Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
File:                     1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json)
Hash identifier:          PENeHadYUU1SqsZpfz0c1bHoTBX1d62RmZgI1FuY9GE=
Subject key identifier:   3D:B8:32:43:FE:D5:F4:54:A8:F3:2D:CA:BC:39:6B:60:19:59:6C:61
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Certificate issuer:       /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial:       019D9AAC396FC1B9EE82FE186AA7D2893E8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
Manifest number:          18CF
Signing time:             Fri 17 Apr 2026 09:01:11 +0000
Manifest this update:     Fri 17 Apr 2026 09:01:11 +0000
Manifest next update:     Sat 18 Apr 2026 09:01:11 +0000
Files and hashes:         1: 0cWx-DBEWXofQGq4uONjR9-bH4Y.roa (hash: pTkOoFQAT359monWmVl8M1BT8bJvgYKuEr63L6+DXH0=)
                          2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: kOYLTdN7Kbr9ouodMYxcqKT7q2BYNu0H1iRALKnmKCQ=)
                          3: AoOT9bGlJWd-TIRNHpKTWvzqPSY.roa (hash: Zi71VPuABO0kIOBrih/loFOATBl1klL+p6nG7AFF/d0=)
                          4: Bcd1BhwhrloaAtNtyP-2iXTXB5A.roa (hash: dwpLC5kz/iKWj1XEBoyZJZ2yN/0XmLy1ykd/NJpK0sU=)
                          5: EUgnWUs3CsfaZnj_hnNyvxreJoQ.roa (hash: pJY6CLyIZmy66AbMBmwM31A1sACoy25h4xx0+iPYYKE=)
                          6: MP5IdtDl7YEwuRNByyv8kDyAVco.roa (hash: vqDoHpH/1+pER1chx+gV6UvPLCxswhMzI5LmhtQHsu4=)
                          7: TJn7hrwQDusGI6b-JvzCy0ryuuI.roa (hash: jB76SwGUuXPBEx6T4Yw/Gggaft9shy0ZMidb4G0i9nM=)
                          8: UNIm3YXiMDOMkRxhMMlo6vVHArk.roa (hash: Tj2pYqF/A8kH66w2NIt64SQxibERr8EqlG3Fz5Bjgag=)
                          9: UX6g7KL9WRWy9Rrda_z2jmHwIg0.roa (hash: NgIQIWjEkGD0w0vEE9BTQb05Jn1iZvBqKIdoPQLt1R0=)
                          10: XUiE35ZJ3I6RBM2rDx0ESiNgluI.roa (hash: k03+qzTCxQ7lrjUzBfLF9RxlBcgnBj56L5MGzoB6xFA=)
                          11: _6SUA7PKYEVFBTaDAhE_A7MmF48.roa (hash: uJO3tMs1LSBIuJd7osQRiXv584cj5QanzKyRrYPze+w=)
                          12: cOTwaK6RSeeGqDttEyYUstwdoCE.roa (hash: alEZzagowBG75tk1HZniA5+5QPNp5iyxbE6HUR50PHQ=)
                          13: fJWzhiz6ayYsqM8kzsREYtIJBgI.roa (hash: N8Chz/wqQxJEwp3lnnRBhU8gdawDyJefdia645ECTwg=)
                          14: gfMRF0Nj1ChxrdQTcKCsvqZqzRA.roa (hash: VFwJmY7TYTF5JsUpp282lqGtLaHhhYMOSpBJGNGXiME=)
                          15: q7ctECBBEGOXl7uVauozGHraScs.roa (hash: gH9pmibDk4Ofnm2E38XD3fGrNK+1ocC6xSl5pld1ojw=)
                          16: qyuH8NgRhRZdTsIxcPjney8uG5Y.roa (hash: n0uUMyMPIGkKTSZ3n9g1M0rkf82uD6ttedakSVtd8tQ=)
                          17: vhCKx6YE6UZfYQ_y2if0T0sJx9A.roa (hash: 4GxEPZps/hQabeBQl+bTu8j92zD3sd9eABLT3Mr/M3g=)
                          18: x0r6XLUbiGOM5wv_gPZskGbu2oc.roa (hash: cdp8ZKRLyyEX1Hh8O5VsarJhdWV3a3wqBRxkXALsMf0=)
