Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
File:                     g_W9I77F0GOYM6kUGYXMV1OIbhY.mft (raw, json)
Hash identifier:          MKwRxqe8t8ZVxHQKIC6eNlGEefWwG8kRYBPTwbAbDdk=
Subject key identifier:   F2:D4:31:46:1D:8A:DF:5E:70:0A:DA:28:64:F2:0F:1D:E4:74:55:77
Authority key identifier: 83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16
Certificate issuer:       /CN=83f5bd23bec5d0639833a9141985cc5753886e16
Certificate serial:       019D9962D9028881985906F935BDDCB14F52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 03:01:25 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:25 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:25 +0000
Files and hashes:         1: g_W9I77F0GOYM6kUGYXMV1OIbhY.crl (hash: Vf5RBH8HhZUmrpsfqg3hbTqOT6/owJQn0YiZpIAXeFY=)
                          2: z2shUf2aqRLmVJq8eVLYTJ_YFbI.roa (hash: Edkz13QcBJuRKSQNfHEA5UGNYVjpEOKlRl0wbxqZyxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:d9:02:88:81:98:59:06:f9:35:bd:dc:b1:4f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83f5bd23bec5d0639833a9141985cc5753886e16
        Validity
            Not Before: Apr 17 03:01:25 2026 GMT
            Not After : Apr 18 03:01:25 2026 GMT
        Subject: CN=f2d431461d8adf5e700ada2864f20f1de4745577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:23:99:db:ac:55:b3:85:ad:3c:3a:da:ec:2e:
                    3b:6f:3b:1f:df:00:1d:5d:3d:74:5d:93:5c:ce:64:
                    36:29:51:48:41:d6:a8:0b:f6:6d:e0:91:51:cd:93:
                    47:a1:8c:14:20:ea:9e:be:dd:ab:c8:8b:b2:6d:8a:
                    81:ae:8c:c6:5d:51:09:64:f3:34:6e:3e:94:6e:23:
                    2c:2a:73:68:6b:74:04:63:d5:2e:b6:6d:8c:1b:16:
                    04:50:6b:f1:2f:46:19:e9:4c:a9:02:b8:fe:92:3e:
                    b7:72:0f:b6:f7:ff:5c:f8:98:34:ae:2e:23:2c:7a:
                    67:f1:ba:fe:e6:36:23:a7:1b:2c:20:f8:f2:a9:ec:
                    20:03:30:c5:34:fa:3a:34:65:f2:48:f1:f7:df:47:
                    35:9a:e8:d9:a8:19:f9:fe:89:1b:1e:a3:9e:2d:fc:
                    2a:a7:d3:7c:5d:89:a1:9a:fb:aa:65:a5:66:f4:05:
                    f2:25:7a:8f:bd:0e:fe:9e:4c:88:94:1e:fc:bd:38:
                    44:b9:85:b4:b8:80:e4:93:11:49:a7:bf:02:04:e4:
                    43:a4:20:1d:26:fb:71:05:d6:e3:ea:af:66:b6:45:
                    f8:34:11:bf:73:ba:e9:c3:59:ab:81:88:9d:eb:8a:
                    5d:99:3d:39:a9:cc:ce:5a:e8:a7:05:02:ab:a5:8e:
                    2f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D4:31:46:1D:8A:DF:5E:70:0A:DA:28:64:F2:0F:1D:E4:74:55:77
            X509v3 Authority Key Identifier:
                keyid:83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:d3:8b:8c:df:0b:1d:f2:b8:3c:16:b3:4f:10:fa:48:08:36:
         67:6a:6d:d1:64:f5:81:f0:30:52:d4:fb:b8:22:73:d5:17:4a:
         ad:5e:4c:68:ad:43:7b:38:f3:90:5d:4a:99:0c:c0:b2:a1:bb:
         07:98:ef:1d:93:6d:15:06:a5:2a:4a:ab:a3:08:7f:4b:8d:45:
         20:55:40:53:a3:8d:98:29:d9:50:0e:96:78:65:84:e4:3c:ae:
         8d:b2:d2:66:54:7a:a8:8c:99:85:b1:6a:bc:d9:2e:84:c7:81:
         43:d2:31:cb:de:63:77:90:4a:c5:ef:de:d6:18:a4:70:d1:92:
         d2:a7:27:79:ce:f7:dc:91:29:be:0f:c4:22:d9:87:45:81:b9:
         b7:20:fc:3b:32:ab:81:36:3d:c4:d5:7a:9b:29:a1:20:98:a5:
         c5:cd:e8:df:83:0f:b8:db:72:00:ce:67:b3:51:ea:10:03:ae:
         b8:2c:d6:76:fc:36:ae:4d:be:f6:d4:72:26:8b:ae:dc:53:78:
         8f:38:7b:77:35:e7:cd:a0:90:af:22:d7:cb:37:0a:25:33:c0:
         39:c6:35:f2:88:34:a1:3a:76:93:11:d4:d8:0f:38:dc:13:fc:
         f1:cf:71:25:8f:11:bf:e9:cb:21:87:8f:e6:0b:53:3f:ea:3a:
         43:5a:7f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:52 2026 by rpki-client