Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
File:                     o6_ki_2taeNcg9MTDTWJfM_F788.mft (raw, json)
Hash identifier:          yzK3CGTV3Jp6BLQs8hFRtrbXqhuQsvaMkmuVLhhVMJI=
Subject key identifier:   49:55:80:4B:43:D5:5F:BA:2C:D0:67:A3:84:26:F9:BD:C4:33:5D:6E
Authority key identifier: A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
Certificate issuer:       /CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Certificate serial:       019D99D0AAA52237B1FF13109B098F9D6524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 05:01:22 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:22 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:22 +0000
Files and hashes:         1: NYMylwf9Dy99-jdoW6MOpMPvCDc.roa (hash: 7KWu6+hM3g4WTQ+ghonIl9FYPPPFYnrLy9X/U5RAaK8=)
                          2: o6_ki_2taeNcg9MTDTWJfM_F788.crl (hash: 66GDxrFaG+gpQNpTQeiJwd2QCYYNze85sWQ3iSvByEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:aa:a5:22:37:b1:ff:13:10:9b:09:8f:9d:65:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
        Validity
            Not Before: Apr 17 05:01:22 2026 GMT
            Not After : Apr 18 05:01:22 2026 GMT
        Subject: CN=4955804b43d55fba2cd067a38426f9bdc4335d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:80:c3:e6:4c:ce:24:35:df:0f:8b:94:89:16:
                    be:73:4b:b0:5d:10:8c:12:48:7b:a2:8f:a1:71:2d:
                    7e:6a:c5:cc:78:fb:45:6f:3f:d9:2d:1e:b1:34:7d:
                    41:f9:80:fa:e4:e9:b5:af:ca:77:77:ea:9d:85:01:
                    5f:d0:df:10:51:04:d9:50:14:e2:5b:e1:6f:1f:65:
                    96:ab:6c:8f:fe:a0:d7:b0:28:27:de:b3:8f:40:25:
                    fa:1d:9a:02:90:d8:1b:e8:5e:1d:34:19:05:e6:d4:
                    1e:8a:58:70:25:17:89:a9:39:84:c3:49:50:d1:f9:
                    a4:b9:cb:d4:66:c7:76:f2:cf:29:4e:64:d8:b5:f5:
                    c7:c0:aa:63:64:ba:c7:b3:d6:1a:ce:bf:fe:3a:4a:
                    16:04:f2:79:22:7d:3b:27:32:f9:8f:ca:44:75:57:
                    ae:94:62:ae:9a:04:8b:58:0f:b1:00:fc:bc:2c:2a:
                    88:88:e1:25:31:1f:f5:1f:26:61:80:1a:7c:ce:31:
                    08:1a:13:67:d8:27:bf:0a:f7:ef:dc:5b:94:13:5a:
                    1a:b1:d9:a5:f9:18:d5:ea:29:0b:a5:de:e3:9c:b0:
                    da:fd:41:a9:a8:48:28:19:86:ee:86:0f:0a:ff:49:
                    c0:e9:54:7d:49:d8:ef:48:06:78:22:69:c5:4c:39:
                    95:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:55:80:4B:43:D5:5F:BA:2C:D0:67:A3:84:26:F9:BD:C4:33:5D:6E
            X509v3 Authority Key Identifier:
                keyid:A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:6f:93:8a:00:e9:e5:1b:bb:23:ed:9b:a6:56:a9:96:f3:21:
         85:4a:8a:09:e3:a0:0d:a2:65:f4:79:87:1c:1b:4e:17:82:bd:
         e3:f4:7f:f8:c6:28:86:1e:cf:21:2f:18:35:77:40:38:74:ba:
         42:c2:b8:7a:ba:c3:3e:25:f2:db:ac:b1:10:ae:a4:17:4c:70:
         53:b3:77:98:31:cf:eb:2c:61:3e:4d:6c:35:d8:ad:2d:8a:45:
         c1:45:05:94:8a:d9:90:2d:b6:c0:28:66:95:09:f4:5c:40:ab:
         c4:7b:06:0d:21:61:9e:eb:ec:fa:d8:dd:19:30:a7:41:2e:4f:
         01:67:5e:de:6d:03:7f:0a:dd:96:39:46:73:19:9f:91:f5:00:
         40:84:5a:ee:1e:e6:81:52:b8:d7:24:e8:61:b4:20:80:6f:f3:
         84:7b:85:c4:5f:4a:4d:c4:e5:a6:91:e2:bc:50:a8:75:a2:9c:
         07:ce:da:80:c0:ef:15:6c:48:c2:b1:28:a9:8e:68:33:12:3d:
         14:e4:31:d1:1d:5c:6c:01:b8:b2:78:47:96:ef:77:2d:ca:c9:
         99:ad:5d:d7:e1:9f:0c:ef:54:80:9c:42:5b:11:f4:51:cb:74:
         ed:c0:8d:0e:99:e3:fd:74:9f:f1:45:3f:f3:c0:29:1e:b7:c8:
         f7:c1:d3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:20 2026 by rpki-client