Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
File:                     Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft (raw, json)
Hash identifier:          KeBkDtITHfRndtBTXU98EduUwkLbknnyJvqmrlp7D9k=
Subject key identifier:   18:09:3F:55:F5:C9:E3:22:20:12:D9:DD:01:12:CB:2E:49:63:DD:AA
Authority key identifier: 43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
Certificate issuer:       /CN=43acc2f2be1a36b089216544d23c95ace232e143
Certificate serial:       019D9B516774A5F1230F8B082BEDF78062CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
Manifest number:          0C17
Signing time:             Fri 17 Apr 2026 12:01:36 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:36 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:36 +0000
Files and hashes:         1: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl (hash: Xu+iWGljX7d+Jx40UdjiBl3qjFJ+Xo3qjqRkc5mSGS0=)
                          2: U492z7CM5jVf-t4QvcE9_urW2ow.roa (hash: /jlkTTrD37FHNPsTnKi/FAkBYiZarctFzNrBmLp88kk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:67:74:a5:f1:23:0f:8b:08:2b:ed:f7:80:62:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43acc2f2be1a36b089216544d23c95ace232e143
        Validity
            Not Before: Apr 17 12:01:36 2026 GMT
            Not After : Apr 18 12:01:36 2026 GMT
        Subject: CN=18093f55f5c9e3222012d9dd0112cb2e4963ddaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c0:4d:ce:72:d5:bc:9a:27:02:0b:a9:83:31:
                    6d:c2:b3:b8:78:47:83:9d:36:22:36:87:c2:63:e5:
                    70:07:d6:4c:73:9c:f0:f1:6b:d9:04:cd:71:8a:17:
                    61:c6:a6:17:73:0a:ba:aa:57:4b:28:da:df:cc:57:
                    ee:2d:e3:36:05:8b:c1:81:e0:89:cd:ec:f2:20:76:
                    6d:13:36:05:d1:ce:b1:0a:5b:91:75:29:59:29:d4:
                    93:8c:37:b0:ae:60:6c:84:20:8e:4d:5d:9f:69:d2:
                    6d:88:0f:1c:b9:a9:78:42:02:c1:69:f8:8b:4f:3f:
                    7f:64:b9:22:94:d7:1b:79:fd:01:99:10:9b:5e:30:
                    f6:27:f4:de:bf:fa:3c:bd:9c:f3:86:c6:df:6a:6e:
                    11:93:83:2d:8e:bc:31:f1:11:9c:ed:7f:ec:0e:ea:
                    f5:e6:df:0a:24:aa:f0:15:74:02:00:93:80:fa:27:
                    0b:21:55:1e:cb:ad:b3:f7:55:42:f1:ef:01:18:0e:
                    82:4b:5f:7a:f0:ed:7b:3d:d8:1e:20:12:c7:d4:83:
                    5f:a3:97:a7:b9:79:37:e7:a1:2c:31:43:b7:38:19:
                    14:c3:d6:52:ca:e0:dc:99:a5:cf:a5:78:ea:a8:88:
                    a5:dc:46:a5:31:22:22:90:b1:22:4d:ef:36:8f:e6:
                    c2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:09:3F:55:F5:C9:E3:22:20:12:D9:DD:01:12:CB:2E:49:63:DD:AA
            X509v3 Authority Key Identifier:
                keyid:43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:f9:de:51:af:7e:e3:03:58:37:34:96:5e:93:36:9b:3d:e1:
         c8:6e:54:3e:e8:9b:21:60:9c:fc:a4:ae:4e:5b:ca:93:03:fa:
         33:8e:3a:51:d9:ff:b2:d8:7d:83:4c:40:cd:8e:03:02:90:c8:
         e4:a4:16:2f:b2:05:38:72:32:7c:ad:ed:35:3e:e2:09:06:cb:
         77:9e:80:da:ee:80:5e:ac:47:42:16:4a:3c:4d:6b:0c:dc:2a:
         e8:8e:d6:ff:b7:57:68:7b:f8:08:39:58:4f:1c:88:5c:f7:3a:
         53:c6:70:07:53:cc:e6:2a:d8:d5:13:73:5a:68:1f:a3:d9:96:
         12:5d:35:e8:ac:b7:d5:44:1d:7b:4a:bf:0e:25:c0:a4:73:b9:
         4d:8a:e5:b0:85:ca:fd:6b:60:9a:b2:eb:4b:4e:95:9b:45:b6:
         c3:c3:1b:b7:a9:50:44:9b:f5:6e:06:9b:ae:19:29:c7:5c:9c:
         2c:28:23:da:97:60:be:78:b7:d6:f6:d5:5e:52:3c:0b:18:dc:
         fe:25:b0:58:c0:3e:5f:e4:2e:77:d8:37:6c:9a:b7:64:c7:18:
         8b:b4:70:b2:35:a7:f2:3c:ca:89:88:6a:69:24:c7:07:7d:3e:
         0a:a2:53:48:fb:ca:68:58:e4:cc:09:47:d9:0a:3d:c0:1e:ee:
         98:51:cf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:15:46 2026 by rpki-client