Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
File:                     m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft (raw, json)
Hash identifier:          mYJykdJoEbkd/TSKBUofnxgfpKB0xl2O2SZKdAbRECg=
Subject key identifier:   D6:75:A9:7E:B7:F2:6A:72:C3:80:5A:A9:A5:F0:65:82:EA:11:77:03
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Certificate issuer:       /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial:       019D9D3F8479291FC69E7E92C92EC0782374
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 21:01:18 +0000
Manifest this update:     Fri 17 Apr 2026 21:01:18 +0000
Manifest next update:     Sat 18 Apr 2026 21:01:18 +0000
Files and hashes:         1: H8wE76fNQ2hhIjxk4MuG2V875Nw.roa (hash: g7ehk1525yVD63XA8pRRR3E8IFSxP1Zjdo5zOoEU1Rs=)
                          2: KxaC0ruOG2YD5n1zBRmLQRsn3WI.roa (hash: TwtwT6AH74GOn9MuLfl6jj270NvdM2yc+udW6/G1LQc=)
                          3: QkMzWLk5sTK1UV1ynfE6svHoE8U.roa (hash: CorPpj4zU1bBCQT6Z2Gb1cpT/IwtfHvCiSJfVqus6RE=)
                          4: m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl (hash: IQpBSjcAKFeLZUp80Uja0OPqDKjfx2ybck4detRd3rE=)
                          5: syri4gMUyb6a13KvMROJjwlBhZg.roa (hash: /QXVuiiMa3wjoFyt1XhRqNNgHTeCl2azKO31l+7RS+0=)
                          6: uyOFyGJDHMXG3t3pO277WLsoGqE.roa (hash: BzXP/08Zx0Wir6Qt4Wu5utPmmZQXa+TM9Drawn5Grls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:3f:84:79:29:1f:c6:9e:7e:92:c9:2e:c0:78:23:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
        Validity
            Not Before: Apr 17 21:01:18 2026 GMT
            Not After : Apr 18 21:01:18 2026 GMT
        Subject: CN=d675a97eb7f26a72c3805aa9a5f06582ea117703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6e:f4:49:ac:b3:f8:e3:3b:74:78:c5:60:94:
                    10:98:58:b3:a8:47:53:ed:6d:e4:69:1b:3f:31:b1:
                    30:c3:97:ba:54:5c:58:e4:63:de:6b:c3:15:83:c4:
                    42:f7:e0:ed:95:ec:4b:d8:fa:d1:ef:12:e1:dd:51:
                    8f:54:b0:f6:72:8b:e4:e0:72:56:01:8f:9a:ff:d6:
                    12:b7:21:af:3c:d9:8f:6b:e1:97:96:1b:7f:a0:03:
                    8b:14:4d:55:04:0d:5b:dc:98:c7:1f:b4:48:6c:ed:
                    9a:7a:30:22:f5:90:85:7d:67:02:9c:89:96:e7:f4:
                    c1:11:84:2b:61:03:3f:84:a9:cb:73:52:ab:8c:bd:
                    9f:85:76:39:22:03:d8:11:d8:cd:27:cf:d9:ea:7c:
                    44:70:6d:c6:af:a2:47:f9:34:e3:cb:07:2b:d8:18:
                    2a:6c:bc:e9:0a:00:22:ac:d5:2a:8c:04:99:03:2c:
                    db:21:c4:87:93:60:ab:3e:e8:cf:d4:c9:e7:c2:6a:
                    9f:ca:ff:68:49:06:d2:dc:74:3f:1f:f2:82:ca:3d:
                    93:15:f8:21:6b:17:cc:9b:40:e8:85:59:16:bf:cb:
                    e6:22:dc:dd:12:af:d8:fd:d7:63:d1:71:e5:89:50:
                    f5:30:f3:ff:29:c4:62:15:f3:40:b1:4e:6e:b5:7a:
                    8d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:75:A9:7E:B7:F2:6A:72:C3:80:5A:A9:A5:F0:65:82:EA:11:77:03
            X509v3 Authority Key Identifier:
                keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:37:f3:8a:50:42:5d:42:33:aa:ce:d5:9c:b2:c9:3c:44:27:
         67:0d:05:8e:30:04:28:8f:cb:1e:fe:68:7e:9e:ca:20:b9:ba:
         a7:53:97:e9:7e:2d:9c:54:8d:c6:36:b3:ae:1b:2a:c1:2c:9a:
         e2:56:03:61:b6:10:50:e1:ba:58:ab:ce:92:94:b3:33:46:09:
         60:12:4c:0e:21:94:7b:f9:c3:4f:30:61:b7:b3:d2:fa:b3:d6:
         19:3a:13:53:e5:53:6e:0f:c8:a8:85:19:bb:cb:c3:51:f8:c1:
         fa:9b:bf:7f:37:dd:df:b1:bb:ed:6f:14:4b:e2:ed:25:9c:d0:
         3a:8e:b1:f8:7c:0b:40:0c:b0:b0:76:4d:f1:4b:63:cb:17:3a:
         c4:ba:ea:64:1c:90:03:42:6a:14:ea:2b:f2:2f:58:06:ad:f2:
         52:95:00:e1:b9:29:86:6c:4a:72:4a:4f:03:dd:2e:da:d6:02:
         51:74:ff:39:f6:c6:80:78:94:c9:61:a1:59:cf:5f:ff:c2:a5:
         61:63:85:38:c7:74:2c:7f:19:68:52:72:aa:08:37:bb:77:90:
         97:9f:d6:54:fd:3c:88:0a:08:47:5e:1a:c8:f7:31:3e:1c:c2:
         57:fb:f9:63:3e:11:96:b0:bc:7e:18:5d:94:b2:68:89:e3:41:
         10:36:82:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:41:33 2026 by rpki-client