Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
File:                     j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json)
Hash identifier:          P/oVMIyBvKKneDCg6FPOgADumJ5C8qfmViNJZmVs71A=
Subject key identifier:   02:C2:91:A6:E5:65:E4:C6:BF:9C:7D:5A:FF:E0:44:5E:D0:C3:CF:3D
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Certificate issuer:       /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial:       019D992B8D054F49A89DF1BE5A55EF5363EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 02:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 02:01:01 +0000
Files and hashes:         1: OZhWUwGTJJgySO4m4Q-1c3zg7BI.roa (hash: fGvKZaOlhgdkgyxl6/1AuWFmm3crcDp6VjKR5yKK6Ms=)
                          2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: XCmTHdK4g1MDOeW8NxQk5R2vupTR1Icmp6jwBnSECto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:8d:05:4f:49:a8:9d:f1:be:5a:55:ef:53:63:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
        Validity
            Not Before: Apr 17 02:01:01 2026 GMT
            Not After : Apr 18 02:01:01 2026 GMT
        Subject: CN=02c291a6e565e4c6bf9c7d5affe0445ed0c3cf3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:62:b8:2c:7f:5b:11:a9:ef:84:30:e7:b1:d9:
                    a8:ba:bb:41:87:f2:d9:4d:52:74:80:67:23:f0:58:
                    e5:1e:20:9b:fe:f3:c5:3f:9f:0a:86:b5:c6:79:61:
                    25:e8:d7:0a:0c:15:d7:49:ce:8a:43:6a:b9:b9:5e:
                    27:63:d5:3f:e2:6a:e6:f3:39:1b:e5:21:c3:f8:14:
                    08:94:18:96:11:e2:33:51:1f:98:fe:75:ad:78:54:
                    bf:e0:1b:41:42:83:4a:e1:78:5b:80:6b:cb:3d:c5:
                    67:11:c8:a6:01:1b:62:6d:e6:b1:46:00:7e:4f:22:
                    b4:37:7a:2c:86:8a:7d:94:0d:b4:44:75:ef:e3:e0:
                    2a:a3:c0:ea:51:cc:78:32:7e:5a:ca:7e:57:42:11:
                    53:8a:c7:5f:25:fb:a6:ba:f7:c2:55:90:97:78:1f:
                    55:6a:0c:27:a7:98:de:a1:60:77:0d:78:4d:9a:9e:
                    cb:fb:d7:b2:cc:3e:0b:99:c6:cd:33:93:f0:70:b6:
                    70:96:05:e1:53:30:c6:97:cc:f3:87:20:55:fe:ab:
                    cd:17:13:31:13:c8:a9:a4:d3:9e:db:82:33:ad:85:
                    3d:e6:8f:3b:8d:be:ec:47:2b:ef:06:62:5a:58:e0:
                    23:9e:be:a9:69:d6:42:54:91:35:93:3c:c7:9d:66:
                    49:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C2:91:A6:E5:65:E4:C6:BF:9C:7D:5A:FF:E0:44:5E:D0:C3:CF:3D
            X509v3 Authority Key Identifier:
                keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:e2:c0:83:af:b1:63:13:9c:81:ed:1d:f0:72:5f:5a:d0:b4:
         52:66:60:ac:06:88:24:54:7a:11:76:8f:e1:f5:87:67:3a:8b:
         b7:cd:17:f8:eb:b5:af:cb:7f:a2:b1:ec:9b:ee:31:6a:6c:3e:
         30:eb:e3:d0:d1:5a:f9:78:08:0e:71:d0:c9:97:b0:d9:7e:22:
         ca:22:37:dd:7d:00:b0:16:df:7c:c2:dd:41:22:35:94:ec:de:
         72:71:18:88:66:24:33:e6:bb:5e:7c:71:0f:17:8b:0f:ab:87:
         3b:60:db:12:69:a2:79:b0:cb:51:66:a9:bd:30:3f:3b:b1:8f:
         e6:80:21:61:6f:8f:13:20:df:f4:8c:f1:5a:d4:d5:d6:be:f8:
         17:3e:fe:de:d3:3f:6e:5d:bb:c7:b2:9b:63:ed:81:44:9d:a4:
         f6:15:14:07:8c:71:16:ba:1f:7f:c8:fc:f5:45:0f:39:d9:a8:
         ed:2a:2e:8b:67:18:38:7b:d4:42:ce:7a:24:a1:a2:12:8a:6b:
         e6:25:dc:1e:c5:d5:76:ef:79:4c:0c:75:5b:45:13:10:3f:00:
         19:b8:b2:23:e2:6f:a4:d8:f5:60:16:ce:cf:b8:69:ed:37:b8:
         49:04:96:56:39:40:3f:30:08:5c:24:49:9b:76:d6:ac:e5:77:
         ed:0b:4b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:19 2026 by rpki-client