Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
File:                     mur6lsnVY-ZQulkv-wbizutqCFk.mft (raw, json)
Hash identifier:          tqPbnE5v2rOiBEiXk+uCNMv6ygUM9WYV1vip7H3f4gQ=
Subject key identifier:   85:BC:72:50:54:7E:30:96:5F:4E:A2:72:57:EF:6E:D9:04:48:F0:AB
Authority key identifier: 9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59
Certificate issuer:       /CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
Certificate serial:       019D9A3E1AB7C1B2A08C809350CD54274158
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 07:00:54 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:54 +0000
Manifest next update:     Sat 18 Apr 2026 07:00:54 +0000
Files and hashes:         1: ZHTPMXBOpdp05MOA2aKrzlYilrs.roa (hash: QCNP42k/GUDd67H/ZxLk93Isvk0s3AXWCiuNHUZgsoY=)
                          2: mur6lsnVY-ZQulkv-wbizutqCFk.crl (hash: ccop5n1ZsNpu4U1iISMHs4C+NiEbm3hljBcFcLQIAFk=)
                          3: ynMxlcFBB2L4-uja3__b866yjKI.roa (hash: NfYPYHpG7deE0wKHNgZIplB1gjV6dRMZ7FyQyY5Xg+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:1a:b7:c1:b2:a0:8c:80:93:50:cd:54:27:41:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
        Validity
            Not Before: Apr 17 07:00:54 2026 GMT
            Not After : Apr 18 07:00:54 2026 GMT
        Subject: CN=85bc7250547e30965f4ea27257ef6ed90448f0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:a4:13:11:a4:3c:af:68:36:28:77:37:3f:
                    35:c7:1c:3d:93:cb:eb:0c:79:c7:49:91:74:96:01:
                    f2:0d:83:25:47:90:34:cd:3e:80:58:62:d9:e3:63:
                    1d:c8:b8:09:2b:2f:2b:bf:47:b5:e5:e2:4d:e7:be:
                    bf:1a:2c:c5:9b:4e:d1:16:a5:2a:36:1d:1e:55:c2:
                    b5:a1:87:da:41:00:cf:1e:58:82:c2:49:05:6c:8f:
                    cc:05:69:2e:ee:49:7d:3f:99:a4:52:e4:07:47:ac:
                    0c:e2:c6:bf:96:d7:e0:2a:d0:e4:97:95:1e:a3:91:
                    28:a5:f4:14:d1:cb:30:56:aa:40:a8:13:d4:ab:ac:
                    5b:59:92:b1:e2:53:91:e2:d9:b2:68:03:cd:be:34:
                    60:65:4f:05:84:db:e3:81:f3:3b:ce:27:3a:23:cf:
                    91:81:8c:b9:00:6b:73:41:19:9b:90:ef:a7:ff:5a:
                    1e:8f:b7:6c:b1:44:db:3b:c5:7d:6d:5f:9f:ff:92:
                    c1:9a:ff:23:ee:da:48:31:55:5a:b9:f9:58:8c:f2:
                    e2:c5:08:8e:d6:0a:43:4b:bc:f3:0c:bf:1a:f7:33:
                    50:8f:38:94:15:85:9f:8a:b2:f7:21:88:08:ec:32:
                    8b:4e:36:a8:ff:34:a8:36:4a:be:83:af:a8:fe:b0:
                    13:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BC:72:50:54:7E:30:96:5F:4E:A2:72:57:EF:6E:D9:04:48:F0:AB
            X509v3 Authority Key Identifier:
                keyid:9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:60:32:3e:29:c4:ff:72:40:d2:7e:41:bd:07:f1:57:c9:26:
         40:e9:f8:01:e0:1f:8e:49:6d:a9:2e:82:07:32:85:66:be:88:
         ae:82:f6:bc:e7:e3:ef:24:46:b4:a1:88:10:a4:f5:60:a4:5c:
         e9:50:3d:a3:7b:92:6a:42:f5:97:1e:5c:93:38:8f:1d:04:15:
         88:90:b1:22:a7:7e:d2:fd:af:6a:2e:28:f4:aa:9d:ac:c6:4e:
         9e:c7:9b:25:79:af:91:54:49:7a:51:4a:aa:cf:d2:95:7b:1c:
         3e:c0:39:49:da:84:13:74:63:24:0b:a5:07:49:ba:d1:5b:a3:
         f7:ed:07:1b:ab:2c:8d:99:04:9f:76:bf:a7:cb:78:a3:3f:99:
         9f:2a:1d:b9:ef:9a:4f:5b:18:52:72:0d:88:b3:ae:f1:e7:1e:
         f5:b0:3e:b8:b7:9d:50:d2:e5:f8:28:df:74:a0:58:77:35:9c:
         9f:09:55:98:93:5e:e1:71:fc:bb:7a:8d:ad:ef:a3:80:8f:89:
         9f:41:39:40:8a:89:66:10:52:71:0f:14:6a:23:b9:f5:70:38:
         14:44:69:a3:f6:04:60:50:5f:70:af:b9:e4:64:4b:5b:2a:28:
         30:04:4f:42:2f:50:b8:30:e9:53:4f:03:49:0f:57:a5:a2:46:
         98:7d:9b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:40:58 2026 by rpki-client