Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
File:                     K5KAl9yfiaejqKKWp4pPnQy84X8.mft (raw, json)
Hash identifier:          2asBB7sHHMg6iEtHuyL79Ii6vEAXEBVIvJokxU/CrUA=
Subject key identifier:   39:CA:B5:77:87:43:93:77:8C:41:EB:54:0C:50:A9:F3:2F:AD:4C:6E
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Certificate issuer:       /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial:       019D9D08601853CDFB8B4B5E994285AA5950
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
Manifest number:          18CE
Signing time:             Fri 17 Apr 2026 20:01:04 +0000
Manifest this update:     Fri 17 Apr 2026 20:01:04 +0000
Manifest next update:     Sat 18 Apr 2026 20:01:04 +0000
Files and hashes:         1: 3jD0YcizeH8Q1qV2NEPg7xq78Tc.roa (hash: 52GkghurYXZlBw/P3re6oL3xnNmHYgWQ/XfBpyrLrd0=)
                          2: Ecy3CFSnUwOKhmhjKk6r9oZmrgU.roa (hash: XtcTVzHETxkCw8mwBAqZHbUKLVnvKh4s/PETyzl7Dqc=)
                          3: H8kw6Sg_EEFlV4WiqGHQYPzK8jI.roa (hash: vA9KgFsuau17xYabkQq0t4vvihSWAC35OyURHBxCae8=)
                          4: K5KAl9yfiaejqKKWp4pPnQy84X8.crl (hash: O+Fa3bIs/nUz3b/Jo6udqVE/lLz2HYvjAjDQyXsd6Uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:08:60:18:53:cd:fb:8b:4b:5e:99:42:85:aa:59:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
        Validity
            Not Before: Apr 17 20:01:04 2026 GMT
            Not After : Apr 18 20:01:04 2026 GMT
        Subject: CN=39cab577874393778c41eb540c50a9f32fad4c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e0:0a:3a:c0:b3:29:84:ba:1d:76:e6:06:73:
                    8d:cf:4e:36:24:c1:14:0d:55:5c:43:1c:24:c5:11:
                    6b:c8:39:6d:09:5b:d6:a4:c7:17:4c:bd:bb:a9:6c:
                    56:ba:4b:b5:f4:d0:3d:8d:f0:df:13:c2:02:eb:f8:
                    b3:1a:66:1f:a3:4c:44:e5:5d:ee:40:7e:78:bb:ad:
                    7d:b5:ff:6b:67:a2:fa:30:4b:14:a4:b6:6e:ac:59:
                    68:5e:ad:a8:eb:5f:ff:9b:a2:af:28:24:52:92:f6:
                    76:df:3f:00:4e:25:d6:bc:98:d8:82:f6:0e:ac:d7:
                    71:57:e8:dc:e7:7e:db:03:fa:61:10:cb:ff:4c:1a:
                    92:17:7e:db:16:78:54:6d:16:34:49:17:fb:76:ff:
                    49:22:9d:99:3d:a4:86:11:96:8b:42:32:71:4d:d0:
                    96:0c:ff:24:d4:37:4d:e4:94:99:ec:c6:ca:20:a7:
                    71:bc:d0:06:bc:2f:98:dd:14:f6:f3:6e:00:dd:40:
                    b3:0a:17:ea:34:67:1a:5c:88:ef:ce:60:7d:6c:63:
                    c6:9a:0a:dd:f3:36:73:2e:ee:88:18:52:f4:b9:53:
                    2f:1a:33:0d:f0:a2:45:83:33:18:41:34:cd:f2:dd:
                    ee:28:23:ba:01:7b:35:29:81:6f:96:4b:f0:3a:cf:
                    7a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CA:B5:77:87:43:93:77:8C:41:EB:54:0C:50:A9:F3:2F:AD:4C:6E
            X509v3 Authority Key Identifier:
                keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:55:3c:9c:48:65:16:c1:35:71:02:68:22:f9:22:d7:33:10:
         eb:e8:4b:19:29:57:87:07:0e:bb:0a:99:9f:f4:ec:c0:fd:77:
         d5:5a:d4:13:b0:24:d8:fc:ed:17:ff:3b:62:30:21:29:d8:9f:
         84:ce:0e:50:31:ef:57:56:6a:38:3d:0f:41:79:5d:a1:33:8f:
         4a:14:3b:5a:fc:4e:f5:83:78:29:1c:5b:92:a7:be:04:71:c3:
         a7:14:c6:c8:6f:f0:b7:49:df:71:47:95:8b:5c:c0:a8:87:6b:
         4c:ea:e5:5b:93:a1:04:26:4c:2b:d2:ad:35:11:4e:98:a4:59:
         02:22:af:0f:01:9c:ed:e1:15:f8:b5:60:54:cc:07:c6:ef:3a:
         88:16:e2:da:e3:1a:29:28:48:cd:ad:c9:fd:a8:a8:d3:1b:b7:
         26:7b:63:b7:35:07:2f:a2:4c:99:e5:8b:a7:92:ec:cd:ca:88:
         1d:1f:6e:55:76:e9:a2:12:5d:3a:2a:ff:3e:8d:12:43:5a:03:
         4e:79:af:ea:8b:44:a5:be:74:12:26:4a:d7:ee:0d:fb:70:72:
         e3:0e:fe:99:2b:fb:49:79:ac:59:37:b1:0c:19:7b:91:de:f3:
         bc:e7:e3:e3:c4:03:68:54:9a:3d:a4:c1:3a:2a:22:89:0a:1a:
         d2:7b:81:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:23:33 2026 by rpki-client