Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
File:                     0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft (raw, json)
Hash identifier:          uz5rpfSFuJ8TPV4fyaPXCwxVLLM/Sfrtv4EINOkv23A=
Subject key identifier:   85:24:B1:0F:DB:E8:69:9B:B7:4F:C9:AE:6D:4C:D8:65:0E:EE:B3:56
Authority key identifier: D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
Certificate issuer:       /CN=d223093ce150874016d793f439f43d2e6440c3f2
Certificate serial:       019D98F4913F9CC92355134A2724C191030D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
Manifest number:          18BF
Signing time:             Fri 17 Apr 2026 01:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:57 +0000
Files and hashes:         1: 0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl (hash: C8kZZXcPkkmt6HKbkeNLf8faDWO4ItK8h+IiRTgQ5mM=)
                          2: dIQUiyCohK8UIKP3Wc_vpehQ9jQ.roa (hash: 4z4Cff5T7C1kMcuabXqlqC9vzDBKDpLEEFDPaDQ1Shs=)
                          3: lU-M6Rbwn_sYPtT01bjpJTpzM_c.roa (hash: aE61BcYLJ+s8wneEHCKlvN2g4ojZACwiHGtJ3iEG3YI=)
                          4: qgZQRIByCSALcE73ENt-q4UPqdY.roa (hash: GR9g1THKzvFcNqQhXU+wmTdELTKbBSkjvvOetVfO1p8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:91:3f:9c:c9:23:55:13:4a:27:24:c1:91:03:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d223093ce150874016d793f439f43d2e6440c3f2
        Validity
            Not Before: Apr 17 01:00:57 2026 GMT
            Not After : Apr 18 01:00:57 2026 GMT
        Subject: CN=8524b10fdbe8699bb74fc9ae6d4cd8650eeeb356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:17:15:d1:f4:5c:41:d1:67:6c:05:8f:d3:0b:
                    1a:0f:19:59:7d:fe:94:6d:ec:25:5f:6a:e2:1a:61:
                    d1:95:fa:7d:2a:31:46:89:4a:87:d8:40:63:8d:0f:
                    2e:ea:3e:f4:8b:ec:78:22:b1:53:b3:b2:31:2f:61:
                    bf:89:64:a3:8d:84:11:26:cd:1d:ec:27:65:09:4b:
                    d6:ba:4b:9d:37:cc:84:e2:57:0b:d5:24:5e:12:7b:
                    4f:cd:7f:c7:87:fd:52:8b:2a:45:7c:c9:c2:68:cc:
                    eb:52:df:41:d7:c4:b6:de:9f:76:97:72:64:cd:7f:
                    3f:72:b8:be:eb:62:5c:b9:36:18:a4:eb:17:3a:be:
                    19:3d:f0:74:eb:d5:87:8e:2d:44:17:ac:ed:c3:d0:
                    fc:7c:09:26:37:ef:b9:ea:cd:59:57:5a:fc:86:da:
                    5b:f5:76:74:84:76:73:99:06:55:53:0f:f8:08:14:
                    7d:f7:6e:0f:9c:78:5d:32:13:2d:9f:cc:8f:61:77:
                    b8:e3:bb:16:12:16:19:b1:63:e0:14:91:6c:0f:18:
                    eb:e8:ef:4c:05:39:f9:65:7f:7d:fe:9b:9b:49:1e:
                    90:8a:f3:34:96:63:bd:df:78:0e:56:b3:97:0a:aa:
                    09:07:21:a2:15:f0:9c:37:11:f2:4e:98:23:fe:45:
                    c0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:24:B1:0F:DB:E8:69:9B:B7:4F:C9:AE:6D:4C:D8:65:0E:EE:B3:56
            X509v3 Authority Key Identifier:
                keyid:D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7f:46:0e:5e:47:84:78:2d:f0:91:85:cd:d4:68:7e:44:a3:
         38:27:ca:ce:77:66:ba:8a:59:70:ca:8f:64:5a:3e:bf:08:a9:
         35:80:c4:61:0e:99:4d:06:47:3b:c7:eb:bd:57:26:9f:a1:92:
         86:47:12:c6:d7:80:d1:ba:65:fc:90:91:a7:d9:3d:59:40:a5:
         f4:f0:d9:0b:0b:d1:97:c9:a2:99:1b:44:4e:fc:c9:20:3f:bd:
         14:cb:74:80:85:19:fd:d0:76:7e:e4:21:6c:94:9c:7d:b0:72:
         29:21:1b:98:44:ff:21:e3:dd:b0:bf:67:4f:78:4f:ea:19:5f:
         e7:f5:43:b9:17:8e:ed:4d:54:0b:e9:d3:64:be:16:0e:30:ba:
         13:41:80:2a:b9:ac:ba:b2:4f:ab:5b:89:72:30:dc:9a:60:a6:
         a8:4f:3e:00:88:72:43:93:54:e0:97:99:e3:8a:fc:52:2e:23:
         c5:3c:7e:3a:d9:46:02:2b:41:29:9a:de:fd:d8:c1:3d:7e:13:
         a5:4b:d3:b4:61:96:29:cd:d2:1a:24:fe:7a:a9:cf:cd:f1:d0:
         0c:3b:e1:c8:d3:ba:b7:c3:9a:9b:75:d9:6e:41:6a:92:9f:69:
         90:2f:c7:07:0b:56:a8:01:1a:31:d8:0b:d2:9d:c4:16:c2:dc:
         65:63:46:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:51:06 2026 by rpki-client