Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
File:                     Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json)
Hash identifier:          fv1eFEmVSnmyVJhhCYRulfEjzZ0rnNyhAn7MRfYiZhs=
Subject key identifier:   18:AC:D7:CF:B3:6F:77:6E:65:C4:F7:91:7C:B5:40:DB:FD:74:06:F1
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Certificate issuer:       /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial:       019D98F5249311F5AF71FDAC1FCDC153A550
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
Manifest number:          18D6
Signing time:             Fri 17 Apr 2026 01:01:35 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:35 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:35 +0000
Files and hashes:         1: BCTCosehzN-IVujDky1DFPEPdk8.roa (hash: dD51Omff3fmTkuQoAW0zLyIe0HD79k7wegGUmnwdJ5U=)
                          2: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: wDsP2WC73AEkSJKkEH08G/EygLTFc2a0nUDsBcvdT1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:24:93:11:f5:af:71:fd:ac:1f:cd:c1:53:a5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
        Validity
            Not Before: Apr 17 01:01:35 2026 GMT
            Not After : Apr 18 01:01:35 2026 GMT
        Subject: CN=18acd7cfb36f776e65c4f7917cb540dbfd7406f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:6c:4c:21:c9:0e:65:d4:c5:fe:1c:a5:ff:
                    fb:b7:48:fe:c6:94:49:da:46:d4:71:b7:51:0c:65:
                    b8:42:60:c0:d4:c3:df:b8:13:c6:18:87:b6:60:b7:
                    aa:09:9e:cd:90:f5:13:d8:64:d1:bb:86:d2:7f:fb:
                    59:80:0a:0d:67:7e:49:9d:56:57:c6:62:77:0e:d2:
                    54:37:54:71:77:d9:c3:f2:89:ea:1f:98:24:7b:a2:
                    46:dd:c6:c5:08:a0:6f:0c:77:7c:b5:b5:fa:9c:4f:
                    53:56:cf:0f:f1:87:5f:60:d3:00:95:16:8b:69:8c:
                    52:88:4d:d6:22:a9:55:bd:8e:94:fb:d4:9b:b2:05:
                    75:f3:de:a6:54:17:2a:d4:9b:ca:5a:22:11:99:18:
                    3d:fc:8f:4e:e1:7e:fe:f4:fe:4c:d0:1f:74:47:00:
                    5c:88:c3:67:16:ab:48:43:92:8f:29:dc:b4:87:d9:
                    e9:15:b8:3e:15:8e:1e:db:da:5f:37:1b:90:1b:8a:
                    0a:8d:23:89:89:db:6e:4b:74:0e:0b:28:3b:36:d9:
                    1b:15:36:b4:6b:bf:71:5d:ea:43:55:a0:f5:3b:41:
                    ab:40:f7:01:ae:4e:65:02:51:10:62:93:33:43:bd:
                    35:3c:d6:d4:e3:60:e8:ae:ae:ab:77:76:2d:69:08:
                    53:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AC:D7:CF:B3:6F:77:6E:65:C4:F7:91:7C:B5:40:DB:FD:74:06:F1
            X509v3 Authority Key Identifier:
                keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f8:6e:2b:02:72:e6:39:95:75:a8:2d:da:70:ca:f4:96:8a:
         33:f3:57:24:e9:c4:b0:45:f8:cf:ce:bc:cd:60:78:25:cd:f4:
         47:67:d5:f3:e8:49:e6:a3:65:a6:1c:8c:21:a6:70:a7:40:48:
         3a:39:3d:ad:df:5a:33:aa:34:db:8d:ef:e9:2c:82:ef:e5:9c:
         09:3c:da:a4:15:1a:8f:e1:51:5f:dc:32:19:de:1e:23:f3:5a:
         c7:69:0a:e5:85:06:b5:cb:54:5f:b9:39:c2:23:98:43:0f:9a:
         72:b3:6c:20:54:df:fa:ce:7f:e4:55:ac:8b:d6:32:b7:bc:52:
         a5:4b:96:b6:48:ec:22:b7:a9:b8:d6:35:80:32:5d:42:0b:d8:
         2b:f8:14:16:2c:51:6f:a8:eb:4b:50:43:af:a4:79:84:1e:28:
         83:c3:c0:fe:db:77:7f:4d:1c:a8:2b:fc:cf:6b:86:76:d4:10:
         c0:4d:b8:91:fb:ec:3b:65:d2:72:f1:3c:53:14:41:96:a4:21:
         8f:fe:a7:ed:f5:6e:b3:d4:cf:aa:72:fb:a5:40:54:1d:00:09:
         d4:57:79:3c:82:53:6f:68:f8:59:0b:0a:f4:a2:66:f6:3d:d7:
         94:83:02:b0:08:48:8d:f5:08:d9:e2:fd:32:2d:40:67:d8:d7:
         6b:e9:88:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:03 2026 by rpki-client