Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
File:                     RUDapMJFpHJfOAQUAra__e0V6ng.mft (raw, json)
Hash identifier:          z1HrvCWLiV2cCHOu8uPi2lKbhSocN7CfYQPruNBao/o=
Subject key identifier:   33:13:CA:A1:29:8B:F2:90:B6:54:DD:63:49:15:8C:B3:E4:2B:42:BB
Authority key identifier: 45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78
Certificate issuer:       /CN=4540daa4c245a4725f38041402b6bffded15ea78
Certificate serial:       019D984FB0F9F742F651F1E52A94B1A9E07A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
Manifest number:          18C9
Signing time:             Thu 16 Apr 2026 22:00:52 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:52 +0000
Manifest next update:     Fri 17 Apr 2026 22:00:52 +0000
Files and hashes:         1: 7-IfBeOREFbAdtIR0Nls6fgjGNA.roa (hash: QlNkH+o+xX5oge3OqAOZNG2Y5XgHM8e3tzaKkSNLLl0=)
                          2: RUDapMJFpHJfOAQUAra__e0V6ng.crl (hash: 0MWhost219B2MJeuC47wADbR42ElPxu1p6ByxTOntWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:b0:f9:f7:42:f6:51:f1:e5:2a:94:b1:a9:e0:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4540daa4c245a4725f38041402b6bffded15ea78
        Validity
            Not Before: Apr 16 22:00:52 2026 GMT
            Not After : Apr 17 22:00:52 2026 GMT
        Subject: CN=3313caa1298bf290b654dd6349158cb3e42b42bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:40:b2:b8:2e:42:7b:8f:9a:50:88:89:9f:f9:
                    39:ea:2a:e1:2c:91:24:d9:1b:3c:52:31:f6:59:83:
                    5f:4d:da:4d:7b:3f:4c:8d:77:5e:1b:0f:9e:b6:e1:
                    53:e6:69:aa:d1:06:da:03:10:3d:b9:5c:fc:f4:95:
                    25:4b:d7:8b:2e:80:ac:ca:7d:ab:d8:35:5c:39:44:
                    d0:b7:43:b8:23:a9:dc:3d:ec:77:ff:1a:32:ef:bf:
                    fb:21:51:de:69:d0:75:c5:85:1b:8f:45:3b:18:2e:
                    47:b4:2a:d6:7c:0d:3d:86:af:85:5c:ed:d5:e0:b9:
                    d7:d3:fe:16:dc:5f:01:c4:9e:d0:54:fc:17:2b:53:
                    04:47:6f:fa:f5:ef:c6:ab:34:f3:9a:cc:14:53:ce:
                    a8:03:16:cb:40:58:38:5d:2a:cc:b7:59:81:08:63:
                    75:ce:c7:54:9d:cf:7b:fa:77:3f:8f:26:03:2a:d9:
                    3a:7d:7f:0b:b4:cb:69:b0:6b:fe:07:de:73:45:de:
                    7a:64:e1:d8:a1:65:1f:07:4c:7f:92:f4:3a:57:dc:
                    7f:73:d1:82:c8:cf:90:4e:a1:aa:54:a3:9e:7b:95:
                    19:2c:c9:25:52:10:37:05:10:ed:fc:2a:1c:ec:77:
                    4a:d0:c7:c4:a0:9c:c1:2b:78:e8:fd:42:58:4d:7a:
                    73:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:13:CA:A1:29:8B:F2:90:B6:54:DD:63:49:15:8C:B3:E4:2B:42:BB
            X509v3 Authority Key Identifier:
                keyid:45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f6:ae:2d:4b:98:63:af:5e:db:dd:0d:db:48:4c:10:a8:d1:
         00:02:5b:bc:cc:ca:29:e6:21:61:0f:0a:34:d8:bb:94:73:2b:
         31:32:72:cd:7f:da:ec:5e:50:20:9a:f7:fd:74:9d:cf:a6:68:
         60:71:d4:eb:c2:d4:f0:97:e4:d6:4e:75:7a:2b:63:0a:b4:3e:
         42:7d:66:62:dc:65:e9:b7:bc:59:bd:f3:1b:9e:af:1d:49:8d:
         2d:f3:17:25:a9:e6:d0:ff:1f:1e:cc:f3:4e:af:a3:58:67:ff:
         9b:63:41:07:0d:48:b9:28:96:f7:eb:f2:e3:bd:26:82:48:1a:
         5b:10:fb:25:8e:2f:db:7f:38:65:41:27:13:fa:e6:2b:50:79:
         db:75:01:37:87:48:c1:58:c5:44:73:60:9a:1f:41:d3:3c:12:
         67:8a:9a:15:4b:c7:0f:f2:cd:8c:04:f6:69:5a:5f:7e:94:d4:
         68:29:ca:39:5f:8b:b8:3f:13:6e:e9:03:16:02:d5:0f:74:c6:
         29:76:22:c7:b5:ad:20:ce:9c:eb:cf:61:05:c9:f0:6d:0d:b4:
         30:a5:bf:0b:b9:5a:4b:5a:0f:e9:37:9f:e5:ce:70:d1:9c:26:
         a7:c0:52:c7:99:b7:c4:eb:c6:23:d9:23:86:b2:90:82:9e:33:
         19:82:e6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:44 2026 by rpki-client