Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
File:                     1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft (raw, json)
Hash identifier:          HKqHSkh+sRqM5oH+gARCOhr9BrEatjzb9vsoZHgb6UU=
Subject key identifier:   DA:44:20:7C:DC:66:86:55:F9:02:30:49:4E:D9:32:DF:73:9C:F0:F3
Authority key identifier: F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
Certificate issuer:       /CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
Certificate serial:       019D9AABBD0A57226AEE3699C0FEAB2223D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 09:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:39 +0000
Files and hashes:         1: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl (hash: BkuEhDjgb31WEUziTDxm9aQ8vGq3gjh23YMVeH7nVBU=)
                          2: WKc4Vos6EgMcwq2jPs8Vo_T2gKg.roa (hash: cCxzpDSEtEshoJyIVMHZls1v4t+x9ri7tVY5Xlsvk/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:bd:0a:57:22:6a:ee:36:99:c0:fe:ab:22:23:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
        Validity
            Not Before: Apr 17 09:00:39 2026 GMT
            Not After : Apr 18 09:00:39 2026 GMT
        Subject: CN=da44207cdc668655f90230494ed932df739cf0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:34:48:28:5a:80:1a:c0:7e:1f:e5:f2:77:88:
                    41:ff:c6:4f:d4:23:de:60:ee:69:ca:1f:96:d5:38:
                    a6:2d:77:4b:0e:90:96:de:8a:2d:5d:6c:f1:83:46:
                    55:13:d6:77:de:6a:56:97:e8:a2:d7:11:e5:73:89:
                    c3:f0:e4:62:90:dc:52:2b:d4:57:29:a6:78:30:58:
                    de:5f:7f:99:6f:1b:1a:40:bf:7b:41:0f:26:27:4e:
                    e4:d7:33:17:a8:59:00:99:28:c4:35:71:3a:00:1f:
                    27:61:36:6e:0f:81:c2:6a:7f:ba:3a:9f:fb:e8:02:
                    c3:15:68:60:fa:f9:45:a7:59:3c:93:f0:83:23:2d:
                    8f:57:11:68:29:d0:18:f9:84:ff:7b:d5:aa:1d:b9:
                    60:0c:af:d1:36:8b:63:c5:0f:81:fb:95:05:59:5b:
                    60:c0:45:b2:48:56:5d:97:37:1b:40:61:3d:11:aa:
                    6b:a1:d1:89:35:c8:92:b0:5a:9d:04:88:99:d2:03:
                    c5:50:af:c6:fb:d1:c7:82:fb:e5:0e:c5:36:31:f2:
                    78:4d:b5:bf:ac:20:37:95:34:16:d8:c5:4f:df:d3:
                    fd:de:a2:cd:ec:53:e2:ba:41:ff:d5:11:e9:2e:19:
                    a4:75:8f:ce:1d:f1:c1:d1:59:16:61:8e:93:f5:9e:
                    01:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:44:20:7C:DC:66:86:55:F9:02:30:49:4E:D9:32:DF:73:9C:F0:F3
            X509v3 Authority Key Identifier:
                keyid:F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:64:6b:23:bc:d9:22:ef:29:4b:63:e8:b3:21:6e:e5:1d:91:
         3b:3c:b5:a5:4d:f9:06:5a:b7:58:26:15:b6:a2:91:14:1c:57:
         30:cf:17:92:0d:99:15:1f:29:28:e5:97:67:49:23:92:b0:8d:
         01:c8:dd:dd:7e:a2:59:1c:9f:25:9e:fd:09:91:54:8f:06:0e:
         7a:a5:bd:84:55:90:75:85:c0:de:97:91:84:ad:b7:8e:c3:7e:
         7e:a1:ea:50:28:6c:20:11:19:48:66:bd:0e:75:75:4a:e1:c7:
         1a:e6:46:bc:ce:0b:43:26:24:44:d8:25:a9:cb:92:5a:bb:67:
         92:07:2d:59:1b:6b:c1:33:d8:92:5c:e7:1e:94:9f:b8:f4:33:
         e9:eb:ef:99:f7:b1:c9:0a:1a:75:80:7a:20:24:73:c7:56:75:
         fb:1a:63:9f:2b:48:2c:9b:6c:2a:20:6c:19:1b:17:81:d0:f3:
         9e:06:d0:ec:2e:c1:24:b0:1a:b1:76:94:6d:f3:5d:7a:63:71:
         8b:6d:ed:4b:35:59:86:79:de:c6:31:75:58:a3:e4:1c:a0:8a:
         b5:30:1d:e0:af:b7:22:73:b2:f3:ba:d4:47:f8:10:c0:7f:5b:
         34:67:be:91:df:12:cb:16:7e:7b:84:3e:61:30:db:b6:82:2b:
         a8:cb:0c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:00 2026 by rpki-client