Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
File:                     fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft (raw, json)
Hash identifier:          eEFS/iRxBPHZ/c5DnT7hFkGuZ/4Wh7j9Vd92n6MaPBg=
Subject key identifier:   18:2C:B6:FF:94:D8:33:6F:70:90:DC:A6:0D:53:A7:08:44:90:F1:9C
Authority key identifier: 7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5
Certificate issuer:       /CN=7ddf809131ee56531939d05f607271bdf01d19b5
Certificate serial:       019DA41C89918C7031C501E96C5BBE628EF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
Manifest number:          18C7
Signing time:             Sun 19 Apr 2026 05:00:26 +0000
Manifest this update:     Sun 19 Apr 2026 05:00:26 +0000
Manifest next update:     Mon 20 Apr 2026 05:00:26 +0000
Files and hashes:         1: _Y3F_vMopcXa3E02cfDEZMCP0Dk.roa (hash: igREdiG7Xu7S8r8bPH/7sOXp/7jJ8oNkSJSuSFIVgwc=)
                          2: fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl (hash: 9BZy/b0DcOWyIENg35/72sT0UxPfRZdZhDOs7fP5MUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:1c:89:91:8c:70:31:c5:01:e9:6c:5b:be:62:8e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ddf809131ee56531939d05f607271bdf01d19b5
        Validity
            Not Before: Apr 19 05:00:26 2026 GMT
            Not After : Apr 20 05:00:26 2026 GMT
        Subject: CN=182cb6ff94d8336f7090dca60d53a7084490f19c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f0:41:d5:ec:4c:c0:43:29:38:f2:52:9e:97:
                    d9:6f:9b:dd:44:94:b8:d5:a5:4b:35:ce:06:c0:d6:
                    a1:1a:39:4a:85:2f:3e:0b:96:2e:a9:7a:c7:40:fd:
                    e6:3b:a7:f3:e7:00:9b:89:71:15:38:82:74:89:5b:
                    d9:8c:13:c2:d4:86:2c:52:6e:37:0f:68:ee:84:91:
                    39:fe:7e:00:71:0b:ec:97:15:57:53:83:5f:5c:08:
                    dd:fb:61:92:1d:1c:ad:cb:3b:f2:da:63:7a:88:9b:
                    54:dc:77:2b:28:d0:b4:75:92:3e:a4:f3:11:7a:41:
                    2f:79:09:be:2f:b2:0a:c9:cb:57:81:6a:f0:95:75:
                    7d:49:b2:f0:08:12:02:20:d6:d0:b6:02:36:e7:6d:
                    1b:45:4c:f4:b5:ed:04:59:ae:a5:99:1e:27:34:f9:
                    99:06:21:32:aa:a2:2f:a9:8d:7e:da:2a:a4:21:5c:
                    8a:6f:de:a7:d8:ed:77:e5:63:91:37:55:be:42:3a:
                    3d:d4:da:8e:dc:12:04:59:30:2a:5b:84:4d:d1:b4:
                    b2:b9:55:6d:87:fe:09:a2:85:f6:f9:e2:34:e8:bb:
                    b1:f9:63:9f:e8:c4:e6:86:73:91:7d:e8:8b:6b:d2:
                    ca:f7:bc:48:ff:fd:6e:42:e3:c6:bd:87:e7:42:00:
                    71:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2C:B6:FF:94:D8:33:6F:70:90:DC:A6:0D:53:A7:08:44:90:F1:9C
            X509v3 Authority Key Identifier:
                keyid:7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:03:f5:d1:88:79:eb:38:d1:10:a0:22:8e:80:ba:86:d2:aa:
         de:9d:cc:71:6b:1f:f9:85:16:f7:6b:d9:f3:91:2f:1e:01:0e:
         f0:16:db:c8:59:c3:24:0e:ee:c7:58:72:02:e0:fd:73:34:80:
         77:aa:df:56:94:6d:bf:75:78:e1:9b:98:09:db:6a:f9:67:4f:
         e2:3e:9e:c6:44:40:f8:4e:9f:fa:97:63:26:e0:e1:fc:e9:d2:
         b2:3b:eb:14:1b:50:90:71:58:f5:15:58:07:c9:28:65:59:c0:
         04:26:01:e7:85:8e:73:8d:2b:50:d7:09:2f:b1:b1:cc:b3:7d:
         a4:d3:83:ba:0e:75:98:d9:ff:c6:7d:60:6b:40:f3:bc:95:8b:
         15:e6:e0:d1:fd:c6:77:1d:ee:cf:27:01:e2:d5:f5:0b:5d:fa:
         b6:94:b7:16:d0:7a:a4:fc:2d:8e:2f:47:c6:4e:70:aa:d4:cc:
         9a:2d:32:9e:b6:3d:d0:33:58:b0:1c:ed:e7:1a:62:21:34:49:
         ed:1a:91:3c:fe:ba:72:a8:b9:8c:f8:dd:ce:2f:13:ba:55:8d:
         07:38:4c:42:37:39:84:a8:28:1e:b7:76:44:2f:b6:ea:7a:68:
         ce:0d:e1:5f:f1:83:fa:5a:21:37:c7:be:8f:9e:21:58:a8:18:
         b3:ff:94:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:02 2026 by rpki-client