Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
File:                     9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json)
Hash identifier:          D7JZxOoSjiuQbbVQ7JQhQ+BUhFi06LNeY5wPHslg1Rg=
Subject key identifier:   6D:37:84:DA:D3:4F:0E:E9:55:08:51:D6:AF:42:8E:2E:99:E7:CE:4C
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Certificate issuer:       /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial:       019DA3AF386A7E3842932224F429C443FFC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
Manifest number:          18C9
Signing time:             Sun 19 Apr 2026 03:01:02 +0000
Manifest this update:     Sun 19 Apr 2026 03:01:02 +0000
Manifest next update:     Mon 20 Apr 2026 03:01:02 +0000
Files and hashes:         1: 4seyTDBe9bL2x8Z_6sMBSrOYvgM.roa (hash: Ld+vj6OA1gKqESzL9huJc2LDFrgP5kvfK/8UeR3bm/4=)
                          2: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: FCbEypoPJqaZR5D99joDjo64UDR8sAUGPok+vKqQ8AQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:af:38:6a:7e:38:42:93:22:24:f4:29:c4:43:ff:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
        Validity
            Not Before: Apr 19 03:01:02 2026 GMT
            Not After : Apr 20 03:01:02 2026 GMT
        Subject: CN=6d3784dad34f0ee9550851d6af428e2e99e7ce4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:29:38:55:14:47:14:33:2a:ff:4c:b9:6f:6b:
                    6e:fa:4a:c4:59:00:c7:61:eb:92:fb:b4:c2:30:0e:
                    2e:b6:64:84:3a:99:e6:75:85:c9:ef:b4:29:7a:7e:
                    e0:05:de:fd:0c:2b:2f:0c:a8:1a:8a:be:91:ed:25:
                    65:71:78:5e:20:7c:50:35:f6:67:c8:39:70:0d:55:
                    21:fa:15:64:9d:0f:6c:cc:13:3f:4f:69:43:6d:2f:
                    e9:80:99:9a:59:4d:47:cc:f9:2c:8c:43:50:c1:0b:
                    b1:71:cb:5c:3d:4c:f2:a6:1c:8a:6e:41:45:2e:9e:
                    fd:d5:cc:1e:7d:96:06:1d:73:3d:6d:53:fb:b2:05:
                    48:f1:84:65:25:e8:1e:e0:6b:db:a3:28:a9:43:ce:
                    e8:b6:f5:50:02:50:af:59:6a:2f:72:13:47:59:ad:
                    ee:5c:4b:45:48:9e:ce:53:12:ef:c8:e2:9e:40:30:
                    9d:e9:84:79:99:40:4a:e4:d9:8c:4e:63:3d:bb:b9:
                    dc:a6:d4:55:45:34:b2:d6:2b:fb:c0:b1:40:f3:ef:
                    0f:0d:cf:9e:2c:2c:c0:58:3d:9d:14:b3:4b:db:d0:
                    26:51:29:55:3b:34:4a:2d:a7:ae:4e:ff:1d:0f:63:
                    9b:db:38:93:6e:3d:00:27:e4:d4:a8:49:85:55:06:
                    f5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:37:84:DA:D3:4F:0E:E9:55:08:51:D6:AF:42:8E:2E:99:E7:CE:4C
            X509v3 Authority Key Identifier:
                keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e1:6a:18:0a:bc:ea:63:d8:0e:74:46:ea:b4:7e:a7:d6:a2:
         60:64:76:5a:00:1a:7b:69:49:9e:16:43:ef:bb:99:0f:53:25:
         00:ec:4d:fa:b7:e2:37:69:fc:47:94:4f:47:70:14:e0:36:0f:
         b8:e2:5b:fb:6e:67:81:53:39:00:69:ee:28:23:af:3f:c2:ce:
         d4:fe:32:e1:bc:20:ac:62:2a:ed:42:6e:51:e4:a7:39:6d:01:
         c4:63:d4:ed:21:84:26:b3:18:a5:fc:2b:95:a8:a9:14:4e:02:
         2a:f8:02:e0:79:c8:25:2e:39:8e:30:e7:ae:7f:b8:0e:05:06:
         10:e9:c5:83:0b:fd:8a:92:3f:03:0f:82:f1:23:c4:fb:b3:1a:
         c2:9d:ba:16:ae:c2:71:3b:42:d4:5c:b2:65:11:fe:eb:bb:5f:
         fc:2f:21:04:77:28:bb:78:06:4c:3e:34:b2:8e:d6:49:95:a1:
         00:eb:1e:16:24:13:c8:fd:cc:8b:6b:57:ff:d0:20:76:52:6c:
         9e:b3:1b:73:b6:51:81:b4:bd:a1:41:6e:1b:6f:42:88:13:67:
         60:ee:2c:dd:2f:58:9e:be:02:19:96:c4:ac:ec:87:e4:10:1f:
         45:7d:88:a6:59:74:a4:d9:9b:17:f4:ca:66:cd:f2:50:4e:c1:
         12:0e:48:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:11 2026 by rpki-client