                          19: z1vIHaPgOEf1CFFXxVhQ7UIS68w.roa (hash: rFdz4/+higPiFTrvJsOTs2dDOqXP1ja44+BB/HAKISI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ac:39:6f:c1:b9:ee:82:fe:18:6a:a7:d2:89:3e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
        Validity
            Not Before: Apr 17 09:01:11 2026 GMT
            Not After : Apr 18 09:01:11 2026 GMT
        Subject: CN=3db83243fed5f454a8f32dcabc396b6019596c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:18:1a:15:35:d8:92:8f:49:f4:b6:5c:cd:5d:
                    9c:4d:72:1c:8e:f0:4a:00:f3:88:e5:4b:89:7d:fa:
                    57:59:2d:a3:58:50:fa:42:7a:65:61:58:37:da:fd:
                    f3:1c:ce:ee:a0:78:7a:52:91:46:51:1c:1b:c9:63:
                    a0:73:15:d4:18:ce:bc:6b:45:48:9b:e8:22:4e:2f:
                    a3:3b:e1:06:6a:b6:e9:c4:64:6a:15:c5:60:87:a9:
                    2c:b6:96:0d:ab:66:2a:38:77:fe:f0:19:1a:17:45:
                    7e:b8:01:70:8b:7d:a9:b6:43:45:14:4a:c2:65:73:
                    51:9b:7a:27:e9:df:3d:a3:7d:01:d4:74:20:16:2f:
                    0a:1f:c0:aa:b3:e0:f0:04:28:a1:18:d6:fa:94:c7:
                    b8:67:f3:d7:7d:d7:cc:54:43:54:c4:86:c5:31:db:
                    17:02:2b:74:5a:f6:89:b7:36:bc:5c:0e:9e:36:c3:
                    71:48:f9:69:16:72:8f:0c:cf:68:27:77:5f:04:21:
                    90:a9:84:b8:e5:77:25:d3:be:80:cc:c4:4c:7a:cf:
                    49:ee:bf:b9:2c:93:49:c8:15:e8:75:aa:50:d3:8a:
                    62:15:74:f1:ae:5d:7f:d6:e6:55:a0:8a:bb:e1:e0:
                    f7:b1:3e:41:74:d2:81:36:33:9e:ef:bd:4c:be:2c:
                    dc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B8:32:43:FE:D5:F4:54:A8:F3:2D:CA:BC:39:6B:60:19:59:6C:61
            X509v3 Authority Key Identifier:
                keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:3e:48:e2:7e:bc:0a:03:58:7e:ec:df:0d:4f:97:d5:2a:58:
         f3:98:85:37:f6:18:cc:f1:59:bd:94:b2:5f:c4:48:ee:14:96:
         d4:f3:1e:ae:84:2f:55:f3:46:e5:cb:e1:60:18:28:6a:cb:b4:
         ea:21:49:e4:72:22:b7:8b:7d:26:8f:00:fa:88:4b:8b:15:af:
         34:16:92:3b:d0:1c:c4:6a:b0:99:1d:9d:44:98:f5:16:db:69:
         76:f9:1d:95:21:d8:ea:3a:1e:35:51:c1:c5:17:95:be:fb:dc:
         3b:01:73:a6:3d:1e:ce:aa:52:8e:28:bf:34:8c:32:e6:a0:4d:
         6e:84:5b:16:62:9a:9c:b0:d8:01:30:6f:35:ed:89:24:ae:d6:
         4f:22:55:bf:f9:7a:11:01:ef:fc:8c:d5:3a:21:54:bb:a6:d5:
         0e:fb:4e:f3:94:62:3b:4e:47:df:bb:c1:ee:e9:58:b5:13:ca:
         7d:7f:db:9f:26:2c:fa:51:f1:aa:fb:15:7a:08:23:5f:12:d0:
         db:19:9a:0d:97:b5:86:98:83:95:e8:31:ce:59:0d:1a:7d:18:
         a6:0e:77:df:b4:2c:f9:80:f8:17:dd:c9:84:c5:a6:7b:af:26:
         e4:47:d8:bc:4c:32:16:a1:55:c2:d0:11:f4:b5:f6:59:f9:5e:
         21:21:b6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:39:09 2026 by rpki-client