Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
File:                     aBzk2Zuo67kaeUq_y90VveCcmfg.mft (raw, json)
Hash identifier:          q+qsK4FdYcFpbXQAFB+Puknp1iRBYqJsVyuD4ibG9rM=
Subject key identifier:   82:97:20:34:91:6F:14:EE:FD:E9:17:BC:77:A4:DF:0B:C0:F1:38:7F
Authority key identifier: 68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
Certificate issuer:       /CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Certificate serial:       019D981908FC2AE0E1CE1AC15D5061001B65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
Manifest number:          18CE
Signing time:             Thu 16 Apr 2026 21:01:10 +0000
Manifest this update:     Thu 16 Apr 2026 21:01:10 +0000
Manifest next update:     Fri 17 Apr 2026 21:01:10 +0000
Files and hashes:         1: F8gWmBx_qTOY5CaadrBqOssWA0Y.roa (hash: 20p41PVCeDhtRb9xco7WXnqPrSjd5ln/3wQCLYfQ3VQ=)
                          2: aBzk2Zuo67kaeUq_y90VveCcmfg.crl (hash: qEoUrZ8KUj9WoIQzS0SlJYNvemhKNDboqAQwIXv0b3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:19:08:fc:2a:e0:e1:ce:1a:c1:5d:50:61:00:1b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
        Validity
            Not Before: Apr 16 21:01:10 2026 GMT
            Not After : Apr 17 21:01:10 2026 GMT
        Subject: CN=82972034916f14eefde917bc77a4df0bc0f1387f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:85:48:2d:1d:96:65:69:14:ff:0c:a9:e5:
                    24:8c:fc:c5:df:e4:b5:1b:26:e2:3a:dc:d3:e7:5c:
                    1a:17:f2:6f:fd:bf:7f:38:25:72:ab:23:62:71:25:
                    15:6e:5a:61:79:3d:61:e6:ec:07:e7:37:87:39:72:
                    68:b5:c7:de:1d:39:c8:41:e1:44:8b:ac:dd:57:4b:
                    c6:42:a0:40:43:30:08:ec:83:76:1f:bf:ae:16:c2:
                    d9:1a:15:07:71:b6:9b:fa:e5:4d:fd:1a:23:38:ca:
                    a9:98:74:78:1e:aa:fc:8c:72:66:89:1f:95:9f:bc:
                    c9:c6:64:c5:14:b0:e7:d4:99:c4:42:80:c0:f7:0e:
                    28:c3:0f:8f:02:10:ec:04:c1:14:13:3b:b3:0b:8f:
                    4c:f5:ec:f5:4e:88:ff:5f:1c:8f:f7:a2:5e:5a:91:
                    24:24:be:c0:a6:35:13:9a:3a:30:ab:0d:54:22:68:
                    17:06:81:04:bc:26:26:a9:eb:5d:74:80:a9:31:1e:
                    c6:61:29:45:b0:fe:5e:57:d3:bd:ad:50:9c:c8:54:
                    8b:23:30:10:76:7d:3c:c8:10:fe:76:00:6b:7c:c7:
                    b7:d6:a6:77:55:b1:b9:30:a7:81:53:bc:4d:e5:80:
                    4d:c2:2d:ad:33:2e:80:72:67:6d:5e:c3:c2:d8:83:
                    b2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:97:20:34:91:6F:14:EE:FD:E9:17:BC:77:A4:DF:0B:C0:F1:38:7F
            X509v3 Authority Key Identifier:
                keyid:68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e4:0c:d4:48:23:cc:06:6d:c1:f2:aa:26:14:c2:56:39:93:
         b1:24:49:b8:dd:53:a0:c1:e9:bc:e2:8b:9b:0c:ed:6b:e2:a0:
         3b:e6:79:33:f9:e1:e1:81:5d:9e:7e:e3:7d:c2:3d:07:1f:d7:
         29:b7:85:d0:d6:c9:fe:b1:d3:3b:a0:ac:ab:22:44:e2:67:f1:
         28:32:d5:93:b7:7c:34:9f:6f:70:f8:bb:71:7e:85:09:fd:ac:
         03:26:0b:74:c1:9b:6c:59:a9:4c:73:63:b9:23:c6:cb:3f:e3:
         b7:c2:98:57:91:f1:db:29:a0:a9:1c:07:da:87:51:f6:45:06:
         51:5f:6d:18:56:27:9f:fc:e9:7f:b7:37:39:77:ff:d6:c8:3d:
         93:d0:b0:99:b3:3b:52:e5:5e:1b:08:db:69:7b:4a:df:11:8b:
         74:02:5c:c0:85:06:b0:d9:5d:ac:84:69:dc:bc:be:25:36:e8:
         37:5a:29:d6:c2:ef:f6:2c:46:2d:1f:bd:19:6b:63:1e:29:1a:
         81:5f:0b:af:cf:39:f5:0b:74:79:31:b5:4f:dc:fe:84:50:12:
         24:ba:e9:c5:8d:6c:71:55:39:92:eb:9b:9b:be:87:2c:8e:f7:
         fa:63:56:e2:01:be:e7:c0:2b:db:41:f8:34:1a:74:09:ad:2a:
         1a:d2:14:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:46 2026 by rpki-client