Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
File:                     bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft (raw, json)
Hash identifier:          va9wMj1hv+Vo4V4EA8BHjdPl1jpTfMMYrho2e2RG1/s=
Subject key identifier:   56:96:59:3A:52:34:3E:9C:D6:62:D3:5F:B3:85:EC:BE:E4:0E:75:E4
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Certificate issuer:       /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial:       019D996292DB1558656D5177B3916D6D7728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 03:01:07 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:07 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:07 +0000
Files and hashes:         1: 3JZHqPsWutux5J8tHXPSTpnIdjE.asa (hash: VJyftmErWIHuJi9O9+UcgaAO+btvOOaS+hqj+dP6C7o=)
                          2: Cr0RQRKzgG4qFNJ_ZHR9LApOt7s.roa (hash: PQ2lV/0rJnBxGzMeVbwosavOwaNa8w1RqDybViJk+zk=)
                          3: I9YhkXL4_92lYMiJza_GlL1PdnA.roa (hash: lMZ99O89kjhiz5I4kqtb1qY19GvOflbfo65zzKkcDAE=)
                          4: bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl (hash: 1bc6Enx9qyeU2/pfSKjKC+Gn8B/JnNrXiGhIGBu4Bsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:92:db:15:58:65:6d:51:77:b3:91:6d:6d:77:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
        Validity
            Not Before: Apr 17 03:01:07 2026 GMT
            Not After : Apr 18 03:01:07 2026 GMT
        Subject: CN=5696593a52343e9cd662d35fb385ecbee40e75e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8b:79:21:96:40:88:7a:1d:fc:77:07:79:1c:
                    fe:8d:17:33:c7:35:32:b7:1c:8a:80:7a:fc:50:ba:
                    85:5f:1d:05:7a:3d:e2:2a:5d:ff:5f:7a:77:0a:0d:
                    e0:e1:7b:f8:89:68:28:67:43:57:68:00:ca:b3:0d:
                    4b:01:af:1e:92:61:16:18:7a:11:a5:4d:3e:7c:2a:
                    10:1e:43:31:22:09:d9:82:97:58:94:f8:72:67:0e:
                    9c:57:c3:ec:c0:4e:b3:4b:c5:a5:ee:73:05:07:c7:
                    7f:cc:ba:99:2d:43:a2:d9:76:86:45:0d:0e:53:85:
                    37:c3:cf:45:ad:5e:9f:e1:2a:46:54:65:53:8a:5f:
                    fe:d8:d1:45:95:e5:ef:b5:cc:32:ec:5d:77:c4:5d:
                    c8:75:6f:6a:af:0c:91:53:1a:ec:db:98:99:2b:87:
                    ef:ad:6e:38:ae:4d:21:82:26:54:88:70:6d:4a:30:
                    10:ce:69:a1:2e:be:19:ca:e8:5b:a2:57:09:3f:53:
                    e4:c4:c2:45:07:09:c4:88:0b:e2:a6:d7:ca:93:2d:
                    d6:cd:aa:24:21:e4:98:4a:2c:69:c7:9e:6f:d6:50:
                    37:66:63:01:d7:7d:3e:5b:ba:aa:f6:91:fa:a8:20:
                    6b:0b:c8:67:d3:a5:b9:8f:99:e7:8e:92:62:56:17:
                    96:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:96:59:3A:52:34:3E:9C:D6:62:D3:5F:B3:85:EC:BE:E4:0E:75:E4
            X509v3 Authority Key Identifier:
                keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:44:0b:85:1f:2d:60:d6:9e:f9:74:0a:87:ca:e1:1e:86:f7:
         3b:c8:62:e8:81:a7:cb:c2:08:2f:e4:71:10:d5:35:7e:e1:ae:
         9c:b4:3e:ae:8e:fa:7b:0b:a4:d5:8d:de:e4:45:8d:d6:e9:c7:
         5a:34:47:f4:51:c2:7e:5c:b0:6a:80:57:78:96:38:36:5e:6b:
         1d:48:ac:48:26:0a:e6:55:2a:de:58:ca:7c:9a:9c:13:23:5b:
         09:aa:b5:e9:4e:92:ee:c7:a6:5e:c0:77:1d:ef:6e:75:80:c3:
         bd:c2:4b:73:67:1c:6d:4a:d2:41:ea:e3:26:9c:b4:71:87:4b:
         29:39:cf:05:05:ae:79:0d:33:c5:db:ed:2e:35:ed:2a:ba:9b:
         f9:7d:0a:e3:43:75:1f:21:6e:23:61:4d:7c:9a:d5:89:8e:f9:
         04:a2:93:c1:46:2d:8d:ab:ce:da:6e:28:87:04:1f:b2:da:b0:
         85:98:f7:42:d1:ce:fa:03:0a:73:75:de:13:4e:58:1a:52:c0:
         6a:7f:fa:68:6d:40:15:b7:3b:74:95:e3:11:ec:c4:f4:b5:ef:
         c0:5d:59:c3:10:61:d9:ca:2d:51:ee:70:f4:d1:f7:31:90:02:
         4f:98:ff:e3:2e:97:46:de:7f:a2:cd:fe:6d:90:f3:f4:6a:d2:
         5c:b9:3f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:23:16 2026 by rpki-client