Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
File:                     i_ynyW6ARQWki5lgPZshJPHdNwI.mft (raw, json)
Hash identifier:          JFsesC0A1uQO1cvG8sRUCQ5Lhd1Ct/sstplGo/6RHZA=
Subject key identifier:   6E:D9:A3:01:62:EB:AD:D2:05:48:AB:6C:BD:69:AD:FA:AD:52:B1:79
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Certificate issuer:       /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial:       019D98185C73C00D5B223921A514CC96AB28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
Manifest number:          18C3
Signing time:             Thu 16 Apr 2026 21:00:26 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:26 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:26 +0000
Files and hashes:         1: 3fmRvkperMmvyU4KqpsUtOxTyt4.roa (hash: 7eZzl4W/3A8ZztuV2lmxwvx6VP7+Qvs+/fsXhTjc0rc=)
                          2: 7Tcz0pE1-IDNMp7AQ99DVCGrgjI.roa (hash: IYa4nqDQg0w4fOWwfwmQezvrBABwOK7SbfWTarCYxSQ=)
                          3: 7W1NXgkMSkIdBVSG746iQwH_IUI.roa (hash: 8/Z+GxzPEApZfT9MVxqAMLn34ihqPk9rP7wFg/FqfLU=)
                          4: EdFWUcc8IVOoO0eCHGrnGkFmsGg.roa (hash: hRMzKjUqKk1WuOs7kzmRaFOXrwrTn6B37s4zIKdomao=)
                          5: Ljk83VCvMFaaB88IfYzmXG7UKBY.roa (hash: f8wXBBWZbB++s5ojWl86XJPa1ZQ8YeSsSho2itzHWeE=)
                          6: MVvq6Rgk9g4xb6udrHASJS9rhUU.roa (hash: M5I2tbJMcYnMo8jDDImO8+z5cJdQDV2EBlWZ+aqbq4Q=)
                          7: i_ynyW6ARQWki5lgPZshJPHdNwI.crl (hash: F6AmB/kysJMqW/LTrUh43jwxQs/uUGkuNGwQxIuB6D4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:5c:73:c0:0d:5b:22:39:21:a5:14:cc:96:ab:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
        Validity
            Not Before: Apr 16 21:00:26 2026 GMT
            Not After : Apr 17 21:00:26 2026 GMT
        Subject: CN=6ed9a30162ebadd20548ab6cbd69adfaad52b179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ef:11:98:a3:a1:3b:6c:35:af:42:ae:d2:61:
                    01:22:ef:30:18:7c:2f:68:d7:96:08:3a:ed:78:7f:
                    6b:f1:e4:2b:a6:eb:52:57:a0:e0:3f:34:03:4b:d5:
                    bd:23:24:4a:ea:2b:49:39:2b:f4:70:c4:52:20:c4:
                    42:dc:b5:29:11:c0:74:59:45:4f:bd:7e:4a:34:df:
                    4b:f8:46:5d:0a:86:28:92:b9:8c:93:c6:13:f0:f9:
                    a0:da:a6:82:78:7d:66:ff:c9:5a:ef:f9:2b:7c:39:
                    57:82:bb:dc:c9:4f:e8:70:e4:61:d7:35:ec:8a:08:
                    cd:4c:1d:ee:78:62:67:dd:3e:d7:3b:6b:6e:ae:be:
                    7c:cb:ea:a4:44:36:39:a9:69:84:65:b9:20:95:15:
                    12:14:2d:f5:52:64:4d:70:9d:78:5a:f8:19:25:e1:
                    42:ee:66:e5:91:77:d7:1c:df:ed:f9:52:84:59:a9:
                    31:bc:d5:27:30:21:ac:00:b5:e3:39:25:bf:0e:f2:
                    8c:5c:bb:3d:12:fb:07:0c:5a:19:ae:56:79:8c:c3:
                    b9:f0:cc:70:0b:44:8d:49:4d:20:38:7b:fd:bb:0b:
                    c1:d9:70:5e:d5:a1:7f:9f:cb:39:36:75:4b:00:67:
                    df:54:bf:64:b1:32:59:38:06:7f:64:d5:8d:c5:22:
                    48:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D9:A3:01:62:EB:AD:D2:05:48:AB:6C:BD:69:AD:FA:AD:52:B1:79
            X509v3 Authority Key Identifier:
                keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:35:bd:95:47:87:73:0c:06:d1:67:d3:07:cc:e3:39:5a:cc:
         6e:d4:f4:a4:04:71:53:63:38:99:6b:d6:2e:48:b1:11:cd:b6:
         b5:9e:08:17:89:c4:f9:27:ba:a5:93:df:d6:52:ec:41:45:12:
         a3:f6:b3:10:a7:65:fe:4b:a2:92:f1:2a:4b:98:b7:43:b8:cb:
         0e:b7:6f:0f:02:a8:e1:3c:8d:c1:53:cb:9d:ff:66:ab:da:70:
         98:30:5d:5c:94:f4:e5:95:10:8e:a9:04:ac:5b:71:62:75:50:
         2b:64:c8:bc:7e:98:68:e9:c6:3a:7d:ac:d9:e1:0d:6a:06:b5:
         85:8e:4f:f4:22:90:8c:f2:14:e2:23:cc:4a:8c:df:21:d8:36:
         8c:56:fd:bf:a1:2b:83:72:2b:44:6b:8f:23:c5:04:03:d7:ca:
         94:8c:97:ae:42:b4:51:08:e3:88:f3:b3:f8:72:0f:43:08:7a:
         b7:67:43:d3:b2:a5:bb:27:59:1b:58:82:95:7e:97:c5:a2:88:
         7c:ea:71:29:f8:e0:98:a2:95:a5:68:1a:d6:b8:3e:79:49:94:
         1a:25:c2:52:b4:20:0c:8a:c5:06:fb:13:36:ba:dc:22:a7:64:
         00:aa:42:09:14:35:d9:5f:5b:19:a0:23:63:f7:e1:70:75:8e:
         36:25:8a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:03 2026 by rpki-client