Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
File:                     2yOWhUCfZLocOlSo7xQckk5x2JI.mft (raw, json)
Hash identifier:          rqBxOGZFGq7wA7+Debiia9a0fh3kNg3gWl5Hb3k5FuM=
Subject key identifier:   9F:E8:5E:00:E4:14:04:92:84:3D:25:2A:E2:22:4B:EC:4C:67:87:54
Authority key identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
Certificate issuer:       /CN=db239685409f64ba1c3a54a8ef141c924e71d892
Certificate serial:       019D9A3EE32AC07739A901687CC66C23427B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
Manifest number:          18CF
Signing time:             Fri 17 Apr 2026 07:01:45 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:45 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:45 +0000
Files and hashes:         1: 2yOWhUCfZLocOlSo7xQckk5x2JI.crl (hash: ZnODPZNLTb4BrWAXMK7tAkyh+maNK39+w9lnNAfYay4=)
                          2: NCNcQSJc0TGzJY4u8AfMXCbg0RE.roa (hash: olrbYNRVZ37d5DGlOqhZmdOWpkC0qMK5uUX2T/dHnwk=)
                          3: NWPNhzQpbb1pWfOR8Do4Rk33ISE.roa (hash: zQ014lIcxxnh0W92J1yApdSlVAvsQefsim3FPRGCxsw=)
                          4: S-F0eq4A_ozaGKmyidwMC5Jy5Ro.roa (hash: x3y+oF+ZdUAZ9Uf6wr7xaiGLxbD/kDc2LpvrGJEYeAM=)
                          5: oDRJrLEWIwB2bQIN3VSRFVmzPEs.roa (hash: g0N6pLY+sNIqbqq3i2xctEc69tyHJmh/CSOpC4j0mH4=)
                          6: wet2iRU-DIcI7ecq9nOLNfx3URM.roa (hash: ukbv/ID6Q3IjhclCaom/PoiMdbvmxstujbtE/kfKRtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:e3:2a:c0:77:39:a9:01:68:7c:c6:6c:23:42:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db239685409f64ba1c3a54a8ef141c924e71d892
        Validity
            Not Before: Apr 17 07:01:45 2026 GMT
            Not After : Apr 18 07:01:45 2026 GMT
        Subject: CN=9fe85e00e4140492843d252ae2224bec4c678754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:77:19:a4:ca:f2:48:c8:ae:62:a3:18:d6:c6:
                    1b:9a:e6:f7:c2:95:d1:f3:f2:52:75:da:82:ad:f0:
                    8b:6e:27:c7:fb:39:45:dc:e6:b2:56:6d:69:b1:98:
                    ca:f1:87:53:4f:da:4b:8a:a1:71:6d:a3:a7:35:1f:
                    09:9e:e9:2e:8a:e0:f0:c8:01:24:46:03:3c:d1:d1:
                    5b:4d:96:71:78:6c:6b:6f:b3:1e:43:93:73:17:43:
                    d4:5b:7a:9d:1c:32:8a:33:f8:85:49:5a:ce:5e:2a:
                    d5:3a:be:40:48:b9:8d:ee:24:7c:52:51:8a:23:25:
                    83:6b:47:39:97:a3:54:38:36:25:9c:3e:7b:02:ca:
                    93:83:43:f0:d1:7a:df:b1:db:9e:f9:53:94:0e:f5:
                    a5:1f:be:14:30:13:25:c4:c7:f3:d4:d4:e1:10:7b:
                    cd:a8:c7:56:19:2b:34:89:95:17:6b:cd:13:7b:00:
                    22:ce:f5:33:7a:f7:06:44:85:af:7e:16:28:39:85:
                    f3:ba:d3:f4:40:63:56:68:43:71:bb:0c:09:fa:97:
                    f9:d1:ac:fa:59:dd:12:f0:33:96:ae:2c:8a:e0:61:
                    e4:78:9e:00:05:7b:d5:10:6a:c0:f6:3f:3f:53:7f:
                    75:e8:73:f2:6e:cd:74:05:fd:3b:be:96:99:5b:46:
                    39:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E8:5E:00:E4:14:04:92:84:3D:25:2A:E2:22:4B:EC:4C:67:87:54
            X509v3 Authority Key Identifier:
                keyid:DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:65:a2:5c:d0:53:9d:cf:26:61:4f:74:24:4f:f8:a7:ca:8f:
         95:1e:c4:22:fe:6a:d5:f1:ad:01:e3:7f:15:bf:7e:cf:a5:e4:
         1d:ed:68:20:f6:6a:8f:e2:6b:64:dc:c5:19:df:9f:44:8f:8e:
         1e:c3:64:59:0f:af:ab:3b:f5:5d:a8:42:ca:e8:fb:42:27:9e:
         68:1c:51:e0:56:a3:13:f4:c6:13:68:7d:81:94:df:59:0a:b0:
         bd:fb:0b:f6:2b:9a:07:62:9a:d5:98:ec:64:3b:02:dd:af:36:
         96:89:6f:ba:da:4d:60:84:28:13:ce:8a:64:1e:4f:b0:ec:a6:
         9d:a0:d4:12:1a:29:40:8d:9a:10:d7:41:4c:b1:25:88:71:32:
         4b:ce:be:a4:3f:eb:ec:60:73:e1:a6:a9:e5:05:f2:c3:d7:1f:
         5e:08:3d:5e:c5:9a:39:f2:c8:05:f2:53:c2:85:ab:0a:b9:48:
         ca:72:56:26:29:0d:28:e9:07:bb:2c:fb:c6:9d:69:eb:b6:64:
         88:9a:7f:c2:4f:b4:0f:ed:f9:5e:ae:37:f5:17:be:d5:2b:5a:
         12:e0:e7:b5:26:28:1e:b8:ca:92:2b:91:d1:29:40:90:7a:05:
         de:5d:ac:2b:fc:b7:87:48:93:fe:92:5d:4e:05:f9:3b:88:b8:
         54:42:fc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:22:09 2026 by rpki-client