Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
File:                     cEq5aIQnBz_34XneWvAC4J8jYBM.mft (raw, json)
Hash identifier:          w2xwxjmMjhqH9nicUqzlkf0kZTBhX84BBoolDSwDA2A=
Subject key identifier:   21:5A:77:A7:12:4B:F1:65:5A:2F:B0:FC:56:5C:6A:06:9D:B2:FB:21
Authority key identifier: 70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
Certificate issuer:       /CN=704ab9688427073ff7e179de5af002e09f236013
Certificate serial:       019D9C2C73605CC39174C21D286F5333FDC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
Manifest number:          18C9
Signing time:             Fri 17 Apr 2026 16:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 16:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 16:00:51 +0000
Files and hashes:         1: 1-Ri_hsGkr3yDmEKmoOv0YIZXLG4.roa (hash: 56KjRsURL02cJfN9ZbBPqkJyvGYvGYVoP3tBohTeEsI=)
                          2: cEq5aIQnBz_34XneWvAC4J8jYBM.crl (hash: 2lSoCx2mqoJ8yZrtdLkHhyDcitoIOHD9VlRUpOWKUtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2c:73:60:5c:c3:91:74:c2:1d:28:6f:53:33:fd:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704ab9688427073ff7e179de5af002e09f236013
        Validity
            Not Before: Apr 17 16:00:51 2026 GMT
            Not After : Apr 18 16:00:51 2026 GMT
        Subject: CN=215a77a7124bf1655a2fb0fc565c6a069db2fb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:ec:94:17:0e:7c:9a:f6:dd:80:04:99:46:
                    06:7e:56:51:47:22:69:58:38:7e:72:27:e3:a5:6b:
                    c2:90:36:9b:db:ba:45:9f:3a:bf:5f:59:ba:23:83:
                    40:08:1d:e1:2f:97:d6:d0:91:8b:5d:09:60:09:84:
                    d2:15:47:6e:41:34:34:be:97:ea:ca:45:e1:0a:ee:
                    6c:c4:1a:0f:bf:23:18:e9:52:0b:9f:db:b8:af:55:
                    05:fe:38:b7:69:ce:d1:69:0d:57:24:f4:fc:e0:59:
                    b3:00:83:47:98:ae:d3:5e:e2:17:7b:67:e9:8a:a2:
                    ac:05:f0:63:10:d3:9e:b5:1b:2f:06:a9:56:76:97:
                    8a:38:76:07:75:60:c0:9b:fa:6a:e2:02:81:4d:c9:
                    72:0e:cc:8b:42:68:a1:3b:b0:bc:d8:27:8b:9b:41:
                    ed:d5:a9:a8:74:14:9d:7b:00:4d:19:e4:65:36:5e:
                    61:d0:fe:62:49:51:29:18:ed:a5:ba:a1:8c:d3:c5:
                    b8:0a:fb:5a:90:7f:a2:bc:29:3b:62:08:35:a8:20:
                    58:81:13:b3:5c:04:3f:37:fe:2c:3d:7a:fc:b0:c9:
                    00:48:5a:23:82:f6:8c:ca:f8:ff:ef:db:7d:d3:b1:
                    cc:e9:0f:c8:5e:f4:b7:d7:b4:48:a7:03:fd:2e:c9:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5A:77:A7:12:4B:F1:65:5A:2F:B0:FC:56:5C:6A:06:9D:B2:FB:21
            X509v3 Authority Key Identifier:
                keyid:70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d8:e0:5e:37:d0:22:fd:97:24:48:bf:67:7c:e0:0d:a0:66:
         08:46:28:20:08:98:07:b3:4d:1c:c4:71:9b:0c:8c:82:45:21:
         99:10:e6:f4:ee:d0:b7:14:a9:a6:47:bb:c0:88:bb:44:69:35:
         bc:55:ca:74:6f:f4:98:d6:9b:1d:bc:d8:73:f0:f2:a5:a9:78:
         42:74:6a:25:60:e2:e1:70:63:55:a9:09:41:03:fc:42:e1:07:
         f4:4b:fe:1a:7a:ec:7b:a2:90:f6:43:d8:32:3e:65:f2:9b:1b:
         22:ec:9a:6c:c5:42:ab:11:1e:47:08:9d:56:43:61:23:f6:5e:
         28:30:7d:99:15:07:55:2d:00:a9:80:c3:9a:5f:75:25:59:f0:
         04:50:b8:e3:15:6a:df:0e:f7:52:9d:94:4e:ff:56:a2:6f:85:
         54:3e:2c:54:1b:00:37:55:ba:ab:99:ee:0e:30:bb:6b:50:13:
         86:23:aa:db:9b:d8:7d:75:d3:1b:f3:be:bd:43:da:61:01:79:
         79:69:76:2e:12:ac:d7:1d:37:78:d6:17:7b:b9:3f:68:7e:24:
         ac:9f:9b:87:81:33:ee:a9:2b:86:d1:93:bc:69:9d:51:bd:1b:
         fa:13:0c:44:c9:a2:89:f9:fa:e0:b8:4e:08:58:ca:4d:f9:98:
         89:e2:9a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:39:31 2026 by rpki-client