Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
File:                     rQYYvADZEaXV7r-cWJakG_KJjss.mft (raw, json)
Hash identifier:          eacnA5ccxXZPEpuCqtNwQ0nsKNwZNsIo9iCrSTboang=
Subject key identifier:   ED:41:37:61:4E:6C:9F:31:21:D8:55:7C:95:0A:BE:8B:80:B7:FE:15
Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
Certificate issuer:       /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Certificate serial:       019D99D0BC1CDC01F8A4138014427D54F4C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 05:01:26 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:26 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:26 +0000
Files and hashes:         1: BtnF3z_6Q5xPFk5aaPdB9AV2Ub0.roa (hash: e4XrjTZT9DVKsoP6xpDG68p8DkyaP4kbQPdVBr18Zts=)
                          2: rQYYvADZEaXV7r-cWJakG_KJjss.crl (hash: o0QcfKTXD81s3aslY5TWdShRERtY2018F35jNopo4Sk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:bc:1c:dc:01:f8:a4:13:80:14:42:7d:54:f4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
        Validity
            Not Before: Apr 17 05:01:26 2026 GMT
            Not After : Apr 18 05:01:26 2026 GMT
        Subject: CN=ed4137614e6c9f3121d8557c950abe8b80b7fe15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:31:bf:1a:60:d1:1c:f1:04:35:40:87:3e:
                    87:59:a8:f4:4d:fb:83:56:57:78:e8:da:18:f5:78:
                    c4:42:d0:30:db:4f:94:6b:c9:fd:25:6f:13:6b:bf:
                    c7:b9:a9:13:38:1b:d6:2a:f2:15:f3:36:d2:24:9d:
                    3e:91:27:ac:19:4d:1e:49:44:34:1f:76:5a:4a:2e:
                    79:1a:93:ab:95:90:3b:62:57:05:7b:3e:32:94:e0:
                    15:51:c8:18:40:4e:3a:c5:84:48:3f:8a:7b:3a:93:
                    d7:19:1f:89:00:c1:2c:2b:c4:ff:40:ab:78:13:86:
                    82:a6:56:32:e9:19:32:c0:38:ed:be:cb:a5:af:6a:
                    09:1b:49:d6:4a:64:bb:08:cf:46:31:92:61:b4:01:
                    17:5e:ce:c5:f3:4a:73:0b:fe:ee:34:66:60:97:0a:
                    d0:82:61:fa:95:a5:b6:63:bd:cb:98:f2:07:41:aa:
                    7a:24:93:28:66:8c:20:71:fb:36:bf:52:08:f3:38:
                    c0:6c:37:4f:0f:b0:21:88:c9:b8:76:d6:d8:35:58:
                    cf:58:76:82:09:f6:2f:5a:32:4e:a2:15:48:fd:2d:
                    d5:2f:ba:b2:b3:9a:2e:15:fe:f2:58:7e:ca:3c:6e:
                    a1:4a:35:59:89:25:0c:4f:8a:07:cb:ae:90:47:d3:
                    76:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:41:37:61:4E:6C:9F:31:21:D8:55:7C:95:0A:BE:8B:80:B7:FE:15
            X509v3 Authority Key Identifier:
                keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:14:23:3a:94:8a:0b:30:75:a1:9d:17:73:3b:66:8b:a7:66:
         f7:ea:a7:1e:3f:40:01:e0:7f:8d:f7:9d:0d:f3:f4:2a:f4:8c:
         06:d1:3b:fd:2f:69:20:39:c4:ba:01:1d:f7:fa:61:cb:d0:ab:
         df:3d:3e:1b:d0:ab:94:ca:3f:36:9c:17:14:62:17:2a:57:7f:
         8b:68:54:1c:e3:49:de:7e:90:cf:b7:21:ab:ca:35:c7:1c:23:
         82:62:c8:f0:d8:cb:94:ef:95:c9:cb:d7:1e:d0:66:1e:74:d2:
         fb:0e:27:75:5a:75:41:ac:1c:f9:18:e8:c4:9b:1e:61:87:0c:
         fc:bd:a2:e4:37:11:58:65:54:f1:60:12:71:c2:c6:96:8a:55:
         75:5b:c9:7b:d3:2a:a7:9a:2e:60:53:81:24:ec:2f:7e:04:c0:
         4a:31:7e:f6:ba:a2:92:19:cc:c2:a3:a3:c3:64:c8:6f:77:a1:
         b4:f3:3b:01:bc:eb:65:1b:b3:9d:2d:ec:03:e3:43:c0:cc:fe:
         05:62:96:b2:6d:0e:89:7f:7b:52:aa:38:db:d2:31:b1:a2:71:
         ab:8a:68:c6:27:62:ab:65:fe:41:c2:26:7f:c3:8c:6a:3a:68:
         e6:32:c3:ba:be:2e:19:f4:e5:b7:4a:88:f4:13:13:58:ff:5d:
         d7:f7:82:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:35 2026 by rpki-client