Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
File:                     94Bqw18urALMoEbWUPsivv7mjUM.mft (raw, json)
Hash identifier:          q7RoTLSD6kVEloUarO/mj6iKzxl0BkaH1WuqUN804Z0=
Subject key identifier:   29:55:7E:6D:AA:AA:BC:41:5F:04:33:C1:D2:C4:D7:41:7B:8B:B1:80
Authority key identifier: F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
Certificate issuer:       /CN=f7806ac35f2eac02cca046d650fb22befee68d43
Certificate serial:       019D9962988977CE0A1E87F8328827D0C3E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 03:01:08 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:08 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:08 +0000
Files and hashes:         1: 94Bqw18urALMoEbWUPsivv7mjUM.crl (hash: Uar+wD2mWMaBkGaOjCnqQqWYzsc1W1bVNXTEWgG/ypI=)
                          2: lyCd8jSWuD5ylcHwCB_UZElDqqc.roa (hash: yIuhwu9g6Xxe3O7KESvgNx7V8m2Ye7H/CuRv/nEh5KQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:98:89:77:ce:0a:1e:87:f8:32:88:27:d0:c3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7806ac35f2eac02cca046d650fb22befee68d43
        Validity
            Not Before: Apr 17 03:01:08 2026 GMT
            Not After : Apr 18 03:01:08 2026 GMT
        Subject: CN=29557e6daaaabc415f0433c1d2c4d7417b8bb180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:a6:2a:31:4c:52:f9:c2:8c:4e:ef:b2:1e:
                    1b:9a:fc:98:71:64:39:06:89:5a:54:a3:29:7c:cc:
                    6e:e0:df:89:85:94:9f:8f:4d:48:1f:9b:b9:ea:11:
                    86:07:ad:bd:62:18:81:fd:aa:26:04:b9:e1:b4:ec:
                    29:05:15:a1:8a:69:e8:fd:0e:d1:27:2b:8a:0f:be:
                    e2:04:04:a8:19:ed:78:79:5d:71:96:84:60:8a:cf:
                    7b:02:97:0f:20:b2:ea:b1:1c:9f:26:df:70:54:e7:
                    f1:04:bd:d4:ac:e0:29:c5:d1:23:36:5b:d6:85:8e:
                    a4:68:be:c7:4c:77:6a:db:58:7a:b8:17:12:86:ce:
                    6e:74:3f:e7:4b:e2:e0:0a:17:81:6b:a4:20:55:7d:
                    a1:00:ae:54:e6:c9:92:83:16:76:64:6e:f0:78:16:
                    ff:b4:06:ae:3b:39:0d:81:2e:3e:c8:96:00:23:ab:
                    a2:70:15:02:7b:3d:88:da:5d:f1:3c:20:0a:ca:27:
                    fd:0a:e1:7f:81:bf:7a:15:b5:79:db:6a:74:f5:da:
                    90:a4:38:9f:fd:48:b2:1b:70:46:8d:0e:90:55:e4:
                    90:73:56:41:d2:07:df:f6:3a:f0:1b:8b:5c:13:de:
                    13:3c:a5:ed:a7:d0:b0:bd:ec:14:8e:49:1e:72:e3:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:55:7E:6D:AA:AA:BC:41:5F:04:33:C1:D2:C4:D7:41:7B:8B:B1:80
            X509v3 Authority Key Identifier:
                keyid:F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:e3:32:0f:c7:4a:7b:25:b8:ba:f9:ce:84:a7:9c:a5:d5:48:
         60:0b:ea:84:3e:6a:d7:40:00:1d:80:61:88:e1:88:06:80:87:
         ce:a1:1f:cd:30:1f:fd:d8:2a:51:da:fe:2e:e1:9f:6a:30:07:
         19:1c:2d:f3:cd:90:f1:b7:fe:a3:38:88:e1:8e:c5:4b:97:43:
         6c:f0:62:8f:18:4e:ed:c7:b9:7d:ab:f0:1c:46:cb:cc:63:78:
         33:81:f5:7e:c9:a3:3c:0e:56:a3:84:14:24:4d:41:71:03:e8:
         6e:da:2c:f0:0a:74:aa:cf:74:40:8a:41:a3:62:52:c4:04:f9:
         39:c8:e6:ce:18:60:a3:e2:81:70:90:81:2f:6b:40:9d:a0:40:
         92:45:ac:39:c0:13:95:69:7e:02:4e:98:19:95:5e:03:5a:be:
         2b:0b:74:a3:06:42:6a:7b:94:52:7b:9c:1f:28:1e:c1:4e:e8:
         af:37:67:94:0d:34:e3:07:5c:2f:ff:7c:ff:b7:0f:fa:23:81:
         ed:a1:d5:03:41:3b:ae:50:43:7b:14:30:46:cd:81:a1:21:c4:
         bc:56:ce:56:4d:95:9d:e0:b5:86:0c:4e:b7:1a:a5:09:ae:ff:
         98:be:de:c7:f6:70:70:9a:56:d5:2c:46:d1:9e:97:8c:1e:88:
         e8:56:44:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:00 2026 by rpki-client