Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
File:                     o-boI_bdpn0oOp9BpykJkGrJqDc.mft (raw, json)
Hash identifier:          Q6v17ym3LL4U5+9xbPzUQzWkGIGDEUvIYvqO61FqPEw=
Subject key identifier:   35:6F:38:08:8C:15:18:3C:92:8D:36:17:40:29:91:76:F9:18:DE:66
Authority key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
Certificate issuer:       /CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Certificate serial:       019D99D03DB186EA71B9D1450B677073B3F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
Manifest number:          18C8
Signing time:             Fri 17 Apr 2026 05:00:54 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:54 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:54 +0000
Files and hashes:         1: 5Fc5Z8AnH0CEYZ9rDApWFLM4Ixc.roa (hash: AfLLM9oPN1KP8gzsCP5Hel58qUP2VR96r0FexXMNtMk=)
                          2: 78KXix6rmYz3_6bjL4D3DTcmOIY.roa (hash: 433c72hgwpEH/NcLGuRwMnl4ZIIE9aHeVVH8ucIJKQE=)
                          3: Wrt-X9W1hj7LG9tZllnLvca6Q2M.roa (hash: IGQB/HiWV8olKcPujLoPipVp2mVqdIGDDzfyLjI1mJg=)
                          4: o-boI_bdpn0oOp9BpykJkGrJqDc.crl (hash: cXm4/tbCuDV0B9liGGzk3pC9wT2J6Vqy5gETs7ZZGk8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:3d:b1:86:ea:71:b9:d1:45:0b:67:70:73:b3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
        Validity
            Not Before: Apr 17 05:00:54 2026 GMT
            Not After : Apr 18 05:00:54 2026 GMT
        Subject: CN=356f38088c15183c928d361740299176f918de66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:40:dc:f5:e5:05:fd:04:61:2f:bc:b9:36:ce:
                    d3:13:af:98:69:27:b4:10:7d:65:e7:bc:f1:6f:f9:
                    cb:47:cb:d2:a4:5f:63:e7:9c:89:10:a5:42:69:9e:
                    75:cf:b8:ab:4d:56:87:a8:a4:65:5d:a2:8e:d2:b3:
                    96:59:bf:81:68:7b:5f:ab:ca:74:73:c5:e7:ce:f3:
                    eb:0c:e6:53:59:dd:a1:8f:61:2b:ab:14:e7:d4:f8:
                    18:3d:c1:1f:04:ca:89:b4:c4:48:4a:e5:7d:1b:04:
                    6d:71:02:ba:62:98:f3:d1:8e:52:9e:e1:ca:96:6a:
                    6d:67:dc:35:8b:f1:33:34:65:14:db:c3:05:58:cd:
                    eb:5d:7a:ca:cc:27:3d:16:9a:c9:d4:b7:43:bb:4b:
                    92:e8:ee:91:ce:a7:0e:e0:2f:08:e5:74:46:6b:e4:
                    9e:9d:de:65:c7:ce:1e:df:3f:40:9f:18:c1:14:09:
                    c6:01:6b:8d:66:9d:7e:13:52:ff:97:3f:71:1c:6d:
                    3f:5b:df:d2:ad:0b:15:87:17:08:f1:30:70:50:ee:
                    cb:f9:76:9c:55:0a:f7:7d:a1:26:28:a6:56:04:b8:
                    1a:f8:09:42:58:db:a8:e5:7a:84:42:21:53:68:cd:
                    1e:74:ae:1c:a4:8f:e1:c2:46:cc:b3:66:76:a9:e3:
                    ec:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6F:38:08:8C:15:18:3C:92:8D:36:17:40:29:91:76:F9:18:DE:66
            X509v3 Authority Key Identifier:
                keyid:A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d9:4c:00:ad:a4:00:4b:1d:8b:59:3f:db:29:1b:c7:c0:c1:
         0c:b9:af:95:6c:7d:a9:9a:20:a2:45:63:6b:10:c7:3b:f3:4a:
         16:11:7f:7c:b9:06:8b:05:c8:17:20:9e:99:e5:f8:d7:96:2c:
         34:89:81:f4:ba:67:17:f2:f1:9d:ee:6a:3c:6a:a0:2c:61:c3:
         0f:59:9c:e9:8a:53:7a:42:b1:00:16:67:f9:48:37:df:79:cc:
         2b:bc:44:91:80:af:13:94:71:7a:41:0e:cc:19:be:2e:de:c3:
         62:de:2f:cd:6d:e1:04:1a:c3:5b:1e:e1:ef:b0:af:e7:fc:fb:
         1c:7d:86:41:7f:b7:72:20:2d:00:78:6e:98:25:46:b0:12:c5:
         74:45:f3:26:49:40:4f:c1:f2:53:40:a9:56:41:4f:5a:f7:8e:
         e5:89:4a:9b:41:7b:5b:82:37:33:a6:65:ac:d4:c0:8c:d5:a9:
         7f:97:49:57:29:90:fa:87:c5:cf:9e:e7:d0:91:66:2c:30:ae:
         a0:bf:05:94:96:4f:a6:f0:f6:d9:04:e3:92:47:16:63:4c:00:
         bf:07:7a:d7:d7:e7:bd:25:1b:80:07:aa:a1:e2:4a:7d:87:89:
         da:0c:15:8d:ec:f5:f3:95:79:38:74:01:94:b7:33:4e:f2:9a:
         ae:d1:f2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:26:39 2026 by rpki-client