Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
File:                     nMYO2IFBiiF-jdPB-lI-JWXK65s.mft (raw, json)
Hash identifier:          hjG94PmYKQrfEMQzo93QRHnD71QMiHpcnPszs7Y+YSg=
Subject key identifier:   D8:98:F8:E7:42:91:BC:64:51:A8:2C:8C:7B:C7:69:C3:E9:66:FB:DF
Authority key identifier: 9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B
Certificate issuer:       /CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
Certificate serial:       019D98F4B6038B379708FB856CD27B937186
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 01:01:07 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:07 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:07 +0000
Files and hashes:         1: EqP-OwutSropMKZDpJsJICxaOQA.roa (hash: 3uR+4TzhakfaPgMhOyS6vVGKMQMDAuuvPFvZm5rpWtA=)
                          2: nMYO2IFBiiF-jdPB-lI-JWXK65s.crl (hash: NnspGR71NoPI2D06F6bporVH0CZif31sq0SlocoOWJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:b6:03:8b:37:97:08:fb:85:6c:d2:7b:93:71:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
        Validity
            Not Before: Apr 17 01:01:07 2026 GMT
            Not After : Apr 18 01:01:07 2026 GMT
        Subject: CN=d898f8e74291bc6451a82c8c7bc769c3e966fbdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:00:64:02:13:73:79:69:4b:b8:f8:99:a1:c9:
                    94:01:8f:4a:84:b0:0f:02:11:31:75:27:bd:81:7c:
                    37:e0:58:dc:f4:a5:3a:e3:32:84:36:b0:4c:81:0d:
                    c3:54:22:c8:bc:ef:0c:1d:e5:24:ca:6e:d9:ac:22:
                    2d:f7:2b:ec:b5:82:5b:76:1d:9e:1e:ac:00:ab:ce:
                    bf:89:60:a6:5e:d0:3d:32:fe:03:03:47:0a:f1:0d:
                    35:bd:ee:db:f4:fb:b1:5e:b3:2c:2c:7d:ed:27:3e:
                    2f:34:d9:1a:92:87:fd:f3:44:eb:79:45:6c:63:f5:
                    16:1e:7e:14:77:5e:35:4a:96:c6:b2:15:0c:76:c3:
                    5c:3e:28:26:71:0a:e9:5e:6f:3e:e8:3b:e0:b7:a0:
                    df:c7:49:a1:86:59:bc:02:40:dc:e0:c2:60:40:fe:
                    8f:71:8d:73:c7:8b:3f:2d:b6:17:e8:ac:19:fd:d0:
                    9e:ea:d1:3e:8c:8c:cd:62:d4:de:e2:e1:e0:c5:84:
                    71:30:9a:f9:87:c1:d8:b6:a6:e5:58:f5:95:e8:16:
                    d4:dd:c7:d6:23:84:0f:de:4d:b7:43:32:ff:71:ed:
                    06:33:e1:0d:27:37:f2:93:50:dc:18:d3:a6:2e:e9:
                    f7:f2:9c:0f:0a:5c:11:23:3c:fc:e7:4a:58:d0:98:
                    e0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:98:F8:E7:42:91:BC:64:51:A8:2C:8C:7B:C7:69:C3:E9:66:FB:DF
            X509v3 Authority Key Identifier:
                keyid:9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:40:bc:48:31:f9:ef:2f:a6:82:2b:70:e4:5b:d8:04:9a:cb:
         44:be:25:51:f3:7f:32:5a:a5:d8:ad:9e:97:58:a2:3a:81:e4:
         bc:e4:ef:e2:87:9f:8d:34:81:4e:44:ec:06:4a:7f:4c:ce:46:
         bc:7f:73:79:b6:12:b9:60:75:13:28:fa:a4:e4:74:86:2e:39:
         46:c8:8a:42:67:e5:69:3c:bb:fa:a1:3f:4d:06:34:35:27:95:
         be:86:88:6e:a1:15:17:c6:e5:c1:ec:9f:a1:a8:75:a1:92:a4:
         6e:65:7d:6e:ad:13:38:50:f0:b1:ed:69:fb:79:cb:09:28:56:
         e3:22:bd:03:93:86:bf:a0:57:25:44:e2:4c:d8:83:6a:82:e6:
         c0:18:92:58:53:e8:79:dd:0a:27:b0:34:72:31:67:2b:b8:36:
         a5:d2:18:42:2a:c0:a0:d1:03:23:a7:e2:62:67:f7:57:d2:34:
         ae:01:a7:4a:65:52:b5:ba:c7:a1:9d:06:5b:97:8d:c7:f3:db:
         c9:dc:11:c9:a4:2e:4d:89:eb:87:43:e5:9b:82:87:85:2e:93:
         e7:b0:d2:2b:f8:bf:bd:ec:19:83:a5:f3:b4:b6:2d:37:ae:11:
         b3:51:62:d5:4e:54:12:69:e4:90:10:7f:f4:a5:f3:45:d8:05:
         32:e5:f0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:20 2026 by rpki-client