Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
File:                     xqbiL04jll9sSgJcbJLvwLZi55M.mft (raw, json)
Hash identifier:          OshAbryXsHEAIip++seIZqzeURYm4uV7Y0b7BBklGfw=
Subject key identifier:   4F:0E:8B:41:75:9D:D4:D7:94:9E:CF:0D:74:D9:15:9A:12:CE:8C:14
Authority key identifier: C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
Certificate issuer:       /CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Certificate serial:       019D98187CD4CAC330DE67EBF23D4AEE89BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
Manifest number:          18C3
Signing time:             Thu 16 Apr 2026 21:00:34 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:34 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:34 +0000
Files and hashes:         1: TV3P0s4uwtaFIK2WOUaoBJ-Xjrs.roa (hash: 9BkM0T1n4z97DADL7bwyZNwxFvKQwjhmNhhGnIrdjHw=)
                          2: xqbiL04jll9sSgJcbJLvwLZi55M.crl (hash: rm12xIg9aSsw9Ne/xcHNroW53mtFR+gczogl0/cSYcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:7c:d4:ca:c3:30:de:67:eb:f2:3d:4a:ee:89:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
        Validity
            Not Before: Apr 16 21:00:34 2026 GMT
            Not After : Apr 17 21:00:34 2026 GMT
        Subject: CN=4f0e8b41759dd4d7949ecf0d74d9159a12ce8c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:77:5e:85:93:78:60:5e:81:9d:6a:36:f8:3e:
                    0b:9b:2e:5b:56:c4:fc:6c:80:1a:67:6b:d3:d3:e2:
                    8f:d3:aa:4f:76:a8:49:a7:a2:49:27:83:98:e1:f0:
                    bd:ce:64:0e:17:d8:e9:5a:7d:44:e6:0a:5d:b5:a4:
                    ae:5e:52:26:a5:b0:34:a8:5b:c4:91:3c:a1:96:8c:
                    ec:7b:09:42:6a:e7:16:5d:02:45:7f:8b:56:05:3c:
                    3b:66:d1:bb:a7:f3:62:31:99:d7:1b:b4:8b:8e:67:
                    bd:bf:93:3d:71:74:7c:cb:3c:ba:87:41:c1:7d:27:
                    33:9b:03:e6:a7:8a:3d:84:be:f4:6e:11:e0:d7:54:
                    26:b9:4a:a5:11:a2:85:ec:c7:c1:9c:97:65:85:02:
                    ef:b8:7d:91:a4:a2:1e:06:c6:5d:6d:6f:ea:1f:fd:
                    10:1b:6f:59:26:89:26:1e:1b:37:b7:87:13:9c:e7:
                    be:1b:40:14:35:5e:de:aa:a5:f7:53:9e:d4:30:bd:
                    4f:6e:58:c3:a2:b4:d1:d4:06:5f:05:8f:f8:4f:3d:
                    b7:65:f4:be:1a:a7:47:1d:ee:8d:c6:97:50:4e:cc:
                    d0:32:b3:a1:2d:f8:50:3c:b1:a5:6b:2b:45:fe:ad:
                    2e:cc:b4:68:89:c1:f7:0e:3b:a1:7b:a4:8b:9d:e1:
                    44:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0E:8B:41:75:9D:D4:D7:94:9E:CF:0D:74:D9:15:9A:12:CE:8C:14
            X509v3 Authority Key Identifier:
                keyid:C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:32:ce:50:da:08:75:5b:e5:66:82:4c:89:82:63:4b:93:48:
         3d:1b:d4:bc:00:b7:25:b8:8f:67:fd:54:ad:98:80:c8:88:ba:
         a7:b2:01:66:7d:1a:a1:ce:eb:40:1b:77:9d:dd:83:c8:d7:e0:
         76:6e:93:aa:89:a7:6f:8f:e7:37:11:d5:96:14:02:82:a6:9e:
         6c:24:ef:ce:59:6f:3b:f7:28:41:21:20:9d:a3:fa:e7:6f:60:
         6b:6d:46:2d:db:60:9f:d5:a1:9f:75:28:80:a6:72:6a:d3:3e:
         63:8a:e9:4f:1f:c9:20:66:c5:e9:2b:73:11:f5:fb:25:9d:ac:
         42:ee:85:92:d0:7b:d0:88:b4:dc:87:18:23:23:04:a8:22:72:
         ab:ab:d4:5b:39:02:5c:23:c4:fb:30:31:f1:6f:0c:31:75:76:
         2c:f1:a7:b8:5b:70:f8:b2:6b:ac:18:a0:37:71:f2:c1:b1:bd:
         b9:93:22:76:03:44:c5:31:1c:b2:74:bf:c0:31:30:98:59:ef:
         12:ce:cc:2b:64:d7:31:73:e1:46:19:f7:0a:c8:66:22:59:fb:
         27:e5:1e:8b:88:f9:93:9c:94:25:79:7d:85:44:46:67:a6:38:
         99:85:99:fa:5e:0a:a5:6f:b9:d3:54:e1:59:a8:41:d3:17:80:
         10:0d:3b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:45:20 2026 by rpki-client