Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
File:                     3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft (raw, json)
Hash identifier:          TydGSAFJ9tR/0PySYaCP7yBFd4/ymlhN9FPTgQaP0ro=
Subject key identifier:   F9:00:9C:53:14:73:0E:B4:B5:71:DB:56:3B:FF:89:D4:C4:7F:A2:75
Authority key identifier: DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
Certificate issuer:       /CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Certificate serial:       019D9A3E774CFED9BE5EF6716147A0B3D8D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 07:01:18 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:18 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:18 +0000
Files and hashes:         1: 3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl (hash: x/61IhxhGewZO3zFBuD2ioabxuL+j5ydHghX7RtWtlc=)
                          2: 7x2m-lU6FNS5yqv5lwyGFac_X4Y.roa (hash: y5TlPBhDp/P3UW7VHo9Ke01pzrHP6whRVTrTY5Gd794=)
                          3: Sci8cSSHIwK8cAd-Z2NXFaGyt8A.roa (hash: RPjdlL4lf1ZtlD+1fltmcMb4oq51gUanC3qSsemgh8s=)
                          4: pUQRSDfWqJEoJFfVuZVUVOmlYsk.roa (hash: 9jvQHXY6BnSchwKk/mPiFTBcmMYYo7JbR6ZjMBc/ZDo=)
                          5: uLHH6IqO22bZWZTgO9nKR2wQbJE.roa (hash: laj7eTzK3jKEChy9oG/lzbHF9H3dpCdbB2ksudV3h+Y=)
                          6: wt4arE8aq0j9QUnZdYjCgQA4KE8.roa (hash: Wf+8drhwEyYnWOvWQqOC+IPf2/ohM2ew9EmbUhWiq90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:77:4c:fe:d9:be:5e:f6:71:61:47:a0:b3:d8:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
        Validity
            Not Before: Apr 17 07:01:18 2026 GMT
            Not After : Apr 18 07:01:18 2026 GMT
        Subject: CN=f9009c5314730eb4b571db563bff89d4c47fa275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:c2:40:8b:52:9d:ea:23:26:17:82:46:62:
                    f4:cb:82:32:d9:d5:31:7e:0f:30:19:3e:c7:8d:ca:
                    a9:13:d4:84:0c:83:17:c5:44:48:df:49:df:3f:af:
                    35:28:c9:08:bc:59:c3:be:78:4f:1d:22:66:3c:36:
                    f3:08:8c:3c:82:9f:08:91:56:90:ca:95:1c:ab:b1:
                    14:77:08:e8:4e:5b:58:cc:74:d5:db:83:8b:a3:82:
                    1d:61:47:76:58:31:f3:3b:e4:1c:58:94:d4:9f:45:
                    78:f1:5f:9a:4a:09:cc:67:71:96:3f:15:68:4c:0e:
                    f8:89:80:60:29:f1:5d:9e:0e:ac:80:8b:28:99:18:
                    c5:c2:6c:67:df:42:e6:8c:a8:93:70:38:d8:74:63:
                    ce:17:c7:3f:99:1a:3b:b8:83:95:c7:a5:a4:e0:0e:
                    af:46:cd:10:4f:91:ce:46:34:27:e5:78:9e:f9:87:
                    a9:a9:17:06:1a:d1:0d:27:b3:11:04:45:e3:4a:d7:
                    d5:83:00:b8:a2:64:ba:d3:13:8f:40:71:8c:96:a9:
                    e6:dd:19:97:98:e4:7c:66:10:cc:89:71:ae:27:d8:
                    76:41:9c:ba:5a:87:76:a5:58:15:8f:37:89:b6:47:
                    af:84:5f:e1:b8:2a:d1:45:f0:1a:a3:5a:cd:c3:1c:
                    bf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:00:9C:53:14:73:0E:B4:B5:71:DB:56:3B:FF:89:D4:C4:7F:A2:75
            X509v3 Authority Key Identifier:
                keyid:DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:39:12:24:eb:18:a0:7b:2c:d4:8b:30:dd:10:27:eb:25:07:
         58:c3:ab:7c:33:29:fc:f5:17:24:72:59:1b:50:b2:95:97:98:
         e4:e4:ac:18:3d:e5:95:75:43:ec:d5:e5:94:96:0e:d8:ab:a4:
         fd:e2:10:fc:c3:05:f5:f0:a6:45:06:d1:be:de:63:44:b9:f2:
         00:44:a4:f2:97:8e:13:95:05:ab:65:4f:3c:5a:15:8e:bd:6e:
         e1:7b:48:c6:2c:c8:a2:ec:ea:c5:f6:83:c6:99:f5:de:9e:73:
         a5:69:b8:1f:34:8d:4e:a1:e9:a0:84:45:b7:f1:af:3b:55:ff:
         43:f7:ee:b2:88:a4:11:db:ac:f1:2c:72:6f:ba:bc:bc:4f:97:
         8d:e2:1c:f0:1e:92:22:9a:f2:d6:92:a7:1c:d7:12:a9:8d:f7:
         fa:91:df:e2:16:b5:86:1b:c4:ed:98:a0:69:15:fa:00:64:7a:
         45:9b:a1:76:e0:c9:b8:84:25:07:27:b4:05:f0:cf:2c:92:0b:
         e5:64:62:f0:c0:ae:66:32:06:5b:c9:c3:81:34:27:34:5d:75:
         06:ec:bb:6d:77:ce:48:29:64:b1:85:0d:0d:1c:6c:50:a8:89:
         2c:b6:34:5a:ac:d3:44:c9:65:0a:c7:13:f2:2d:43:1d:5c:da:
         ca:2e:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:20 2026 by rpki-client