Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
File:                     kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json)
Hash identifier:          DSTyW6leXaKnXHHpsFPZgEVLjIJwua8mMLTF8qIvPsc=
Subject key identifier:   C1:7F:27:3C:1E:2E:B4:83:D2:58:AE:94:03:B8:C2:A5:E9:D4:EA:C2
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Certificate issuer:       /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial:       019D98BD8087362BCD972C1FD4CEA2E30D01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
Manifest number:          18EB
Signing time:             Fri 17 Apr 2026 00:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:49 +0000
Files and hashes:         1: 1-QrkJ1ReezcgF73EgGbqmxSp9iE.roa (hash: RSa2cTQxNZP76zXoi1N6FVpNx/a7WiCBFEO8rdHSaGo=)
                          2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=)
                          3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=)
                          4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=)
                          5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=)
                          6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=)
                          7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=)
                          8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: 9UML74v3zJu5+MOY+9jFGaud4kX4CbUM1AK/sEfWPHk=)
                          9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=)
                          10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 00:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:80:87:36:2b:cd:97:2c:1f:d4:ce:a2:e3:0d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
        Validity
            Not Before: Apr 17 00:00:49 2026 GMT
            Not After : Apr 18 00:00:49 2026 GMT
        Subject: CN=c17f273c1e2eb483d258ae9403b8c2a5e9d4eac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5b:c3:ff:80:c5:80:bb:e5:c7:aa:5b:62:96:
                    6f:11:10:43:ee:fa:07:80:4d:66:cd:c8:40:4a:4f:
                    8a:90:6b:86:15:16:73:80:3d:3e:82:c9:14:26:40:
                    75:64:71:6b:d4:5b:c1:69:cb:59:0e:b1:35:23:34:
                    10:75:97:6e:dd:ac:f0:92:19:cb:da:3e:ec:32:d6:
                    3b:45:aa:99:ef:42:f7:0c:10:e2:0c:9f:eb:59:59:
                    20:d2:44:06:5b:5d:39:e3:15:5f:8b:4f:a6:4c:a2:
                    b8:84:e3:0f:ea:f5:1b:68:f8:f2:d6:a9:fa:64:57:
                    c4:79:1f:bb:8a:6e:e4:29:c3:7b:5a:0e:9b:c3:6d:
                    aa:67:95:9b:3b:f1:71:e4:48:fa:e1:5b:2b:4f:4a:
                    8f:95:af:26:c8:a6:f0:3b:8b:0c:d5:a5:bc:ea:f6:
                    47:47:ac:aa:bc:0a:e2:3d:62:a0:9e:05:d0:13:99:
                    a1:56:0a:23:3b:42:cc:55:d6:34:0a:a9:38:3b:49:
                    60:61:8c:ce:f0:b1:d6:c1:9c:14:d2:91:4d:83:66:
                    8e:0f:8e:9c:94:20:ef:ec:27:42:07:9a:39:1f:62:
                    98:cb:65:44:9b:9e:88:c3:9b:dd:7a:fd:ee:3f:f0:
                    c3:8d:e1:fa:13:a7:8d:0f:10:72:7a:ba:49:4e:9c:
                    a6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7F:27:3C:1E:2E:B4:83:D2:58:AE:94:03:B8:C2:A5:E9:D4:EA:C2
            X509v3 Authority Key Identifier:
                keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:16:ee:a4:46:44:ca:37:dc:b3:ea:26:38:73:4b:cb:9f:fe:
         b0:c4:04:27:3a:b9:c4:94:b5:68:6e:5e:b2:2b:0d:03:00:e4:
         fd:bd:df:d1:96:e0:5b:cc:7e:8e:c3:86:bf:74:18:10:0c:06:
         7f:b4:d0:08:b5:37:9f:aa:b1:40:fc:fe:a9:2d:88:a7:41:49:
         20:c6:d3:0b:f9:43:ef:37:34:bf:7a:00:59:cf:f1:78:ef:08:
         5c:91:01:80:3a:4c:02:c6:ee:20:0f:d0:d9:87:4a:64:27:4b:
         59:69:b5:41:c2:e3:fd:5a:70:fd:45:fb:04:d0:40:17:d3:56:
         1f:52:f6:71:6d:9b:b5:c3:2f:97:88:90:8f:c3:af:b5:ed:34:
         5f:08:9c:50:d3:14:9a:7d:b5:8a:3a:c7:a0:36:aa:d5:54:b5:
         12:6a:5b:9b:04:9c:1c:25:07:19:83:08:35:5a:0a:16:af:83:
         93:c8:62:9d:10:d1:c5:2b:3e:d0:f1:25:af:1c:33:bb:fa:f2:
         f5:ac:ca:53:3a:ae:25:5c:3b:6c:07:c4:f6:2e:6e:96:bf:a7:
         82:25:e3:10:dd:d3:2f:dd:fd:04:81:80:91:76:fe:95:9e:8e:
         bd:50:f3:6a:a8:2f:1d:89:81:4f:cf:a6:05:24:54:41:1b:f8:
         6c:91:c8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:44 2026 by rpki-client