Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
File:                     9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft (raw, json)
Hash identifier:          aBrOflwDliGBn5FgsMpPXo9l/i7OeNBCHO4vNxPB4NE=
Subject key identifier:   B1:F3:4A:0E:66:DF:0E:43:03:98:36:61:97:B4:93:35:0D:F8:00:0D
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Certificate issuer:       /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial:       019D9BBE3ABA53806468B292342231F6DEEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
Manifest number:          18C9
Signing time:             Fri 17 Apr 2026 14:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:28 +0000
Files and hashes:         1: 5c-tVeqgckJuAp6JbI43ZWb85Ik.roa (hash: cjN5erR2DEEsrEuY7GbmW+pLwmDRQL+9OgSiLHhDtIc=)
                          2: 9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl (hash: oEOVpuyhX3vAydswT8l/7UmXefs9fCSZVB+F/RZ5oz0=)
                          3: CjnWkLoNex6eBWLyx2vHJmJr80w.roa (hash: 9uuAoQOLPgEeTsWmWn6L3Egzir6UP+suotOGSUL4eYc=)
                          4: SiBbiHVr7AC0u90Fwok04bc86Is.roa (hash: IBa2+mQ/TjNwKvca48jtPUnqiSXDlYjx7SDm3vYP5Ys=)
                          5: m1AMEfz2rq9UYyTrv-YyIrpi3OE.roa (hash: Gy2fPWkA44bEyqmTq2kzpwyTOHR1dG7Fs+P1u7NBrmQ=)
                          6: zRYCcQ03Zo7Mtjwf5o0jfcWViDY.roa (hash: hObMfSwMh57HZlCx8OTlbluNMpET5Cy14GAtqwnhGDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:3a:ba:53:80:64:68:b2:92:34:22:31:f6:de:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
        Validity
            Not Before: Apr 17 14:00:28 2026 GMT
            Not After : Apr 18 14:00:28 2026 GMT
        Subject: CN=b1f34a0e66df0e430398366197b493350df8000d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:04:a2:70:3c:f9:95:f2:81:4a:2d:19:d1:51:
                    14:bc:48:da:e6:b9:4a:de:d2:b3:fe:a1:d9:63:86:
                    72:f1:76:93:70:53:05:2d:99:e8:7f:b5:af:5e:9d:
                    30:e7:83:cb:02:80:67:30:0d:cf:72:85:cd:d0:e1:
                    ec:01:a3:22:f0:e7:c4:b2:6f:c1:3f:62:16:0f:13:
                    6f:7b:1f:3c:a5:a2:eb:d7:1a:af:f1:b5:b4:ec:99:
                    b8:9d:70:77:c2:a7:29:60:25:d3:c5:ef:73:6c:6c:
                    c4:1b:20:ac:20:8c:af:51:1e:52:05:fd:dc:93:ed:
                    43:24:c0:eb:1d:55:26:0b:2c:9d:b8:69:3c:d5:64:
                    c3:b4:79:9d:f5:13:26:e9:81:2e:47:72:d2:ce:3a:
                    73:2c:0c:e6:07:76:ce:2e:b2:c0:75:72:e8:71:55:
                    7b:69:1e:f1:08:a2:52:c3:35:73:b5:b7:f1:3f:91:
                    af:45:84:ba:72:cf:b6:4c:5b:14:16:ad:d6:1f:d8:
                    cb:ed:a4:0e:e5:b1:86:a3:22:eb:98:9d:82:9d:3a:
                    d4:85:24:de:f8:e4:b7:93:78:8a:ea:a3:76:1d:c4:
                    66:cc:02:0f:dd:a9:03:ed:6b:cf:44:ca:4d:2b:46:
                    11:52:b3:11:94:b3:a4:d5:3d:30:ae:ca:74:2e:1b:
                    42:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F3:4A:0E:66:DF:0E:43:03:98:36:61:97:B4:93:35:0D:F8:00:0D
            X509v3 Authority Key Identifier:
                keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:59:43:96:66:cd:c6:11:99:5a:86:32:05:75:81:c4:42:db:
         cf:06:b0:ba:e1:04:18:27:4c:5e:38:58:ae:ab:db:60:24:9f:
         52:1d:06:06:2f:94:14:8c:98:3c:e7:2c:dc:6f:02:8f:e4:d3:
         13:8d:c0:ff:53:50:fe:48:4d:a4:06:b2:1c:09:d4:dc:d4:2f:
         f8:74:81:8c:c5:87:3f:12:2c:19:4c:2f:75:72:97:1a:d5:a8:
         21:2f:73:0e:c4:c6:50:51:ff:9e:9d:86:83:52:c4:f2:48:96:
         ec:30:26:30:61:9c:52:ff:2a:ca:8a:7f:89:a0:32:56:01:7a:
         be:d9:f1:e9:0b:06:c6:89:19:7c:7f:6d:c7:a7:73:de:18:f2:
         fb:ff:9f:19:1d:79:9d:19:ec:83:bd:1c:c6:d9:4c:72:41:d3:
         17:f4:53:70:ef:7b:a5:4b:67:cf:93:fa:1f:7b:25:f2:11:2f:
         83:1b:9f:71:fb:36:86:a1:50:e6:2c:19:76:74:08:70:96:0e:
         b3:a6:87:14:2e:bb:c0:35:78:ca:12:fe:f9:02:b0:88:85:5c:
         bb:b2:e9:25:d0:f5:aa:a4:fb:13:ef:f0:fb:57:81:eb:ed:ee:
         22:89:ba:c4:8a:b5:09:26:40:fc:df:cc:85:14:e3:a2:63:1c:
         34:25:2c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:36:05 2026 by rpki-client