Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
File:                     q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft (raw, json)
Hash identifier:          zQtWQ36IvQ0ZP8Ls3/LyJo5tVKSa3pXHXB99j4nNLwE=
Subject key identifier:   9C:C3:60:32:BA:15:F2:C5:23:3B:E6:6D:B4:70:01:85:78:3D:7D:E9
Authority key identifier: AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
Certificate issuer:       /CN=ab91d5262561a9dd713dfa39163dec849fee4636
Certificate serial:       019D9A74EBAD45F5C59CBDECDF955933D474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 08:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:46 +0000
Files and hashes:         1: 1-NlXpS8qOmzJQxvh3Vemv6GfalE.roa (hash: HTFIVkm2pfbCpKdVoGWwpPhxe9WRjwNhw3rsgiBHLbE=)
                          2: 75AwziJR5w1JmorjN6nm2vuye_U.roa (hash: P4Uobg4aZmz71V7WcJ/2A9j6g9mMLhAaqFQfuo24nE4=)
                          3: S4NA7oSGgXey3Rldy_KPITNHmFc.roa (hash: pctvbrfIhJmWDmoaj1TcgltdORT390IlR3CQ4CeTHxA=)
                          4: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl (hash: imk5yU9ft8tfJE9Rz7AjGjXHfGT+PpETP4Eg9bMaklU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:eb:ad:45:f5:c5:9c:bd:ec:df:95:59:33:d4:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab91d5262561a9dd713dfa39163dec849fee4636
        Validity
            Not Before: Apr 17 08:00:46 2026 GMT
            Not After : Apr 18 08:00:46 2026 GMT
        Subject: CN=9cc36032ba15f2c5233be66db4700185783d7de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:84:43:56:39:0c:2b:52:74:2b:e5:83:75:da:
                    29:71:34:d1:fc:83:01:b2:0a:5b:62:de:99:51:90:
                    dc:4b:7f:00:b5:3f:3f:7c:6f:6c:b5:16:ab:4b:50:
                    46:80:c2:ab:fa:15:82:4e:65:83:c6:ca:d8:63:8f:
                    9f:15:6f:7a:8f:f8:0f:b1:46:c5:b1:63:85:8d:64:
                    59:c4:3a:29:68:89:3d:c2:03:3e:b9:37:9f:21:24:
                    53:49:68:e6:cd:ed:95:f4:79:23:f6:bd:68:a3:8a:
                    ed:30:69:77:ef:ec:21:f8:d4:5b:f0:a7:cf:56:53:
                    93:0a:20:e6:dd:fa:48:dd:f5:40:d0:53:15:49:7c:
                    11:29:93:33:17:0b:22:c7:b5:cc:45:4e:a5:16:5c:
                    63:1e:83:22:13:17:96:b4:12:0f:0f:40:3d:35:2c:
                    5e:c1:f5:3e:85:00:0f:9b:fd:6f:f8:c8:b9:68:a5:
                    62:df:1f:af:13:d4:47:f9:bf:90:85:ff:4e:44:e1:
                    b4:12:27:97:b8:e3:82:ee:46:32:65:8e:78:90:ed:
                    c1:a2:9f:d6:23:71:24:cd:6f:e0:78:85:fc:11:b1:
                    47:3c:3a:19:b9:c7:9b:dd:55:ae:72:f9:b8:df:a0:
                    fe:c4:56:b4:07:e6:db:90:f1:ff:de:24:49:51:69:
                    ff:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C3:60:32:BA:15:F2:C5:23:3B:E6:6D:B4:70:01:85:78:3D:7D:E9
            X509v3 Authority Key Identifier:
                keyid:AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a5:e5:c7:a3:2d:22:db:eb:22:0e:a7:0a:c6:e9:e0:a4:e4:
         0c:33:cf:b1:6f:db:18:f1:92:4b:00:ee:4f:19:3e:9c:e7:4a:
         1b:83:02:e7:b9:bf:a4:55:29:ca:d7:cc:78:f3:2c:cf:90:fe:
         9e:ae:9e:cf:34:f7:04:37:85:6d:63:80:52:6b:53:44:ac:f6:
         64:39:2d:1b:23:39:ff:22:82:23:f3:a5:27:b1:28:37:1c:e3:
         36:db:55:3c:a2:15:cf:81:51:1d:92:30:d6:94:f5:22:8b:19:
         2e:54:9d:b4:1b:32:04:8a:c7:fd:81:ec:88:37:60:39:02:f8:
         ab:26:2a:da:c0:cc:bd:1b:21:4b:cc:33:58:3d:8d:9b:16:a1:
         a4:fe:5c:89:c4:d2:62:84:ab:0f:5c:9e:ca:d6:24:4f:a2:c1:
         99:75:1f:e3:73:82:5f:94:88:37:f8:de:ee:d7:dd:ec:e1:01:
         28:b4:7b:6e:f8:aa:d5:e1:39:6a:2c:4c:15:49:ed:58:ed:ca:
         8f:9e:45:4f:42:ea:4b:b4:b6:27:27:31:59:1a:04:6e:0b:95:
         98:84:cd:38:03:7b:37:35:1f:f1:f4:6e:38:f9:3e:1c:43:77:
         5d:2d:19:b7:71:86:fb:35:90:c3:27:b9:a2:43:27:1a:99:9a:
         01:ca:78:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:34 2026 by rpki-client