Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
File:                     j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft (raw, json)
Hash identifier:          w6MqJea5NPYxttC6SfBoyaxK+aWoGISUOjud3AOwGTM=
Subject key identifier:   9E:12:82:0A:ED:25:30:F0:CD:18:1C:80:BD:90:D8:41:1A:4D:F8:D6
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Certificate issuer:       /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial:       019D98BDAC9D7238F429C987CC25F8099118
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
Manifest number:          18D8
Signing time:             Fri 17 Apr 2026 00:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:00 +0000
Files and hashes:         1: 41oXR0Dcl8hEJOhB0K8Qrklv49c.roa (hash: TTWK0RRIlbuhKut+ATLmSdEPI+QN808VYnN7Vid5qyQ=)
                          2: Dv951AUIUaLuX0MPAgSurBs_Q4o.roa (hash: 3zxZnskXEXOtDhz+ouG2z/QdauveqbNwr6CiV/4QdDc=)
                          3: K9WiUPnzKMk0kTn3YOAAeGsJ3EI.roa (hash: dUaZk3IlcqCI85S/6UCtSKIbamHpI107QQx2h8oykGA=)
                          4: LxOq1v5UAj3ExgdR-fIgrMVK-BY.roa (hash: /x4igD0ebKYVQZig1vtn+O0OtoMkLAFpYnPG8GiLvWI=)
                          5: U-2sblCAHu3qIKD-Lrud2Vu1jU0.roa (hash: QBCXbXwqQu101TJcQB50Hnn/s+aowNHvXExjcnPeLEI=)
                          6: j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl (hash: mEHkwe3mV4N6XwkzubvIzne9nCPIwq0jMmR+VjO1Goo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:ac:9d:72:38:f4:29:c9:87:cc:25:f8:09:91:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
        Validity
            Not Before: Apr 17 00:01:00 2026 GMT
            Not After : Apr 18 00:01:00 2026 GMT
        Subject: CN=9e12820aed2530f0cd181c80bd90d8411a4df8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3c:93:46:6b:4d:37:b3:34:d2:83:54:9c:42:
                    eb:c3:a1:42:aa:69:62:ab:9e:80:fa:78:eb:5c:b9:
                    25:71:00:65:55:47:df:d6:3c:b7:a2:22:12:c1:76:
                    23:2f:af:63:1b:a6:cd:63:7a:61:1d:70:0b:d4:db:
                    bf:19:b5:9c:03:96:39:d2:58:d8:b8:01:91:2e:f1:
                    6d:94:e4:b2:b1:17:fc:38:e1:37:0c:73:91:4a:ec:
                    be:eb:e5:72:33:f0:d8:83:7d:a1:18:8e:be:c0:c7:
                    1e:39:b8:47:52:04:a4:fa:c4:7d:19:1e:47:ed:4d:
                    99:8f:15:ca:50:6c:1a:f9:14:25:6d:c2:78:92:0c:
                    27:02:45:8d:12:6e:87:49:0d:90:03:0e:5f:4e:58:
                    35:76:db:7f:da:b1:fe:fa:31:0b:1c:52:b2:2f:1e:
                    f9:38:6e:e3:55:80:73:c1:8f:ca:91:87:1c:4f:bc:
                    23:1e:38:1c:2a:35:d9:50:f9:0b:73:e9:af:2f:5c:
                    c6:67:19:72:54:c8:42:cb:8e:e6:d3:41:8b:57:e8:
                    37:58:03:f0:6a:fb:61:33:38:f5:16:1d:2d:5a:34:
                    e2:45:64:9f:91:e6:37:3f:3d:05:9a:3c:f5:fd:b8:
                    57:fe:37:05:35:d2:cf:e5:d5:10:a7:e0:94:f2:fd:
                    bc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:12:82:0A:ED:25:30:F0:CD:18:1C:80:BD:90:D8:41:1A:4D:F8:D6
            X509v3 Authority Key Identifier:
                keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a5:bf:3c:d4:3c:75:cc:17:ca:49:aa:d2:4a:9b:5d:db:35:
         40:ab:f0:d4:bf:50:2a:28:3a:95:c0:fe:8d:03:c5:d0:7d:96:
         7c:48:ac:79:a9:d6:29:0a:45:c2:8a:ce:de:0e:65:59:0b:30:
         ef:80:c1:ad:6c:c7:ee:2b:62:7e:ab:73:2f:ea:6a:99:ba:8d:
         d7:32:b0:1c:6b:d4:c7:9e:3b:3c:4e:a8:71:3d:6f:a8:3d:d3:
         e1:3e:2e:6c:19:55:c7:7f:22:1e:8e:2f:2b:ac:e4:c6:9e:66:
         96:69:a9:c6:13:02:5d:50:b5:cd:3f:17:3b:1d:8c:54:a7:e8:
         61:32:6c:bd:7f:d6:c6:17:62:e3:7a:c5:29:f5:a0:7b:2c:d5:
         3a:5e:11:5b:87:1c:9d:ac:49:8c:06:8d:95:49:d6:c2:7b:3a:
         89:75:f3:17:a4:99:2a:1d:8f:f4:61:f5:1e:fd:1a:67:c7:88:
         06:d0:8d:5b:04:44:8c:92:cf:5e:05:71:85:40:15:ef:01:1a:
         3a:df:0e:c8:67:d6:4e:94:29:a7:fb:00:a1:7f:07:a2:81:8a:
         b2:6f:53:13:6c:32:39:39:7c:93:4c:8f:fe:24:8f:1a:8e:3b:
         bf:45:75:7a:33:b9:f5:3a:1b:2c:c1:0a:ac:24:61:6b:d5:e9:
         7d:c1:6d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:39 2026 by rpki-client