Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
File:                     Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft (raw, json)
Hash identifier:          8RL6rDh+WwtQf8+7fh9KQN0m8pJqCtx/kId3DSTTCYs=
Subject key identifier:   FD:D9:E4:52:02:83:07:5A:85:C0:66:19:A6:B5:35:93:1D:EA:1E:C0
Authority key identifier: 32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E
Certificate issuer:       /CN=32ad7f7d838485a19e00279968a9b98683a4c56e
Certificate serial:       019D98F4B3E4463283F71A695B3DB3EB2490
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
Manifest number:          18BE
Signing time:             Fri 17 Apr 2026 01:01:06 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:06 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:06 +0000
Files and hashes:         1: Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl (hash: ff5sTgDRRL0tWCM5hkXBzrj0sDGB5qu3M+8JGIU5M44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:b3:e4:46:32:83:f7:1a:69:5b:3d:b3:eb:24:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ad7f7d838485a19e00279968a9b98683a4c56e
        Validity
            Not Before: Apr 17 01:01:06 2026 GMT
            Not After : Apr 18 01:01:06 2026 GMT
        Subject: CN=fdd9e4520283075a85c06619a6b535931dea1ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:11:9e:75:9f:46:36:b5:93:4c:db:44:c1:
                    a6:0a:66:fe:68:80:d9:e1:fc:06:78:c2:9c:a6:72:
                    f3:a3:2c:24:5f:6f:ec:f5:c2:ba:4a:f1:9a:5a:c4:
                    c2:59:68:92:f3:09:aa:35:f4:ca:8a:f6:59:8b:b4:
                    18:3a:ea:f0:c0:47:2d:57:93:d1:bb:6f:fc:bf:01:
                    81:2f:ee:43:9c:30:f3:be:09:be:25:4f:da:d0:77:
                    2b:a4:1a:99:8d:65:03:bd:f3:a5:2f:80:e9:9f:e0:
                    55:05:9e:b6:c8:b0:c5:a7:0a:5a:66:52:c6:6a:4b:
                    4f:3d:37:f6:6b:ed:51:e0:c0:ac:56:6e:a3:41:22:
                    e2:47:79:99:fd:73:c8:16:da:df:6d:61:a6:d1:b4:
                    74:ac:de:8f:ef:0f:01:8a:60:cd:28:8d:d3:cc:a6:
                    77:0e:4a:a7:cf:da:09:d0:90:b2:ab:2b:d5:a5:4c:
                    fc:c8:09:0d:0c:47:46:90:41:47:ca:29:79:98:30:
                    7d:f7:04:77:48:a7:fb:cb:f0:c3:cb:a7:92:93:07:
                    12:b9:6a:46:c6:f9:46:17:f8:36:14:01:95:07:8f:
                    09:a3:14:6c:6d:05:e2:f4:56:d0:a2:5e:51:e3:da:
                    29:16:6b:c1:c7:ea:5b:b3:22:3f:b5:a7:43:b3:79:
                    c0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D9:E4:52:02:83:07:5A:85:C0:66:19:A6:B5:35:93:1D:EA:1E:C0
            X509v3 Authority Key Identifier:
                keyid:32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c5:9a:d8:0f:fa:f0:d2:0e:e5:aa:1f:d2:b1:65:54:34:ad:
         6e:e5:ff:dd:54:9b:aa:fd:ad:64:32:f9:f6:79:10:51:e4:b5:
         15:1c:52:f1:d5:8b:54:64:7b:18:7f:51:7c:a2:58:57:34:2f:
         7b:87:9e:86:7f:80:3e:65:1a:a8:51:ba:9b:33:09:ff:95:94:
         fe:55:a7:51:a1:bd:67:94:99:6b:81:3a:e6:55:88:ef:42:f3:
         8d:57:cb:fc:f9:7c:35:e7:48:e1:e3:3f:67:75:3a:9f:03:03:
         83:4a:b1:c1:9d:9d:e4:51:3a:3d:5c:f1:d4:c2:0e:2e:5d:37:
         36:55:d7:3c:f5:b0:be:7a:c6:bd:ff:0a:2e:09:38:c8:29:58:
         df:0e:19:da:7a:e1:38:3a:fc:9f:0d:c6:12:9d:6d:6b:bb:cd:
         34:84:40:14:3e:77:32:a6:a6:d1:33:46:ae:fd:85:47:63:79:
         c5:80:ee:9a:e1:5a:f7:8f:6f:1a:1e:8d:61:14:9c:6c:cd:2b:
         58:e8:84:4b:5b:f1:33:83:74:9f:be:93:18:8b:d2:47:05:f4:
         97:1d:42:6a:4f:33:31:c4:67:d9:17:c8:69:df:c3:bd:94:f8:
         bd:07:e6:93:f9:7f:60:f5:14:95:3b:f5:1c:a2:a1:24:12:5f:
         38:6e:57:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:22 2026 by rpki-client