Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
File:                     rLVLzEkpGh8yt86tTylogtBTFJI.mft (raw, json)
Hash identifier:          jjbqmtO2egynIQJ6rrE0CE6tox+1ADi+99ksMtgQ940=
Subject key identifier:   0F:BA:D3:18:B2:84:B0:75:0E:5C:4E:1A:02:26:F5:17:0F:77:6A:AD
Authority key identifier: AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
Certificate issuer:       /CN=acb54bcc49291a1f32b7cead4f296882d0531492
Certificate serial:       019D9A3EA4B3A02C417DCC0A8E4BA07A4D5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 07:01:29 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:29 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:29 +0000
Files and hashes:         1: Yk8K_yjB7gE3OoJVuZNkwQupR_M.roa (hash: tY5f7xqEp6Riff6tKlIsz63Q7nyfWnAQu/RKC5YJYpg=)
                          2: ax2msnEEnBpql0wtfN6LKLilaEw.roa (hash: khBC79DhTJMtOh4PAW+/zA1ZipTlEKexyh0uRxokVU8=)
                          3: k26mF9MmuzhiFpBjSAPIbbJx6NA.roa (hash: expI8ju4pO9T2VDPcQtkx64FF7f+z+QlEkn5dvh9hp8=)
                          4: rLVLzEkpGh8yt86tTylogtBTFJI.crl (hash: Jf3ahH6mj+lDhSGH7ZQj2ZhkoglxXVAxpQqRp2iXYYE=)
                          5: u1kMFExxSy9w7Ndw_xKckqwMp50.roa (hash: fWU8uqj9vLth8eAvIcefHvbFMC/gjcfidrkqDKu8wEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:a4:b3:a0:2c:41:7d:cc:0a:8e:4b:a0:7a:4d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb54bcc49291a1f32b7cead4f296882d0531492
        Validity
            Not Before: Apr 17 07:01:29 2026 GMT
            Not After : Apr 18 07:01:29 2026 GMT
        Subject: CN=0fbad318b284b0750e5c4e1a0226f5170f776aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d6:db:ae:31:8e:3c:20:5b:de:e3:38:65:dd:
                    43:36:8d:5a:59:d3:4f:67:77:49:1b:5b:25:b9:3a:
                    aa:6f:31:5e:27:8e:7d:13:10:b7:fe:25:22:b7:a8:
                    80:00:e6:e1:81:8e:8c:55:99:77:31:c3:8c:d9:f8:
                    4a:7d:1a:d4:b1:ef:4e:81:f6:c2:46:7b:80:2c:37:
                    4d:17:8b:dc:54:af:f1:84:1a:c5:13:d6:c8:95:24:
                    52:be:e0:4e:a5:60:e0:8a:8a:75:4e:44:4b:a2:38:
                    da:6e:35:d2:65:55:4b:64:f5:b0:28:49:d5:6d:f0:
                    cb:dd:4b:b1:27:5a:93:eb:7d:86:91:95:1b:db:c7:
                    63:bd:03:c3:1a:c6:28:fa:f7:fb:13:32:0a:8e:fc:
                    4d:c5:19:46:5f:7c:0c:d0:bc:02:ff:0c:c4:00:a1:
                    83:2e:05:79:00:1f:96:ac:d7:be:de:5a:02:c7:61:
                    f9:6f:53:3e:96:ea:6b:d9:9f:49:94:5e:e5:99:7d:
                    a8:19:64:fd:3a:ae:ce:cc:70:23:42:03:d8:ff:f1:
                    62:99:d2:32:be:72:a9:b5:a6:e0:35:2e:45:7b:1f:
                    5f:95:6e:46:f4:72:ac:93:55:43:e1:bb:3b:8b:f4:
                    0c:17:07:81:21:07:6a:11:fb:fd:28:58:04:fa:13:
                    85:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BA:D3:18:B2:84:B0:75:0E:5C:4E:1A:02:26:F5:17:0F:77:6A:AD
            X509v3 Authority Key Identifier:
                keyid:AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:53:ca:0f:b0:6f:99:62:6c:ac:de:07:75:7c:82:7a:47:8b:
         08:d4:33:ad:f7:e0:85:f3:8b:88:65:ce:98:7d:d3:d9:00:d8:
         36:8b:51:d8:08:5c:cf:90:4d:9a:17:d9:57:8c:74:4c:85:90:
         df:53:e8:49:9c:05:71:52:eb:0b:a1:04:00:1f:4c:20:9e:38:
         3e:87:17:d5:d4:9f:4f:53:ee:62:a3:0c:1d:3d:89:6e:70:51:
         82:b5:3f:c8:7a:4d:f6:64:1b:0c:9c:95:14:d3:47:07:bd:30:
         31:92:a8:2c:bb:8c:90:81:97:06:fb:6e:2f:11:7e:43:b7:50:
         a7:26:57:fb:15:dd:55:2d:0d:3d:f6:c8:c8:6b:33:38:56:fe:
         a2:d6:e3:a7:1c:be:be:56:58:a3:ce:c1:38:c0:f3:fc:07:71:
         e0:5f:5a:d3:3e:99:52:18:bc:f1:a8:f1:31:79:78:b0:cd:71:
         fb:2d:52:06:80:39:91:b2:cb:47:8c:14:e4:a7:9b:41:fd:02:
         db:07:f8:8e:e2:26:78:db:4c:f1:02:4d:02:52:38:5b:5b:37:
         9a:24:7a:f4:88:19:ec:01:80:9d:d8:d2:ae:c8:bf:60:87:16:
         80:c5:d2:ac:9e:35:4b:47:48:e8:01:1c:03:f0:1d:f5:fb:22:
         f2:b1:ec:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:00:17 2026 by rpki-client