Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
File:                     cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft (raw, json)
Hash identifier:          PtfJqS6gPWlXkNIpNO+VlvYLutjWwqDH1M7blHin3n4=
Subject key identifier:   DC:2D:80:37:FE:29:94:F0:83:87:3D:54:64:65:A2:20:0C:FB:54:2B
Authority key identifier: 70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
Certificate issuer:       /CN=70c12309ee98d442ec8a7650127eb0e621894df1
Certificate serial:       019D9961F19E8DD3E5B4B676523BAB3E12F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 03:00:26 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:26 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:26 +0000
Files and hashes:         1: F99ntdp2qRkWyX4GCUSsxJD7WV8.roa (hash: XZkkSfzBXZ21L3XovvCMvlzirbHA8+n/5A9z1OK+IY8=)
                          2: cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl (hash: sSW1O0Pi3o2AF15NmJnOU/qnoMKRqkiOhvtJp1U6Ei8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:61:f1:9e:8d:d3:e5:b4:b6:76:52:3b:ab:3e:12:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70c12309ee98d442ec8a7650127eb0e621894df1
        Validity
            Not Before: Apr 17 03:00:26 2026 GMT
            Not After : Apr 18 03:00:26 2026 GMT
        Subject: CN=dc2d8037fe2994f083873d546465a2200cfb542b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b8:1e:03:83:f3:98:c9:7d:8d:c6:3d:e4:76:
                    a9:71:17:8d:e4:b7:99:85:e6:9b:30:64:a9:1e:50:
                    2b:d3:cd:30:cb:fb:83:32:60:6b:50:fc:39:9a:ae:
                    ea:76:e5:b0:2b:05:a2:3b:3f:ff:08:aa:79:77:d1:
                    bd:c4:79:e0:65:64:e1:81:95:f0:e3:47:ad:34:2a:
                    90:9b:41:1f:24:13:90:0f:c1:e5:10:c6:64:e7:0c:
                    52:1e:c4:63:1d:f0:75:e5:d1:f4:68:25:17:7b:1a:
                    5b:38:5d:93:2a:83:c2:0d:d1:a6:37:df:e2:c4:30:
                    8f:22:85:26:b2:a9:65:13:a1:4c:81:7d:b9:2a:40:
                    c0:29:28:d6:8d:ed:fe:15:49:be:a5:ff:c8:30:09:
                    90:b9:61:1a:dc:7f:f1:e1:f5:1c:3c:02:d4:13:1b:
                    f9:9d:f3:42:d5:31:62:3c:70:af:af:8e:84:b0:d5:
                    10:af:0e:3f:6c:71:0e:f5:0a:ed:e9:77:82:6f:ce:
                    6e:b7:96:70:fd:77:5f:c6:03:96:8a:ae:43:60:98:
                    38:3c:f4:63:fd:24:6c:19:96:fe:6f:b5:07:26:87:
                    72:5d:1d:79:d9:05:d6:76:d6:59:92:e5:af:cf:ea:
                    53:fc:51:b9:de:97:ca:f4:e1:80:0b:1f:ba:f1:92:
                    07:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2D:80:37:FE:29:94:F0:83:87:3D:54:64:65:A2:20:0C:FB:54:2B
            X509v3 Authority Key Identifier:
                keyid:70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:5a:ed:61:f7:5f:86:bc:fe:c7:a0:07:34:c4:dd:99:10:6c:
         77:60:1a:7d:d2:74:f7:0b:9b:a0:11:9a:66:2b:e6:40:d3:f5:
         2f:a4:ee:13:83:4d:81:d8:b0:0a:4e:c1:50:b3:e6:85:b7:15:
         ce:aa:77:2e:83:54:28:fd:b6:1a:b3:d7:f2:df:29:85:0c:a6:
         c0:3a:15:52:1e:9f:b2:b8:2a:70:f8:e0:b3:7f:4d:31:69:11:
         a8:85:1d:72:cf:6e:49:c9:b3:b6:0a:32:66:5c:c9:72:f9:7c:
         ca:7e:4b:1e:9e:38:c6:c4:5e:90:04:ea:94:5c:95:4a:8b:85:
         b5:dc:a5:ed:a3:e3:81:5e:a9:07:2f:aa:12:26:15:75:c9:94:
         9a:86:08:27:1b:95:31:3a:90:1b:0d:1c:8e:87:52:7e:86:d7:
         ac:7d:e4:a1:b4:ce:e6:3b:3f:58:98:f4:e5:a2:fc:7c:2d:79:
         db:2e:d1:98:e7:12:b1:7b:f2:95:81:3d:ab:bf:f9:72:90:4d:
         34:eb:e7:c1:d9:b7:51:bc:54:81:45:0f:3e:f4:e9:70:58:46:
         c8:7a:19:a8:69:57:7b:d1:f4:0b:b1:dc:a6:95:02:fa:e5:83:
         ab:a9:7f:49:30:5a:ba:03:bd:8e:02:3d:20:06:18:cc:4e:dd:
         94:5d:b7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:17:34 2026 by rpki-client