Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
File:                     sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft (raw, json)
Hash identifier:          aYxITqPtobhipIicJ7qK1xaj0nQyhnzhT7foI3Adv48=
Subject key identifier:   C7:4C:C2:40:42:0F:4D:CA:C7:98:B2:4A:9C:B3:80:4A:92:7A:A6:01
Authority key identifier: B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE
Certificate issuer:       /CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be
Certificate serial:       019DA4C1572E0619911522B19C765281355B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
Manifest number:          18C6
Signing time:             Sun 19 Apr 2026 08:00:27 +0000
Manifest this update:     Sun 19 Apr 2026 08:00:27 +0000
Manifest next update:     Mon 20 Apr 2026 08:00:27 +0000
Files and hashes:         1: qLJSTzTBMdJIikbxRR_u5Z_U3GY.roa (hash: iJfkw1OmyUQC6ekqyi7may7oFP/+ECL2L9/K1hz0sgo=)
                          2: sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl (hash: LDzl/6PUhcKpqEWBu5NjiyWrNX9GQW3JXrGhpAMZvhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:c1:57:2e:06:19:91:15:22:b1:9c:76:52:81:35:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be
        Validity
            Not Before: Apr 19 08:00:27 2026 GMT
            Not After : Apr 20 08:00:27 2026 GMT
        Subject: CN=c74cc240420f4dcac798b24a9cb3804a927aa601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cd:89:6f:44:6c:01:0d:6c:78:24:ba:68:b4:
                    10:6e:f4:f9:c6:28:40:8d:1c:5c:32:23:4c:4d:72:
                    46:cd:fb:4c:d4:4c:5b:f3:5f:e9:09:12:24:83:fb:
                    5c:32:0a:bb:6f:0e:25:61:df:cd:52:ff:07:60:34:
                    f1:c2:b5:49:9f:e8:00:71:c2:1f:5c:a8:1c:83:8e:
                    a0:45:73:24:f8:8d:41:83:a5:f4:44:f1:63:3d:c0:
                    e5:9c:13:db:b3:22:0f:4e:0e:bb:bc:3e:4e:4c:7e:
                    c2:c2:48:72:91:5f:51:9a:52:d5:5f:a6:74:eb:71:
                    d9:22:d8:0f:07:7e:7d:83:35:e0:bd:02:e7:ff:2b:
                    f7:d5:72:07:95:df:39:57:3d:08:9f:a3:23:da:a4:
                    44:43:a0:b3:52:50:27:e4:7c:23:31:aa:fb:f7:d3:
                    5b:38:ee:f2:26:46:b5:53:23:47:12:3d:26:c4:69:
                    f1:f3:b2:c6:6b:44:e0:26:e6:04:2f:dd:89:78:9a:
                    2b:bc:e7:19:df:18:98:62:1d:97:3d:44:ec:2e:c8:
                    10:12:95:0b:bc:c4:de:17:ad:ac:c0:f5:7c:b1:97:
                    57:a5:ef:db:2d:b5:c4:32:6e:47:1f:d3:07:04:ad:
                    7c:6c:87:2d:f1:71:7a:e1:58:76:b5:13:ff:7b:73:
                    d2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4C:C2:40:42:0F:4D:CA:C7:98:B2:4A:9C:B3:80:4A:92:7A:A6:01
            X509v3 Authority Key Identifier:
                keyid:B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:54:ee:44:9f:bb:fd:c3:15:e1:bf:e0:76:af:84:3d:fd:1e:
         1e:62:10:e2:80:2f:01:5f:4c:f9:12:53:10:c8:1b:3f:e0:31:
         44:b6:10:2a:ee:3b:16:d9:95:2d:dc:32:86:66:07:c9:2b:40:
         3b:af:af:31:e2:7c:a6:27:bd:6b:05:26:49:dd:3f:08:84:37:
         5d:03:af:1d:73:eb:18:35:1d:e8:7c:31:2b:49:2f:c5:18:28:
         20:ca:14:5a:bd:59:7a:98:f0:dc:79:dc:16:af:09:92:9d:4f:
         13:45:b4:cd:0c:40:d8:5b:a4:1e:7a:a3:e2:bd:62:8e:49:a4:
         7b:a9:ea:fe:52:28:7a:96:a2:a8:9f:64:12:1d:08:5e:e2:2e:
         df:d0:3a:4b:60:85:ef:16:c0:7c:52:8a:72:1c:3c:bb:3f:9b:
         ab:ac:f8:72:97:1a:b2:d7:64:b9:b5:6d:d7:dc:34:b5:f0:04:
         0a:28:c4:2c:5b:b3:a9:0a:d6:78:4a:84:82:56:f8:87:7c:ea:
         a3:f7:33:0e:1d:ca:cd:23:25:64:ed:46:c8:0d:f3:d1:41:f9:
         f8:87:d5:c5:81:ee:00:a3:0e:d9:60:44:4f:ae:4d:36:cb:e2:
         56:74:80:9a:bd:5d:c0:be:87:d8:fc:f9:bc:0f:f3:65:65:78:
         c4:20:7c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:11:15 2026 by rpki-client