Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
File:                     awNYS85ULlVOMieQlEP2giw-TwM.mft (raw, json)
Hash identifier:          4gLU4a8fqD1ZRrvpSzJpMoNXC9FCerGO6cmGEJZNkTE=
Subject key identifier:   A6:E2:ED:D8:4C:0D:DC:73:20:28:14:86:01:95:36:37:52:D5:7C:A3
Authority key identifier: 6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03
Certificate issuer:       /CN=6b03584bce542e554e3227909443f6822c3e4f03
Certificate serial:       019D9AABD07D631490360539FD28EC8B02FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 09:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:44 +0000
Files and hashes:         1: PTCMrplImxOgq7lJht86Y-t_Eak.roa (hash: 9R2VT/PVVrXj1Rc0/sfW6xX45E2jhiDWxXoT3COdeoA=)
                          2: awNYS85ULlVOMieQlEP2giw-TwM.crl (hash: cvsyWCZg+dHZfzNbec3kqaJJcqk6tUJx7oUgK7b4pGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:d0:7d:63:14:90:36:05:39:fd:28:ec:8b:02:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b03584bce542e554e3227909443f6822c3e4f03
        Validity
            Not Before: Apr 17 09:00:44 2026 GMT
            Not After : Apr 18 09:00:44 2026 GMT
        Subject: CN=a6e2edd84c0ddc73202814860195363752d57ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f1:e5:df:68:33:00:c9:d5:06:3e:92:a2:ac:
                    34:ad:7f:a2:b9:ef:99:8c:9c:b9:12:ab:36:61:e7:
                    fc:7f:5b:dd:f5:3e:6d:39:a9:09:19:22:5a:a3:b7:
                    5d:b4:20:f7:ab:df:69:b8:79:ee:0e:7e:ab:d6:4e:
                    8b:5f:83:3c:6e:13:4b:f5:c6:e0:a8:a3:82:6d:dd:
                    ae:5f:a6:9b:0d:0b:da:e6:34:6d:3c:c0:c2:cd:49:
                    24:42:a9:f7:59:34:de:fa:2d:b7:92:73:d4:94:b5:
                    fa:59:95:b8:3c:dd:6b:ef:f6:a4:0c:ad:0e:13:ce:
                    05:dd:78:d5:47:e0:29:4c:68:ef:49:33:4d:9e:d1:
                    65:f1:e1:c8:e7:e1:66:3d:65:54:8c:09:28:67:f0:
                    d1:ff:16:90:15:c3:84:69:f7:21:e7:f7:9f:75:7b:
                    7c:05:e9:53:eb:b6:bb:b5:a3:33:1c:1d:57:7f:b9:
                    c5:a3:4d:15:90:84:6a:55:37:6b:2e:21:00:a2:a3:
                    8d:ea:56:2c:71:09:bc:b7:ab:6c:b3:38:2b:22:b0:
                    71:82:9a:9c:76:43:ca:81:d9:3e:8c:96:62:66:c1:
                    10:b2:3e:ae:22:99:af:ac:ae:02:4f:26:bd:87:a7:
                    7d:72:11:4b:66:20:13:f9:09:ec:ea:2c:ce:9e:a3:
                    cc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E2:ED:D8:4C:0D:DC:73:20:28:14:86:01:95:36:37:52:D5:7C:A3
            X509v3 Authority Key Identifier:
                keyid:6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5d:3b:96:c6:64:fb:97:4f:d8:e8:4b:69:ef:b9:8e:7a:19:
         f4:6c:16:c0:a3:93:7d:d5:16:5a:28:08:99:8c:c1:91:aa:d5:
         4f:e2:f9:ea:0c:0a:e6:16:f7:ec:93:43:5f:bb:ac:a0:2e:62:
         db:d3:2c:47:07:cb:38:54:fc:ec:1d:48:1e:cb:a6:91:fd:ac:
         2d:6c:09:38:7f:90:85:91:76:42:0b:a6:9b:b6:88:c0:59:77:
         87:e2:be:6d:a4:5c:fe:f1:63:67:96:cf:2a:03:17:62:a1:23:
         bb:5d:ab:74:53:33:98:07:81:c8:ed:7d:00:1c:a6:61:49:3b:
         87:1c:ce:31:29:65:55:9c:6c:ef:89:65:72:0f:27:4a:0a:a8:
         c1:87:7a:21:9f:36:f6:4f:0f:18:b2:06:36:d8:32:8a:ae:8d:
         eb:4a:82:c6:7c:3d:1e:e7:95:85:10:af:ba:da:41:9e:1c:ee:
         67:72:65:e0:3c:82:73:1c:fb:14:cc:c0:6e:11:e7:5f:85:36:
         de:f1:54:ce:d5:f0:1f:be:fa:71:c1:a0:b0:b8:08:81:45:eb:
         3d:58:bc:d8:48:b7:f6:75:e8:69:94:23:eb:a4:4d:cb:96:21:
         a5:ec:36:9e:e4:e2:e7:66:c1:7c:7b:2c:47:8c:58:20:a8:40:
         f4:d4:39:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:49:42 2026 by rpki-client