Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
File:                     BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json)
Hash identifier:          VWyG9y5qANS0Ij1LuO0PNEXkdiqpsR0W0GnelA+LiXQ=
Subject key identifier:   D8:BC:78:59:B1:9F:FD:37:4A:DC:5E:4E:33:E3:33:15:D1:88:40:C9
Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Certificate issuer:       /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Certificate serial:       019D999952B56F506846CC0FF81404C976A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 04:00:54 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:54 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:54 +0000
Files and hashes:         1: 03RMwUui42i5Kl2iOyIjy6uUllk.asa (hash: d0WtNqsS+gSSoX4EFhK8B1GHLgiLRboivnde42wiSxg=)
                          2: 2owrDtSSdVfxvYXAxMiLovDSXEU.roa (hash: 9L5ssgJ0+ShYxgpGMGCzPMDxEovXXE+mzE0m/NaKh/k=)
                          3: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: fUeTUmN3KD9iQZ3rJErqRfOlllyAQgBkkZdC4TxJ/2E=)
                          4: J_ltO4IY-zslK2HzdFODfkjQNtE.asa (hash: Vj0jAxwKfiBhKsc+pYPJJ3wR9tPHQ0qcCAKE+u9mInI=)
                          5: W2dqeQoexNzO-eZu-b3E0MsHT4I.roa (hash: xbkqBY08vRM/01LJVRXUSH6oRqaCojszvq1SR3phsH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:52:b5:6f:50:68:46:cc:0f:f8:14:04:c9:76:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
        Validity
            Not Before: Apr 17 04:00:54 2026 GMT
            Not After : Apr 18 04:00:54 2026 GMT
        Subject: CN=d8bc7859b19ffd374adc5e4e33e33315d18840c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:82:69:8d:42:42:3a:b6:f0:3b:1f:20:f9:d4:
                    09:af:5d:ad:04:1a:06:2b:0b:92:17:bd:f8:ed:3a:
                    ce:7f:5a:5c:08:61:5d:99:00:63:19:e1:f5:c5:ae:
                    b4:82:c8:40:77:82:ee:b9:46:f7:5a:71:05:9b:37:
                    6d:f1:a3:8e:c6:3d:57:85:1b:b7:74:30:a0:ae:a1:
                    7b:c8:80:8c:d3:ba:d8:e4:46:6c:b3:3e:bb:0b:87:
                    e3:75:de:0a:a4:4a:b6:82:43:c3:14:6b:d5:01:1a:
                    07:c4:58:83:7b:33:76:5f:ce:8e:ad:46:24:64:37:
                    d2:46:2e:57:26:c2:58:be:ce:b9:98:5e:d9:05:66:
                    b5:3d:be:d7:a9:b7:a5:26:4d:da:f7:f2:a5:bd:dc:
                    fe:b6:a9:bd:92:f8:e7:6f:d2:91:28:7c:b3:62:2b:
                    65:2b:6f:ec:33:76:93:0f:e0:03:87:dc:99:31:be:
                    65:6f:ca:44:f0:a0:fa:33:39:0b:03:09:d2:73:ba:
                    66:97:b2:c9:1d:2a:dc:a4:f0:bc:3e:59:2c:8d:7c:
                    f5:70:6c:6b:67:40:59:1a:64:d0:bb:42:d1:df:cc:
                    01:5a:ef:2e:14:6c:26:fc:2f:12:e6:a5:e1:2a:15:
                    65:3e:19:a1:03:ca:99:ff:ff:06:23:2c:52:31:ef:
                    9a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BC:78:59:B1:9F:FD:37:4A:DC:5E:4E:33:E3:33:15:D1:88:40:C9
            X509v3 Authority Key Identifier:
                keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:22:3f:e7:ab:22:c0:9f:bd:19:e3:dd:2c:50:1b:c1:10:e7:
         b5:4f:3b:32:03:57:b9:de:74:00:b2:cd:51:c4:5a:e8:b7:bf:
         d9:a5:1c:ed:e8:13:88:19:e1:dd:81:4f:a9:14:05:1e:3f:20:
         41:47:fb:17:9a:94:a6:86:06:5e:7f:84:72:d0:c7:c0:5f:d9:
         d0:51:4d:1d:44:7a:af:d1:d2:2d:6d:2a:1f:6c:15:67:0f:f2:
         5d:ac:bb:bb:60:75:e1:1d:58:43:06:6b:c0:c6:5d:5d:4f:aa:
         48:28:47:cb:80:ba:f1:9a:05:e2:4f:90:06:dd:4d:c4:4b:6c:
         f6:78:f1:36:76:26:a7:7b:88:7f:ea:cb:5e:9e:53:62:e7:5d:
         0b:df:e2:15:32:33:d4:c3:e7:75:c9:1c:b7:b4:0a:13:66:0f:
         5a:e3:08:13:85:57:09:fd:e6:d2:c4:10:a2:42:2a:9a:61:57:
         87:98:8a:f8:1c:11:8b:07:f2:98:be:40:ca:a7:a2:60:f8:7c:
         b8:58:7b:21:20:85:07:23:45:a4:bf:75:ff:a6:12:ba:11:fa:
         e1:94:9a:8f:b2:4d:2f:3f:73:42:71:80:ce:7c:8b:21:ab:ec:
         c2:d6:ef:e6:78:7e:cc:fd:5e:aa:1b:73:46:56:80:18:a4:4c:
         aa:21:21:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:26 2026 by rpki-client