Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
File:                     1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft (raw, json)
Hash identifier:          HhnRp7SiRZha7r0IvYp+fBOJPfmRzTJmbucQ8O8+iaE=
Subject key identifier:   33:2E:9E:71:3A:74:16:B6:74:1F:78:B6:CC:CE:62:D3:6F:FC:1B:28
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Certificate issuer:       /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial:       019D9B515EADDA33DF07132F93D040B6E709
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
Manifest number:          18D2
Signing time:             Fri 17 Apr 2026 12:01:34 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:34 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:34 +0000
Files and hashes:         1: 1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl (hash: PMnMCwIFM93NL6KkXFPYolSOzFDtye1Hv4uiCYB7l2w=)
                          2: 5a4DGw-2-kfHgsxaKehjNXnuCqE.roa (hash: sUZyzh0MHY05jTMpuhKk6CIitn9nHfz+b8Hqjb1Mmtw=)
                          3: KINZYIE6_XaYNki6NUivcoprCUw.roa (hash: qhCfbFIbX14JzdD9PrKyC8S6QJj73yUa2umRc8K8fPw=)
                          4: OVwVV0u6mJBhfYtSaY2l0o5kYw0.roa (hash: tx3hkLfc3TC5UcoBMbPeFsEp4hR2aCEn9vjo3l+XOeY=)
                          5: SWXQ_yriq_Z6hdo9s_S-su9IOcY.roa (hash: npoD/pw5DyWoHlNaWh25GF0UUSoDz0q9Mp04Q5//gew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:5e:ad:da:33:df:07:13:2f:93:d0:40:b6:e7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
        Validity
            Not Before: Apr 17 12:01:34 2026 GMT
            Not After : Apr 18 12:01:34 2026 GMT
        Subject: CN=332e9e713a7416b6741f78b6ccce62d36ffc1b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:58:89:c2:e7:62:32:6b:ea:1f:35:16:ee:13:
                    70:6d:bc:8d:6e:36:fa:27:d3:05:87:e6:0f:83:e0:
                    cd:dc:47:f3:2d:fa:1e:e2:d8:de:9e:a2:65:c8:f5:
                    e1:fb:b4:ed:85:3e:e2:15:e1:9f:b5:48:f7:76:ec:
                    49:24:6a:00:73:01:83:6f:7f:58:99:5b:4a:b4:cc:
                    1b:70:02:9f:bb:6b:d2:d8:fe:fa:f4:31:e1:a6:31:
                    a4:c3:bd:74:3c:93:cc:7e:62:c0:7f:b6:13:27:8e:
                    88:a3:0e:69:4e:f8:b8:9e:e9:0f:63:f7:70:9d:ec:
                    58:84:be:4e:e2:3a:2f:ad:88:93:dd:5b:6f:58:fb:
                    1f:42:dc:22:dc:05:5f:af:d1:a8:6a:ff:52:62:d0:
                    96:cb:57:57:26:df:86:fe:2c:b1:c8:56:db:b7:67:
                    50:ee:4f:54:51:33:07:ff:c6:58:ed:89:e0:e3:33:
                    79:c1:08:a1:7c:f7:0c:80:1b:de:47:88:21:70:86:
                    da:47:a2:89:1b:d7:e9:fd:a6:d6:fc:09:b3:d2:ab:
                    72:ac:14:c4:67:75:ab:5c:9f:62:02:4f:d6:f7:ca:
                    66:7e:aa:d4:e7:6c:c3:3a:a7:1c:20:c3:d0:23:0c:
                    8b:c0:a9:c4:4a:b6:2b:ad:f0:2d:b1:a5:c9:b5:fb:
                    96:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2E:9E:71:3A:74:16:B6:74:1F:78:B6:CC:CE:62:D3:6F:FC:1B:28
            X509v3 Authority Key Identifier:
                keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:9a:88:74:ca:bc:b4:26:3c:24:5c:7e:7f:00:ee:96:dd:6a:
         1d:b3:af:f8:cb:aa:b6:96:38:ce:8c:58:ab:03:a1:a6:b6:8b:
         4a:05:e0:be:8f:e0:2a:2a:c2:4a:cd:0d:68:60:12:9a:ab:8f:
         35:e0:e3:e8:ba:99:2f:36:a2:94:5b:e1:87:9a:74:4b:81:38:
         9e:80:22:a6:ad:33:7f:58:6e:c7:86:54:59:ee:4b:e7:89:8d:
         9e:db:88:1a:8a:73:0e:df:3b:42:40:35:43:b3:33:cc:ee:e7:
         10:92:27:7c:2f:cb:f4:d7:6c:f6:e7:18:91:1c:23:e2:73:bf:
         d3:45:22:66:69:cc:01:10:0d:a6:3b:72:bf:08:04:8e:51:ee:
         5b:40:07:d4:9c:e8:e9:e0:fa:68:03:4b:71:21:9a:de:69:e5:
         52:6c:59:78:47:63:95:34:df:94:a5:8a:f1:a8:23:43:9e:64:
         e8:34:33:86:17:65:4d:0d:f7:16:e0:b7:0c:2b:28:13:2e:80:
         54:d9:c7:07:c0:56:0a:ee:55:70:1e:e1:5f:b0:43:28:68:67:
         9a:58:2c:98:8f:b9:4e:e7:e9:53:2c:ae:4a:47:6c:91:f5:f9:
         2f:e6:79:5e:a0:a8:d6:22:00:da:e7:50:42:f7:0d:4b:6a:10:
         3f:62:b7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:58:06 2026 by rpki-client