Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
File:                     d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft (raw, json)
Hash identifier:          dj5b75vfiR0bAtqlDZ2guP9fEVTkKfruP3r1CzpjkZM=
Subject key identifier:   FC:EC:09:A0:A3:88:C0:42:81:C4:97:A9:BE:F5:A0:B0:EF:B9:5B:DF
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Certificate issuer:       /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial:       019D99D027C344813DA4F49141678EEC9588
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 05:00:48 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:48 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:48 +0000
Files and hashes:         1: 8q11ZXlsuNY-5BnKL-DZjg8yXCc.roa (hash: ouWFvShqIiSVhc7XwLMg1RvjjhIXPIC2TEXQAFnoIdY=)
                          2: NWmG-3ib3K9ny2X2v2uTxM0DQqA.roa (hash: CGIiGH/Yy5fY3u/pl6DzCecfrnnhokhuxjI5pup6gIw=)
                          3: W0KBm5HEcFXtVXifacsZfmIqvhY.roa (hash: W8Izm3ucgflTtw/kXP/v/wyRWH1PXzlBhUPfbe4tfxo=)
                          4: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl (hash: E1/s7Y4coB+pu2nLP56SPYchB8hsbt2WU2gMXg+nSUM=)
                          5: hFwOd0_YEOVcJRwShM4Rz_JX8w4.roa (hash: 2ZVK7MUTm4O+cKvEyp+XBJuaZn8IX75XJYPFZQbyyqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:27:c3:44:81:3d:a4:f4:91:41:67:8e:ec:95:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
        Validity
            Not Before: Apr 17 05:00:48 2026 GMT
            Not After : Apr 18 05:00:48 2026 GMT
        Subject: CN=fcec09a0a388c04281c497a9bef5a0b0efb95bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1c:66:9c:a5:f6:b2:e5:cf:81:e3:2f:4f:35:
                    38:ed:09:c8:c0:56:11:b9:29:bc:d0:f2:b9:b5:a4:
                    fb:68:22:6c:59:44:bc:cd:8f:f5:b9:a2:a4:df:69:
                    58:a1:da:d3:0d:ff:0b:d9:30:35:5f:2b:21:08:a0:
                    c2:73:c3:0e:3b:cc:c9:32:93:d9:8f:0f:64:54:27:
                    ad:4c:9e:63:ee:89:76:b6:98:07:c5:e3:f3:ca:12:
                    36:af:73:48:dc:6c:07:4c:bf:36:27:f6:9d:c3:a1:
                    26:dc:65:13:b0:34:d8:ea:a9:e3:53:13:53:f0:5f:
                    c6:a6:73:14:93:5e:45:92:e6:8c:0c:9a:d8:16:62:
                    02:75:7f:f1:44:04:80:e3:75:dd:8b:f0:6b:66:82:
                    fc:0b:e7:7a:ab:2d:8f:6b:96:49:44:f4:ab:af:d6:
                    2c:e7:45:9a:f7:8e:3a:b5:e7:94:8d:11:59:38:ef:
                    9b:fa:0a:b6:85:70:12:05:d7:9d:88:31:59:fb:d2:
                    7c:83:f0:35:61:0e:a1:37:ae:af:50:78:e9:57:0b:
                    82:f6:5f:5c:2a:06:76:19:61:b7:69:5a:36:a0:31:
                    7d:15:bc:76:1a:1b:bc:c2:4e:54:a6:12:31:ca:5c:
                    3d:53:62:6f:84:a2:1a:ee:4b:d1:35:6e:79:e7:c5:
                    56:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EC:09:A0:A3:88:C0:42:81:C4:97:A9:BE:F5:A0:B0:EF:B9:5B:DF
            X509v3 Authority Key Identifier:
                keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:11:e8:b4:4b:43:c7:85:38:89:85:b6:12:f1:19:89:fb:8a:
         6c:15:54:07:83:f2:46:8d:37:53:e9:e1:cc:b3:0d:89:de:1b:
         a5:f7:77:9d:26:f6:48:dc:f8:d2:09:96:e1:3c:1b:2b:c3:9c:
         f0:9e:f7:19:d7:b9:74:78:d4:dc:b2:f3:54:ca:25:3d:1a:f2:
         b7:c8:ea:0a:e5:55:70:07:b2:86:5f:4f:69:6f:b4:41:86:8f:
         57:57:25:2a:f9:ea:ce:65:af:82:4c:73:c1:d5:67:4b:29:75:
         21:60:2d:fe:7a:bc:a9:60:ca:e3:67:02:d2:a9:4e:a6:a9:2d:
         d5:ce:c2:65:d9:7f:2f:c6:a9:bd:ff:3b:68:cb:bd:51:e5:ef:
         94:7a:3e:ea:73:cb:74:f9:06:5b:5e:2a:f0:ef:49:61:c7:22:
         58:f0:fd:52:5a:7f:eb:aa:50:98:93:87:76:2c:ee:44:06:4a:
         58:a8:d9:61:66:8a:b9:dc:39:0f:f1:02:a5:94:03:b5:5f:0b:
         fc:c2:8b:47:de:07:8c:f3:7b:e8:32:a2:5c:00:1e:25:3f:64:
         5c:75:fb:7c:05:59:81:30:e7:54:4a:20:cf:e2:4f:c2:b1:0c:
         78:37:01:1c:67:70:b1:c0:8e:be:53:9c:a9:06:4b:b3:f2:34:
         f5:4f:b6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:26 2026 by rpki-client