Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
File:                     ud8VbuGLaVjUMGtjEbSghnY-_2I.mft (raw, json)
Hash identifier:          Jge96aAq6nxL/cUWATyKR8L3VYnUZ4QPOPoq8fKrhK0=
Subject key identifier:   10:C5:77:0C:4F:B6:B8:F9:3F:5F:BB:55:63:CC:92:00:37:70:BC:23
Authority key identifier: B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
Certificate issuer:       /CN=b9df156ee18b6958d4306b6311b4a086763eff62
Certificate serial:       019D98F50BBADAB7FE7CB37C4D7CC9FF1A85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
Manifest number:          14CF
Signing time:             Fri 17 Apr 2026 01:01:29 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:29 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:29 +0000
Files and hashes:         1: 189oV8GncXIuUHjeoI_E8INYiQs.roa (hash: 0A49Lxa8+HmOmnCCbU77IrfpJ/mis7ETSIxuX6hEu0Q=)
                          2: T_XFNeZT8y3cvlmC-FDGyTbQPEQ.roa (hash: yPf4MjNnJsPVmh5cf0exZFQpxpGLZw774YP/hVrhXHU=)
                          3: ud8VbuGLaVjUMGtjEbSghnY-_2I.crl (hash: UMLeERDNNDlyrkUWdk7bkigyt8gFw3FjkjuB5YOTN58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:0b:ba:da:b7:fe:7c:b3:7c:4d:7c:c9:ff:1a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9df156ee18b6958d4306b6311b4a086763eff62
        Validity
            Not Before: Apr 17 01:01:29 2026 GMT
            Not After : Apr 18 01:01:29 2026 GMT
        Subject: CN=10c5770c4fb6b8f93f5fbb5563cc92003770bc23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f1:b1:bb:d3:ca:d8:ab:41:79:90:24:97:90:
                    5f:80:64:c2:c7:1b:b4:47:96:b2:21:9a:73:b0:d5:
                    67:de:55:25:63:20:dc:9e:31:23:9b:fa:3f:6a:cb:
                    6f:39:d2:a9:07:34:92:f1:f9:e2:2f:06:a0:3e:00:
                    0c:e3:ab:ab:26:ac:d8:f1:26:9c:03:db:50:47:94:
                    32:4b:5b:c6:e4:72:b9:d1:44:70:04:65:21:01:8b:
                    0c:02:d5:19:6e:b2:69:ad:64:ab:24:d8:b3:ed:7a:
                    b8:9b:f3:b0:6b:c3:f9:f5:ca:49:c9:07:8b:cd:1d:
                    e2:1b:c6:be:3f:be:50:4f:ff:01:f8:c0:1e:ec:92:
                    6c:56:88:94:3c:4a:00:70:82:16:09:ce:cf:b0:98:
                    0c:44:15:1b:60:0f:e9:49:7b:c3:a1:89:72:92:a9:
                    10:9d:f9:00:29:17:65:2e:41:43:6d:4d:0c:89:89:
                    69:5e:a8:33:31:9b:d9:8b:0f:0a:af:a4:86:7d:a6:
                    39:1e:a1:98:4a:61:9c:05:9d:6c:31:22:b8:d2:7b:
                    7d:fd:c6:30:7b:91:6a:18:9b:b5:86:fb:49:37:6b:
                    04:09:ac:88:91:14:46:75:fc:d2:0d:24:c0:1c:41:
                    c2:6d:35:da:d6:af:b5:eb:95:be:f1:a9:b1:f9:7f:
                    86:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C5:77:0C:4F:B6:B8:F9:3F:5F:BB:55:63:CC:92:00:37:70:BC:23
            X509v3 Authority Key Identifier:
                keyid:B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:e6:01:6d:d4:e8:82:5a:38:23:3d:a1:8a:6c:10:cf:f4:87:
         dc:f7:1e:02:c8:3f:44:07:1a:b5:2a:3c:db:26:eb:04:71:68:
         d4:a4:f8:ae:d7:1a:69:fa:10:c6:54:7e:52:f0:09:c1:81:22:
         e7:0b:d6:b7:79:db:93:c2:24:0f:79:80:1d:73:fa:71:3c:76:
         a6:79:a4:f9:71:36:1a:a5:9f:7f:6b:d2:93:bb:91:7d:59:2f:
         e3:9b:f1:f2:4e:8f:72:4a:56:ae:92:45:ae:6f:2f:c6:d7:8a:
         7c:14:d7:90:19:61:dd:e4:82:bc:65:19:f4:c1:e8:b7:ff:c6:
         ba:92:c9:b4:f4:92:af:6b:0e:f3:d8:9e:22:dc:02:c4:14:4b:
         52:40:55:86:76:1b:5c:e2:d5:25:33:a0:2c:8c:5a:8c:e4:4b:
         bf:67:95:e9:7f:dd:86:cd:09:9d:6f:0e:b5:c2:a9:a5:16:06:
         62:df:80:a0:8c:94:c0:6c:8f:59:d4:a5:1b:65:5b:da:e7:98:
         69:44:fb:53:93:80:a2:54:09:5b:e1:22:19:af:37:c8:b3:f6:
         e3:df:29:6a:89:8c:7f:e8:82:ac:70:50:54:2f:7a:7c:db:03:
         b8:61:b5:b4:91:9a:83:41:2c:7f:00:8d:54:b9:ce:ed:29:33:
         4e:f8:40:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:24:11 2026 by rpki-client