Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
File:                     buuvFSM9mOuO8GLCRfkXNi5jJlY.mft (raw, json)
Hash identifier:          /rD9+y/ESbm1jedw/xFemmFZPK1XIgLB/WPdJ1kbni8=
Subject key identifier:   32:DC:32:E5:15:A2:01:F7:CD:FC:6F:15:80:90:A1:D1:C7:51:34:2D
Authority key identifier: 6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56
Certificate issuer:       /CN=6eebaf15233d98eb8ef062c245f917362e632656
Certificate serial:       019D9A3F1748DA54D198887D5930690B5715
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 07:01:59 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:59 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:59 +0000
Files and hashes:         1: 7JIJlTfBX4PS77oE0Mx0OejSM24.roa (hash: fNa36vATsrsor3PYEeM7hTNfoNAesQKtpUagqEla5bc=)
                          2: buuvFSM9mOuO8GLCRfkXNi5jJlY.crl (hash: DsPLS3WZ+9hjKyAZo7a5hyK8t1HeLmnBD6/TUODxooc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3f:17:48:da:54:d1:98:88:7d:59:30:69:0b:57:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eebaf15233d98eb8ef062c245f917362e632656
        Validity
            Not Before: Apr 17 07:01:59 2026 GMT
            Not After : Apr 18 07:01:59 2026 GMT
        Subject: CN=32dc32e515a201f7cdfc6f158090a1d1c751342d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:46:63:27:53:7e:ad:3f:8e:07:0b:a6:8f:21:
                    2f:b7:83:aa:54:ad:bb:72:cf:1f:f4:a5:bc:2a:c3:
                    23:29:29:34:ef:3a:20:5d:de:02:0a:99:44:53:58:
                    61:5c:38:4f:07:5f:d7:f4:ff:71:8d:b3:b3:7c:60:
                    d9:e4:57:62:10:8e:2e:6c:90:fe:7c:d5:77:20:89:
                    fe:bf:89:a6:41:b0:7b:0c:95:74:52:30:3b:dc:93:
                    05:e0:9d:5e:e0:fa:4d:23:26:18:ed:0f:d1:99:6a:
                    07:2f:b3:d4:4e:0a:e6:32:8e:1c:37:c3:ef:47:f2:
                    d2:4f:37:5d:ad:ae:b4:2f:4d:0d:5c:5f:f9:92:0e:
                    bf:0a:c7:36:88:f1:df:c3:6f:ad:0d:fe:0e:06:21:
                    0b:59:bb:e2:4b:4d:9c:8b:60:43:bb:96:3c:a9:3b:
                    df:0e:66:3b:c1:c5:7c:72:97:ed:74:0b:b0:c6:dc:
                    5c:91:03:3d:ef:44:25:d9:8b:9d:fa:50:2b:59:a0:
                    df:0b:58:3e:29:11:7a:7f:0e:2a:5f:b8:37:2d:9c:
                    98:e6:73:6d:22:47:04:fa:37:39:60:ab:97:6c:ad:
                    2c:1f:2e:f4:45:c2:8f:f4:fc:e8:42:49:bf:a7:98:
                    c6:dd:70:1f:6e:42:2a:f5:82:54:57:0f:48:6b:0a:
                    ba:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DC:32:E5:15:A2:01:F7:CD:FC:6F:15:80:90:A1:D1:C7:51:34:2D
            X509v3 Authority Key Identifier:
                keyid:6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:47:97:10:53:2c:fd:a8:94:16:b2:23:9a:9c:5c:1b:50:c9:
         9f:57:58:94:92:ef:c9:4e:94:3e:f7:7e:75:86:a8:1e:56:f8:
         0f:b7:a6:88:6b:04:3a:88:3f:9e:4d:14:46:c4:64:99:71:55:
         0a:40:ea:c1:f0:89:f5:1d:2f:b9:c3:df:b1:69:31:d2:8b:08:
         be:17:3a:33:f1:ef:01:79:24:22:d1:4b:d4:aa:45:09:d9:19:
         3b:d6:e0:8f:ab:af:91:c5:59:62:6d:73:d7:ad:f7:5b:32:60:
         30:f4:76:c4:a7:40:e5:ed:4d:b9:9b:98:c4:1f:96:85:02:31:
         9f:87:a5:2d:b4:1c:44:7e:73:78:11:d7:a2:ff:be:a4:9f:fa:
         24:64:56:f5:b1:8b:31:7b:63:66:a5:f4:4c:ff:0d:e2:a0:c8:
         a1:89:4c:09:2f:04:ec:06:ec:40:46:cc:24:67:77:0b:56:02:
         02:7c:9f:62:34:b8:17:0e:94:e5:bb:dc:4a:a6:5c:b5:e1:5f:
         08:79:de:01:83:08:01:23:3c:d0:44:85:8e:4b:e0:11:2e:7c:
         f2:fe:87:8a:90:a9:bb:4f:94:8a:03:b9:ee:2a:30:4f:8a:de:
         4b:96:98:d2:c6:62:03:31:56:e1:b7:28:fc:79:39:94:cf:16:
         dc:77:0d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:49:35 2026 by rpki-client