Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
File:                     F1lDaGkInNnH5tAgKPJKL-SbhtU.mft (raw, json)
Hash identifier:          lA2xOpxSFdtgcB2RRbQUF85Yxp7K8Ex1qCtreAZYHTs=
Subject key identifier:   31:1B:D5:38:85:27:2D:A1:54:96:4A:AC:F4:28:62:9A:75:90:17:A3
Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
Certificate issuer:       /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Certificate serial:       019D9818D7EF75E3F07CF50BC8FE7BF98C27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
Manifest number:          18CF
Signing time:             Thu 16 Apr 2026 21:00:58 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:58 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:58 +0000
Files and hashes:         1: 7QjRRYA7jcCFNync-7ZqAYQ9Lvk.roa (hash: Ww9Vf4lv8aoiNND6Ah1rgZbAtQ03hE7wpG+7oWtfpX4=)
                          2: F1lDaGkInNnH5tAgKPJKL-SbhtU.crl (hash: XqtZ/PG+IcXsUjMs0DtyEV3FSrQSmjxvGspgyLG9srM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:d7:ef:75:e3:f0:7c:f5:0b:c8:fe:7b:f9:8c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
        Validity
            Not Before: Apr 16 21:00:58 2026 GMT
            Not After : Apr 17 21:00:58 2026 GMT
        Subject: CN=311bd53885272da154964aacf428629a759017a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:08:52:9f:15:11:71:f5:f6:27:50:11:f0:ad:
                    3b:25:62:79:8b:62:3f:cd:b9:62:a3:42:44:e7:21:
                    50:00:96:09:1a:8b:ab:08:42:74:3d:be:c6:8d:bd:
                    53:53:a2:57:36:6c:f3:88:0e:60:6e:ef:b6:e9:17:
                    e4:a0:14:32:78:ac:2b:f6:0b:ea:25:11:c6:ed:d0:
                    20:46:2d:7c:e3:ea:88:9d:50:5d:f2:86:09:63:b8:
                    ba:27:8e:16:6c:08:df:14:01:5c:25:77:73:58:02:
                    3f:1f:51:90:f7:4e:fc:b7:4b:95:20:6f:f9:13:38:
                    44:21:1b:9f:dc:d1:c4:c2:f0:72:2c:da:47:65:c9:
                    89:0f:69:c4:ea:7f:29:f1:df:b4:2f:02:33:3f:81:
                    a2:cb:2a:dd:04:5d:3e:ce:86:1e:a3:4f:91:75:7d:
                    e0:14:ed:35:ee:72:83:8a:80:81:21:dd:e7:4a:02:
                    bc:55:3f:70:6e:f9:46:2e:43:23:bc:a8:24:f6:1e:
                    ba:d7:9d:25:5f:28:a2:d9:43:0e:be:92:74:4e:2a:
                    3a:3c:a0:f4:28:cd:8f:e6:a5:25:5b:07:3e:6a:e4:
                    2d:fb:a0:90:80:fb:c0:e3:a2:02:9d:f8:c4:2a:06:
                    38:2a:bd:d8:4d:4e:72:2c:aa:56:d6:6b:8a:cf:9c:
                    13:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1B:D5:38:85:27:2D:A1:54:96:4A:AC:F4:28:62:9A:75:90:17:A3
            X509v3 Authority Key Identifier:
                keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:1e:19:49:d0:72:f4:b8:eb:90:86:cd:4b:3b:f0:e7:ab:b8:
         aa:02:30:e5:b8:5b:02:1b:03:8a:ba:63:ea:ef:c6:a4:c1:2f:
         10:4c:7e:7f:76:1e:fa:79:ab:f2:25:44:d1:e2:b8:95:27:c5:
         45:f5:bc:de:03:6c:e4:e4:10:03:cc:95:54:57:52:a8:6b:03:
         e1:0d:e6:e4:0a:45:2a:c9:39:b0:62:69:07:99:a3:9a:da:76:
         38:e2:2d:46:d5:77:bf:35:29:0d:9d:61:ca:57:0c:0d:fd:10:
         14:87:44:48:0a:35:f2:1c:73:97:c2:45:49:19:47:cf:73:0b:
         2c:d0:66:da:7d:49:e2:90:fe:2c:e0:0f:d9:bc:ba:54:15:18:
         93:60:97:76:73:32:c6:5f:95:7b:e8:cc:ff:80:02:6f:14:8b:
         ff:29:49:0f:e9:f4:ea:dc:44:7d:39:92:a4:0d:13:5d:2c:e5:
         75:18:e7:07:cf:ac:b5:5b:2f:35:a8:c6:28:2e:6d:4a:3d:04:
         2b:88:64:25:5a:b2:83:1a:7f:bf:14:a2:02:cf:87:60:78:ba:
         17:d3:63:97:89:17:93:32:ed:de:e6:ac:33:0d:b4:51:a9:17:
         4b:82:b2:b7:f5:54:65:ca:c2:3c:80:00:49:03:07:1b:6a:d9:
         39:48:4e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:31 2026 by rpki-client