Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
File:                     tTZGbQNoUuL3N2reE4BGFDuZTMM.mft (raw, json)
Hash identifier:          tyK8lE47jAkOxsUVxv4WydHkXEf++aWn4reKUwEer6I=
Subject key identifier:   8B:6E:CA:00:9A:C0:B2:CD:28:F1:F6:BF:13:CA:B4:45:A2:8B:8D:EE
Authority key identifier: B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
Certificate issuer:       /CN=b536466d036852e2f7376ade138046143b994cc3
Certificate serial:       019D9B51566EF966029054881E48A6ADAB0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 12:01:32 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:32 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:32 +0000
Files and hashes:         1: jvm0Jb2t-rhkSp6peUmj4YlckCw.roa (hash: HiAafUtSRh0L7KEZV70WFw7qC8V7XryLQINqzFQNUHA=)
                          2: tTZGbQNoUuL3N2reE4BGFDuZTMM.crl (hash: 8UR2XVeF2g6ctZx4lQbmcYaCXV0YdPykjwXWU3PJCRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:56:6e:f9:66:02:90:54:88:1e:48:a6:ad:ab:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b536466d036852e2f7376ade138046143b994cc3
        Validity
            Not Before: Apr 17 12:01:32 2026 GMT
            Not After : Apr 18 12:01:32 2026 GMT
        Subject: CN=8b6eca009ac0b2cd28f1f6bf13cab445a28b8dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8a:a0:61:5b:94:d9:c3:28:92:04:5f:c4:ce:
                    52:25:30:3a:66:70:78:6e:5e:c5:61:8c:7a:df:6a:
                    c4:62:69:a1:b6:ba:8e:a2:ce:db:8f:58:23:58:a6:
                    bf:b9:a9:a2:8d:ae:ce:97:a9:d9:a0:2a:eb:3c:c8:
                    b4:78:f1:83:42:b9:d2:6a:24:28:44:05:e2:1e:e5:
                    be:8f:a3:34:29:4f:78:83:f2:a9:d2:9b:57:99:da:
                    69:e8:47:55:e2:b7:5e:e9:e9:27:d1:a7:74:39:83:
                    9d:a8:62:22:d5:c2:0c:6d:c9:41:ca:91:d1:35:cb:
                    d7:a4:a5:f8:ef:61:24:c3:3e:ce:06:96:18:5b:23:
                    0d:bd:ab:ff:16:60:74:ae:da:d1:87:a9:c0:13:16:
                    a4:3c:f1:cf:1b:88:d4:6b:62:0a:61:11:11:c3:4f:
                    8b:66:1c:23:7f:8d:c8:df:64:79:c4:7f:aa:21:e5:
                    de:0e:9c:aa:77:55:fa:04:99:77:a0:a4:82:f0:ed:
                    73:9d:73:e5:7b:e5:89:1b:0f:47:49:f7:21:d1:e8:
                    d0:03:07:68:16:a7:81:d1:c0:95:bd:53:4a:03:db:
                    e1:6a:7a:49:c5:2e:ea:a8:c6:a2:91:3a:b5:9e:3d:
                    10:16:39:e4:b8:7e:80:d9:d1:cd:aa:39:1a:c7:21:
                    9a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6E:CA:00:9A:C0:B2:CD:28:F1:F6:BF:13:CA:B4:45:A2:8B:8D:EE
            X509v3 Authority Key Identifier:
                keyid:B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:af:8d:1c:4c:4f:71:29:56:70:ec:20:35:f2:6f:a7:25:95:
         24:b9:84:06:51:5a:bf:66:18:91:59:3a:bc:e7:05:00:83:b9:
         9d:93:21:24:f0:26:22:c7:7a:fa:e4:57:e1:25:a6:ac:8a:b1:
         57:29:c4:f7:ba:5f:f1:fc:ba:0f:1d:c1:b1:69:d4:98:d8:58:
         8d:f9:78:b5:89:17:1d:86:3e:43:05:93:90:46:79:5e:83:be:
         b3:07:e9:7e:5f:8e:af:02:bc:a8:cb:8b:fa:45:b2:46:13:e5:
         d5:e8:bc:c8:b5:ec:ad:60:e4:f6:fe:d4:28:db:9e:f4:47:f8:
         59:8b:c7:f9:f9:6b:e5:a9:3a:cd:34:a5:20:60:90:98:14:a5:
         c6:8f:cc:a6:fc:72:29:33:71:c2:50:ac:38:08:e6:04:de:31:
         98:30:eb:3a:d0:7a:96:5c:8c:9b:d0:a5:84:2d:59:aa:a0:1e:
         16:a2:fd:5b:63:47:86:e1:2f:12:d5:56:08:94:41:f8:78:e5:
         af:d1:bd:b5:b4:ed:30:4d:a9:88:1f:e8:7c:bc:d3:d5:8a:ed:
         43:48:41:cb:7f:5b:90:5c:cf:4e:3b:0d:bc:73:af:6a:7e:80:
         23:8d:30:11:b5:8e:3e:65:05:e2:fe:84:57:84:b6:a4:3e:c7:
         e9:b3:bf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:07:06 2026 by rpki-client