Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
File:                     n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft (raw, json)
Hash identifier:          NmGEgTPJO0iQqbUbg8umvGrox/SUA8TWFrvsKY6B3vA=
Subject key identifier:   06:74:6B:7B:4C:ED:90:C3:21:83:34:06:AC:F3:24:D6:87:CB:C7:44
Authority key identifier: 9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
Certificate issuer:       /CN=9f87521f15e0457288a9f196a8c8865c36922150
Certificate serial:       019D97E168D73947E698699FA369926A037D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
Manifest number:          18C2
Signing time:             Thu 16 Apr 2026 20:00:25 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:25 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:25 +0000
Files and hashes:         1: ch1WA8KPWtT4lbnmhdRbUoInvrQ.roa (hash: KNYvYxr90wZ08HAn6IO/kJkxO2ei4FC5py65h6CmekA=)
                          2: n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl (hash: jw/SaCs0LMx92FCfWllnJRS7H5sq3xCR83NAGGMMd1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:68:d7:39:47:e6:98:69:9f:a3:69:92:6a:03:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f87521f15e0457288a9f196a8c8865c36922150
        Validity
            Not Before: Apr 16 20:00:25 2026 GMT
            Not After : Apr 17 20:00:25 2026 GMT
        Subject: CN=06746b7b4ced90c321833406acf324d687cbc744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:57:a9:6f:64:85:b3:ba:d0:4d:20:cb:2c:39:
                    da:4b:0a:cd:bb:65:d6:f3:9d:18:93:c8:65:23:9e:
                    58:d4:16:00:c0:c7:76:00:d3:1c:79:44:68:95:25:
                    54:06:0c:12:0f:2d:c5:dd:81:7a:55:1f:b9:1c:6e:
                    44:2f:f5:ba:57:36:4e:64:6e:b0:09:d4:b3:80:5b:
                    ad:b7:19:54:93:9d:c9:19:c9:64:b8:64:ca:67:74:
                    6e:dd:75:37:0e:0d:29:20:65:10:38:7c:9f:9a:74:
                    7a:8b:c1:74:f0:19:73:b9:dc:2f:39:f0:4b:a3:0b:
                    ac:bc:fc:b4:4a:90:28:12:86:1e:41:b5:a0:d5:61:
                    6c:9e:35:f4:00:73:95:95:81:f1:00:60:5c:d6:83:
                    dd:57:2d:8b:59:d8:46:0a:ed:e8:3e:02:e1:06:5d:
                    9d:7f:a2:31:63:63:74:74:a9:03:92:09:59:d8:77:
                    97:f0:2a:55:cd:25:a5:2d:9f:4b:d0:5b:ca:d2:07:
                    c1:a2:44:0e:be:82:d3:0c:79:10:29:1f:2b:d0:73:
                    e5:63:5c:1e:b2:69:a1:6f:41:2a:a4:74:a3:00:fe:
                    38:5b:40:76:6c:df:aa:90:f4:b3:46:b5:3a:a2:86:
                    2e:50:2b:ec:59:3d:f4:4c:18:37:a3:29:a0:5b:a3:
                    84:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:74:6B:7B:4C:ED:90:C3:21:83:34:06:AC:F3:24:D6:87:CB:C7:44
            X509v3 Authority Key Identifier:
                keyid:9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7c:8f:ba:fd:20:8d:da:ec:c8:b4:d7:7e:6e:4d:e5:18:04:
         63:62:ce:f3:0a:49:4c:8e:e2:43:45:b4:02:ef:84:26:65:93:
         ae:7c:df:2c:2e:70:86:75:ee:99:e2:8c:c0:76:82:d3:59:8e:
         a1:c8:6b:3a:74:75:c8:33:42:07:a0:37:fe:61:53:d0:d7:e5:
         79:aa:d7:15:55:16:b0:b5:4b:da:01:b1:0c:fe:bf:16:29:67:
         78:3b:67:36:28:3b:0d:9e:f1:56:0e:54:f7:b3:d1:e4:12:46:
         3f:ed:3d:cf:cb:f2:78:40:42:b3:f4:1e:bd:07:6c:16:e5:16:
         90:69:be:aa:3a:f5:b5:08:24:89:09:42:60:18:8c:de:16:52:
         ff:b7:67:13:0b:7a:59:26:e1:67:e5:a7:0b:93:c6:e9:c6:fe:
         c0:be:2c:20:f9:8e:fa:c6:be:ba:8d:7b:c6:8f:5e:c2:26:03:
         a3:fb:53:fa:da:fa:1e:b9:65:c6:f5:6a:6c:4b:76:60:5d:a4:
         9c:01:c3:b2:37:76:07:0b:61:91:72:74:9d:78:de:2a:fc:ff:
         ce:b5:48:67:aa:4c:20:32:7d:ea:00:e6:21:58:cf:a9:47:38:
         74:f6:4d:6c:79:64:d3:4b:8c:f2:93:c4:a5:27:91:ae:76:c2:
         af:45:f8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:02:05 2026 by rpki-client