Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
File:                     9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft (raw, json)
Hash identifier:          cosPUM3qhD0YdT33oXedySvWvpvMJligKmBlZx7BseY=
Subject key identifier:   56:63:2B:C3:CF:AF:20:4A:AF:57:BD:7E:82:C8:CD:6A:D2:D5:AD:26
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Certificate issuer:       /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial:       019D99D012712CD85207EDA3891BADB44A79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
Manifest number:          18D2
Signing time:             Fri 17 Apr 2026 05:00:43 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:43 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:43 +0000
Files and hashes:         1: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl (hash: kn5XXau6ZqaXsPaILFYx9563nJIeYLH/aw5JvSwDafU=)
                          2: U5Hr7DVltimNN4exYtKNMwjtw8w.roa (hash: a1GYmzluOFIdh7d+x71WU9ozZYGhuTpIQod/AeGpY6Y=)
                          3: pnoNDnBxEfC2Y0eOSu3ZLvoJ8bE.roa (hash: fiAhIReHkKJDspHClaY6l1S5vNnjpZ4eQPqh1G/RGnQ=)
                          4: shwoCz68cKqwcN5qi3XrzWkO2xo.roa (hash: vsl5wyUpfTDJC2irw4CHdq3XYydWiX8/t9r4NWlOM68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:12:71:2c:d8:52:07:ed:a3:89:1b:ad:b4:4a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
        Validity
            Not Before: Apr 17 05:00:43 2026 GMT
            Not After : Apr 18 05:00:43 2026 GMT
        Subject: CN=56632bc3cfaf204aaf57bd7e82c8cd6ad2d5ad26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:49:0e:a3:c2:11:96:58:28:0d:52:97:82:a0:
                    14:7c:7e:98:84:62:86:08:b8:e5:cd:39:be:6e:36:
                    1e:3f:96:1e:f1:f7:7b:c4:0c:21:2f:c8:a0:64:a0:
                    bd:eb:58:d3:ba:b2:b1:7b:16:af:ab:8c:e4:e4:31:
                    f9:50:9b:1e:00:cd:5d:99:1d:4f:40:8a:fd:ff:6c:
                    94:39:e7:6c:51:ce:2f:35:b1:61:4e:3c:7e:8c:fc:
                    a8:08:5c:27:8c:4f:c7:63:78:d5:e6:9c:73:4c:b6:
                    7b:9d:1a:db:1f:5d:7c:23:8a:0f:33:fe:d8:a2:af:
                    e7:db:82:3a:6d:bd:0c:0e:fc:9c:5a:9e:75:67:01:
                    f0:2c:18:2d:18:8d:41:96:9c:82:f2:de:99:7a:e5:
                    08:ef:5e:37:a9:4d:77:9a:1c:e6:2a:4b:b8:de:ce:
                    4e:10:a0:ff:76:9c:8a:09:cc:13:d4:69:c3:59:92:
                    c8:7f:cc:4a:e8:ae:43:f1:fc:52:04:6d:f3:b8:46:
                    af:0b:29:28:51:12:1f:e8:83:7c:5d:ad:2c:03:07:
                    56:da:9d:81:a5:7a:ef:df:92:94:05:de:c2:9c:e1:
                    70:01:b0:8a:1d:29:aa:4a:34:94:5c:ef:c2:eb:ce:
                    f2:e5:65:16:0a:7e:b9:59:9f:14:00:26:29:0a:69:
                    fb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:63:2B:C3:CF:AF:20:4A:AF:57:BD:7E:82:C8:CD:6A:D2:D5:AD:26
            X509v3 Authority Key Identifier:
                keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:cc:49:d6:77:c8:27:de:27:03:45:ed:46:56:82:a9:61:00:
         ed:1c:9f:eb:19:71:86:d9:3f:ab:a2:bb:78:09:f7:cb:db:39:
         c3:b2:49:1f:95:06:40:53:c1:26:ba:c2:c5:82:78:63:9c:2a:
         b3:59:f5:ee:c8:89:cd:93:eb:af:ab:6a:4a:95:65:be:01:2c:
         b8:54:05:8c:c7:ba:4d:ed:e8:76:61:91:38:6b:55:92:e0:4b:
         33:d3:61:a6:69:5c:d5:3a:06:44:df:c7:01:95:96:b0:58:16:
         57:f5:88:0d:71:f3:84:1e:69:1d:80:5a:d8:a5:e2:09:b3:f0:
         15:85:51:fa:85:3b:d0:0f:4d:fc:15:0c:65:a4:97:01:bc:c7:
         86:ec:7b:06:8d:56:60:70:0d:26:bf:72:45:e9:b0:88:f9:ce:
         b2:83:d5:2a:bf:47:b2:b9:e5:88:bc:1f:c7:84:cb:d9:08:7d:
         b6:40:64:7f:a1:cd:b5:ca:00:55:46:52:13:8c:42:d9:4b:61:
         43:cb:53:80:6a:2e:5c:48:13:d9:6e:bf:c8:36:e0:01:dd:b0:
         db:aa:9c:98:7e:b7:2c:5c:ef:1b:a0:92:f2:ca:d7:96:b3:29:
         90:3f:e2:98:73:63:ed:fa:a8:1e:5b:93:1e:0e:1f:3c:ab:10:
         b7:ba:ba:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:24 2026 by rpki-client