Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
File:                     u9zIw3chdOR7rIuTLlvse0ex2Ss.mft (raw, json)
Hash identifier:          ST7yDi3Asi8y/aEMJPEb7uuPOBDC9x/1w7hFxaHcgBc=
Subject key identifier:   FE:DC:A0:1E:35:9A:09:0A:48:9E:CF:C2:51:0F:A6:96:52:1C:13:60
Authority key identifier: BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
Certificate issuer:       /CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Certificate serial:       019D9886989A6D13D939932291D847F0FB2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
Manifest number:          18C2
Signing time:             Thu 16 Apr 2026 23:00:50 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:50 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:50 +0000
Files and hashes:         1: NyhSyCMRoKdRBo6gGVT4BydPhUU.roa (hash: hrd0GvTI0bFLstLvooU+LJ8QrF+EDu6C0hrzcyyARCs=)
                          2: u9zIw3chdOR7rIuTLlvse0ex2Ss.crl (hash: mv7sZOP/1ZeB9Jl1dr8DW5WUqz4GIwHDo4g4rUb7bQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:98:9a:6d:13:d9:39:93:22:91:d8:47:f0:fb:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
        Validity
            Not Before: Apr 16 23:00:50 2026 GMT
            Not After : Apr 17 23:00:50 2026 GMT
        Subject: CN=fedca01e359a090a489ecfc2510fa696521c1360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:3f:43:2c:78:88:f3:86:d6:30:25:a6:7a:
                    70:63:93:3a:ac:b7:a7:56:c4:7a:8b:c4:f0:ac:ff:
                    18:70:52:54:a6:3f:b5:d2:12:63:e5:de:16:eb:69:
                    2f:54:07:a2:9c:ba:1c:84:c9:53:85:be:d0:54:80:
                    28:e6:cf:80:ed:33:d3:45:c7:1d:56:08:37:b2:b2:
                    17:fa:52:a5:b6:23:59:ce:78:bf:88:fd:9a:d4:99:
                    65:ed:d3:41:8c:ce:7f:5a:03:93:1d:c6:48:9b:0b:
                    43:cc:92:e2:15:94:49:bf:09:3b:31:cc:a5:3c:e6:
                    9a:87:32:a0:5c:10:e6:3a:bd:44:01:30:59:a9:09:
                    e2:48:3a:a9:84:5d:3b:c9:26:09:b9:13:06:a6:52:
                    e6:27:43:79:68:55:17:bd:72:4f:f6:f8:92:50:31:
                    89:41:76:a1:81:8a:ce:77:a9:1b:5a:5b:bc:97:66:
                    0d:a6:6b:f3:da:89:a9:8c:41:75:82:ce:d4:39:f8:
                    02:1a:2b:bf:eb:a6:db:9e:4d:6f:d6:28:66:bc:8f:
                    e3:98:5e:ce:5f:57:74:c7:c6:ee:63:32:81:f1:ca:
                    20:6a:74:d2:e2:20:d8:7c:44:b8:00:c7:a3:88:44:
                    e6:8e:c5:52:1c:7b:80:8b:7b:38:0e:6f:53:14:d3:
                    f2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DC:A0:1E:35:9A:09:0A:48:9E:CF:C2:51:0F:A6:96:52:1C:13:60
            X509v3 Authority Key Identifier:
                keyid:BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5a:b3:41:f3:32:14:a6:f7:70:d1:2c:a3:79:3e:30:a1:b2:
         56:b4:b8:7c:92:eb:53:b5:15:84:a2:cd:1d:12:95:e0:78:ab:
         e5:80:36:c4:a3:22:dd:58:0e:33:df:4b:91:47:9b:5f:89:4d:
         f6:75:20:4b:ca:f2:5f:10:6c:b3:cc:7c:bc:4a:d0:cd:aa:d6:
         33:ab:16:05:e0:58:35:23:6b:a8:76:1b:88:94:01:b5:5d:82:
         5e:27:ce:10:36:85:a6:e2:86:92:53:e7:55:b1:5e:10:4a:8f:
         ad:d8:f4:13:0c:b4:84:9b:4e:40:5c:e6:1a:88:c1:04:4b:87:
         e6:a4:bc:9b:20:8b:13:a2:d9:3b:38:2a:be:de:6f:9e:41:fe:
         47:40:06:20:32:50:f7:91:ce:e5:af:dd:d5:a1:58:75:c9:d4:
         cc:5d:91:e1:1e:2e:36:4d:31:a0:54:0a:c1:96:51:6a:1e:f9:
         2e:4c:62:b7:4c:40:96:50:f1:2c:5e:e4:a7:ea:68:57:2c:30:
         f6:53:34:bf:3f:8f:98:e8:3b:de:90:04:e3:87:41:05:d9:1f:
         b0:23:4a:2a:6b:6d:cb:8a:a4:2c:42:a6:87:7f:b0:38:5a:63:
         c1:cb:21:8f:39:04:f4:a8:63:ca:89:65:8b:07:54:08:d5:12:
         70:3a:b0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:57 2026 by rpki-client