Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
File:                     RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft (raw, json)
Hash identifier:          XECInOjk8T/NtA0X51YRu+rl5W9naF3/ErSQswQ6nrs=
Subject key identifier:   9F:E6:67:2D:DC:97:44:6A:A8:07:1D:6C:C6:2F:0B:FD:D7:D9:86:61
Authority key identifier: 45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24
Certificate issuer:       /CN=4534cab4450404862b201fe733f2c70a6bf52924
Certificate serial:       019D98BD3BEB3EF7517BC36B62D69E07978E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 00:00:31 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:31 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:31 +0000
Files and hashes:         1: QimJZyg_5Yfg1zb4CAZqCQiArVo.roa (hash: Z7/KTdUBdl9nRIlHCoXi0enigEky+0AXzlP7afwwRuk=)
                          2: RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl (hash: gGBobOlJBABo+b5jxlDJfLlHXA+9xSdtKoKJa5vlkp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 00:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:3b:eb:3e:f7:51:7b:c3:6b:62:d6:9e:07:97:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4534cab4450404862b201fe733f2c70a6bf52924
        Validity
            Not Before: Apr 17 00:00:31 2026 GMT
            Not After : Apr 18 00:00:31 2026 GMT
        Subject: CN=9fe6672ddc97446aa8071d6cc62f0bfdd7d98661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:43:a1:83:9d:11:71:81:a7:9f:38:dd:42:43:
                    4f:28:fc:78:88:f9:31:1d:e5:86:56:77:e3:e5:30:
                    ac:64:c8:e8:90:04:c3:6a:75:d6:7f:d1:87:ff:27:
                    ad:85:35:75:0b:7e:8d:1e:0f:93:37:b8:62:eb:8d:
                    32:7c:d9:d9:e9:2b:3d:f4:81:cb:a6:9a:0f:84:0a:
                    ad:23:f3:00:76:18:aa:be:b1:49:8e:60:41:ee:a6:
                    54:03:f3:55:e1:d0:88:a1:79:0b:95:c9:a5:8d:96:
                    44:22:64:eb:51:87:ed:83:a9:85:b9:4d:43:29:3a:
                    50:5f:cc:50:4d:d1:c2:35:71:2d:68:a5:d7:e3:4e:
                    01:86:48:33:aa:10:27:ce:b2:fe:7d:29:5b:66:38:
                    b6:8e:55:0b:f7:f4:68:94:a2:42:52:20:d3:8b:c2:
                    42:ac:cf:70:a9:ee:8b:63:4f:0a:68:c3:76:e8:a6:
                    d8:bd:93:41:94:a1:47:c8:c0:7c:50:76:72:7a:a9:
                    ab:cf:a1:9d:e0:ac:77:33:6c:0d:39:ac:9c:0e:cf:
                    2b:f9:8f:ee:ad:3c:9d:e8:6a:0c:75:af:b1:a3:b7:
                    06:d3:65:17:5e:fb:fc:d6:7a:3f:f8:7a:f5:aa:99:
                    31:39:20:8a:a3:2c:25:10:10:53:a6:71:d3:a6:af:
                    3b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E6:67:2D:DC:97:44:6A:A8:07:1D:6C:C6:2F:0B:FD:D7:D9:86:61
            X509v3 Authority Key Identifier:
                keyid:45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:73:35:32:fc:4c:b9:1c:19:c6:46:7b:fc:3c:19:34:60:3f:
         0f:53:2b:b4:6d:99:f7:09:8a:41:58:e7:81:34:ce:11:6c:7c:
         e8:26:43:a8:d9:1e:79:15:48:2d:24:ac:03:7c:3a:43:dc:de:
         4f:75:fc:06:8a:08:77:ea:f8:d1:85:87:8b:b2:73:29:75:b5:
         ac:da:da:1b:1f:b8:52:18:2e:69:06:21:88:c7:1e:98:ea:4d:
         6c:60:9e:aa:2a:77:db:15:a5:a0:b9:7d:a5:f9:7c:0e:7c:d5:
         fb:59:a5:77:a4:44:06:ea:92:17:44:98:12:7f:45:01:0c:37:
         a7:0f:68:9d:c5:6d:40:96:dd:bf:e1:e2:f2:d2:56:b5:13:94:
         ae:53:85:0a:9d:a3:30:5d:9f:60:89:54:d7:12:9c:60:1c:4f:
         1f:36:42:f9:57:2d:cc:5a:75:30:5c:b2:46:1c:70:ef:7e:54:
         02:1c:63:72:92:62:bf:0c:d1:8e:0f:48:7a:18:48:7e:62:fb:
         b1:20:49:d7:40:d2:03:b5:80:53:fe:75:74:a8:90:5f:b5:b4:
         22:3a:e1:d0:2b:ae:d4:80:c9:73:e8:f4:6a:85:21:d4:2c:d0:
         2c:b0:9b:bd:84:d8:f3:ef:a5:dd:21:48:25:e3:69:9a:79:b0:
         ab:bf:bc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:15:33 2026 by rpki-client