25:ca:56:7d:7f:
                    93:4e:de:a3:d9:04:fb:27:84:7d:d1:ab:11:62:9b:
                    b8:38:4b:53:82:00:77:02:d2:a8:0b:60:bd:8c:1d:
                    17:d0:21:bc:97:6c:83:5a:7e:ce:da:2f:d4:8c:6c:
                    00:b3:01:8c:74:41:a1:7f:f4:e6:71:fc:08:27:b9:
                    e4:bb:65:e2:57:4a:ef:83:86:48:b8:ae:82:a3:83:
                    be:d6:85:33:78:f3:93:1f:c7:fa:17:43:eb:71:64:
                    12:f4:87:16:4d:1a:c1:9c:e7:d1:66:3d:2f:b4:09:
                    74:ad:97:d2:a8:e0:22:5a:31:14:0f:8a:5a:32:97:
                    7e:2e:5f:6f:e1:e4:25:9e:08:86:cb:b5:c6:f9:69:
                    47:0c:69:f1:ca:36:49:f0:4c:26:3a:35:fd:58:ae:
                    93:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E4:89:51:52:AD:AC:19:D0:20:61:02:F6:00:87:0D:22:0F:0D:CF
            X509v3 Authority Key Identifier:
                keyid:47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:62:4a:fa:40:86:05:9d:44:d8:de:73:3b:1c:e8:db:75:02:
         a2:95:aa:c7:f7:69:68:92:6c:77:db:a0:5c:53:92:fb:34:81:
         21:5e:f7:88:ad:a8:15:a8:0d:f8:0a:97:81:48:fb:b1:b8:79:
         1c:dd:88:20:99:2c:2c:8e:dd:38:ae:e9:4d:74:61:0f:d0:fa:
         8a:38:94:7f:cd:7d:46:77:2d:8b:30:44:a5:3d:6f:3b:eb:1e:
         1e:8d:8a:ea:63:17:9c:94:8b:00:0f:f0:e8:c3:34:92:d0:b3:
         5e:43:d7:ad:3a:70:c6:25:c0:31:b5:56:04:4b:48:75:da:de:
         dc:0d:1f:05:ee:d1:bf:20:ac:dd:a8:21:5a:19:81:df:f7:e8:
         78:20:45:3e:4c:6c:a7:90:52:2c:ec:b5:5d:7b:b8:53:5a:70:
         cd:73:bd:08:3a:0c:10:8f:19:8f:90:23:55:55:86:c2:7c:3a:
         10:a6:82:8a:f8:27:09:1b:53:d5:6e:e3:a5:e3:b5:74:c7:23:
         53:46:76:05:11:9e:90:2f:0b:98:bd:c1:64:aa:59:8f:92:e4:
         b5:69:f5:3c:16:75:00:79:be:ed:f8:ac:8b:94:f9:7f:24:f8:
         ee:33:74:20:a6:10:7b:9f:89:b2:9d:8d:da:5d:4c:89:7b:26:
         95:68:2a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:26:32 2026 by rpki-client