Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
File:                     s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft (raw, json)
Hash identifier:          qpb3XkA+3TCaQLPAYco4CFho4rJX2c6Dhj2yDAETf2k=
Subject key identifier:   46:8F:8C:90:C6:1B:23:2C:1C:16:40:2A:84:47:A3:3C:39:0B:95:57
Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
Certificate issuer:       /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Certificate serial:       019D9AABCFD853E7CAD0AC87951D248FC0F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
Manifest number:          18CD
Signing time:             Fri 17 Apr 2026 09:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:44 +0000
Files and hashes:         1: KvgeqJVMtBERBgaWeQ7l2q_TyyI.roa (hash: NJUE6bdAubYbnAUIE6s0c5Wi5PY+ros78NmtfNQmGAk=)
                          2: Of_F0nZx4uUMsyu_MFlv9vqYM6A.roa (hash: V1xfi16Y3WhXqWRGet3YcxqXtnKz/3AWs7HoDzA48YM=)
                          3: _VVNfxdA5_FHj05YYq547OSKmlQ.roa (hash: 13IEzG/o1pmkzrgbkejU8IZuzD7A6Ft+aR2tUe+BCq8=)
                          4: bnU5Q0FeKCXPHTgsxSNx9kV93d4.roa (hash: jfuS4WANPOwG9IyimGe8aZrpP9Pv78GN//1LDqZ2n2k=)
                          5: ck22982XPjtgcPjy954uVGCKcK0.roa (hash: xSnMILKaL4KrwNXzralU8vyZN836vuMs+IKmeHjf9vw=)
                          6: s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl (hash: m/81oOlGbnwVCRNLFImIWJMNhgaOoLOMkrfqxDrO/QE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:cf:d8:53:e7:ca:d0:ac:87:95:1d:24:8f:c0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
        Validity
            Not Before: Apr 17 09:00:44 2026 GMT
            Not After : Apr 18 09:00:44 2026 GMT
        Subject: CN=468f8c90c61b232c1c16402a8447a33c390b9557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:50:8c:a3:11:b6:dc:5b:a3:8f:e0:4f:f0:a5:
                    c3:5e:66:db:52:93:e6:07:c5:cc:0b:50:ec:b7:0f:
                    a9:5c:f6:90:12:1f:51:e0:ea:72:52:10:5c:5c:03:
                    4f:ec:cf:4f:83:0f:08:f3:2e:fa:c8:74:63:77:95:
                    7a:54:16:b0:78:7c:b1:a8:3d:bd:84:17:b2:af:78:
                    a9:cd:1e:4f:68:2e:f0:35:71:75:81:66:aa:a8:46:
                    8e:32:43:5b:2b:59:33:00:f3:8b:d7:6e:5e:37:d8:
                    b7:fa:f0:0a:4e:56:11:80:2e:24:5e:74:62:ae:b8:
                    c8:83:90:ec:2b:f3:c1:14:a5:76:0b:33:13:6a:a3:
                    dc:98:00:1c:89:da:fd:43:bb:49:9e:be:b7:3c:72:
                    b6:0d:2e:a6:3d:87:7a:cc:0e:73:bd:45:7c:e1:13:
                    ae:27:79:69:44:cd:47:74:43:d3:a0:53:2d:8f:7e:
                    b3:df:e9:57:72:e6:3e:24:e5:36:ff:da:48:c4:0a:
                    5e:a2:59:48:ce:9b:de:a0:22:9c:b9:cc:1f:01:c1:
                    c7:70:1b:23:04:49:fb:0c:f1:4c:af:4a:7c:f8:26:
                    1f:61:36:c2:41:ad:f7:86:4d:b9:cc:45:49:0e:cd:
                    82:bf:1c:ff:60:06:68:eb:d2:dd:ac:ac:fa:cd:d3:
                    d1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8F:8C:90:C6:1B:23:2C:1C:16:40:2A:84:47:A3:3C:39:0B:95:57
            X509v3 Authority Key Identifier:
                keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:20:6d:e0:42:fd:f0:f0:16:74:29:4e:f3:f4:40:b1:8a:14:
         8b:8e:31:15:15:99:68:a8:0f:f2:93:71:af:ed:3d:96:29:c7:
         57:ea:ba:f6:a8:f1:66:3d:cd:d8:3b:1e:f7:92:00:5a:16:92:
         28:ea:c4:16:d6:f1:c7:d4:66:e4:6b:14:c4:83:67:7b:ef:77:
         73:67:9c:fe:4a:ed:65:9c:64:12:86:c6:4a:0b:0a:32:bd:d8:
         b4:ec:6b:43:04:8f:5f:16:35:e1:c3:a3:80:f7:3e:32:21:49:
         a2:f5:98:f3:af:9c:ca:1b:3b:d8:c9:70:c4:98:61:5f:2a:79:
         20:d1:54:4b:19:58:e9:17:3d:91:fa:df:93:ea:0d:6d:85:2e:
         7c:a4:8f:7b:13:96:14:d2:a0:7d:64:a3:1b:6b:2a:5b:db:fb:
         c5:7d:67:31:e8:31:a7:f2:1a:2c:9e:da:af:8f:d2:c8:2b:e4:
         61:c2:cf:e0:36:e6:33:e9:e3:97:c2:29:18:00:89:78:60:36:
         b0:3d:1b:57:3c:40:c9:d3:a2:24:f3:2d:fb:3d:3f:25:14:d7:
         43:95:fa:45:a3:ec:da:ff:58:2f:1d:a0:1b:a5:98:d0:a8:03:
         26:da:ad:bf:2c:77:13:68:24:6c:7e:5c:94:c4:b9:7f:a5:15:
         9d:cf:a4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:40:31 2026 by rpki-client