Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft
File:                     KHTka_Y26mPl0SNi9VG4CydxR4A.mft (raw, json)
Hash identifier:          zdwmfD9EPxQ+7MM0Y0PYUSF5L8y3HSJcN4tbl7rl6hc=
Subject key identifier:   A7:6D:06:E0:7C:5D:85:30:77:36:EA:30:DC:78:35:64:A7:04:DF:D6
Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
Certificate issuer:       /CN=2874e46bf636ea63e5d12362f551b80b27714780
Certificate serial:       019D9AAC15BFE0E548DC23F87AC69FA204B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft
Manifest number:          18D0
Signing time:             Fri 17 Apr 2026 09:01:02 +0000
Manifest this update:     Fri 17 Apr 2026 09:01:02 +0000
Manifest next update:     Sat 18 Apr 2026 09:01:02 +0000
Files and hashes:         1: 9Gw91riyJOvWdO1UGfwpGVU9DEE.roa (hash: Ly1IL/BVXWgH9KBecBDNaAQzuSy9DkifByJn+f8EHH8=)
                          2: BnOgunmIqHqBKFwZE6Xibr5iLQE.roa (hash: 3glyWq/lhdplqPwBOhZY42x6RX3FaqrpH1fRgyoCtik=)
                          3: KHTka_Y26mPl0SNi9VG4CydxR4A.crl (hash: Dk6DVaSXmZo81OYSmus8ALTzonEW+lv70nY7TaPn2hA=)
                          4: WhXtoavVfH7JG2T7apw-QG5zid0.roa (hash: U4pIdKJKn4J4SIlT+YgTWJOxDgxDvJtMszi6mvhVfHY=)
                          5: iv3ySpiG9hKEd0IHT1uP-bp6Uh4.roa (hash: h/a4jbV0u98/g4ZmPoA9cn/DFGG2qqlcGEnesiqVsVs=)
                          6: yN51QkuGxny069xWkSdZbBfMMQ8.roa (hash: DQM4ovM4ArlRPSqcYiLYdUKp5NTy96Mos+hwEgV7qsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ac:15:bf:e0:e5:48:dc:23:f8:7a:c6:9f:a2:04:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780
        Validity
            Not Before: Apr 17 09:01:02 2026 GMT
            Not After : Apr 18 09:01:02 2026 GMT
        Subject: CN=a76d06e07c5d85307736ea30dc783564a704dfd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:a5:4b:04:bb:46:c6:17:b4:96:1a:a3:be:
                    11:bf:4b:23:4b:00:87:66:cd:2a:09:28:59:11:17:
                    d1:20:80:f2:d4:18:f8:4c:f3:86:6e:1d:f5:59:34:
                    f7:cc:e1:ce:00:dc:80:38:20:75:16:e0:fa:12:31:
                    f7:cc:fe:ac:39:38:8e:99:ab:90:0b:b3:6b:ea:78:
                    d9:ca:90:ca:e8:ac:13:3d:7a:f7:67:6c:6c:9c:66:
                    be:c5:ee:88:8b:1f:e5:c4:32:7c:18:a1:f8:b0:a5:
                    12:cf:6a:7b:bb:b1:05:1a:93:ed:b2:bf:0f:17:03:
                    99:49:6b:97:f6:cf:ae:85:c3:e5:b8:bf:c0:89:e6:
                    ff:29:62:6b:c0:a7:2e:5d:ad:62:82:ab:71:5a:ae:
                    36:d1:88:4c:c5:e9:8f:74:05:fa:70:63:ec:f9:08:
                    f0:6b:9d:a0:98:1b:05:af:fb:6f:42:e3:bb:8f:43:
                    f4:d2:eb:d8:8a:41:ee:00:f5:7d:0a:19:c5:aa:03:
                    f6:8e:15:0d:07:eb:56:58:56:eb:1f:c9:41:5e:3b:
                    ec:d7:d8:2b:34:02:73:58:d5:ac:12:b0:a9:3e:89:
                    ca:8b:7b:af:07:ca:4c:99:af:24:30:9a:fd:a6:9a:
                    d0:87:b6:0e:0e:cb:20:a2:ef:7d:7f:3f:b4:93:9b:
                    59:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6D:06:E0:7C:5D:85:30:77:36:EA:30:DC:78:35:64:A7:04:DF:D6
            X509v3 Authority Key Identifier:
                keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:09:02:cf:75:0a:41:6c:c7:7c:fe:6d:07:e8:ba:c5:89:f4:
         73:d7:15:00:78:46:ba:45:b9:32:da:bd:c4:67:43:93:39:dc:
         27:91:b3:56:fa:14:1d:2c:f2:54:ee:2c:75:3d:f2:ab:cb:9f:
         c0:66:60:a3:30:e8:e3:83:d8:6e:84:0a:99:59:6f:29:59:ed:
         e5:c6:c1:4e:f6:be:fb:11:d6:dd:de:27:50:6b:57:1a:76:81:
         06:a7:2d:31:77:f8:7b:a0:2a:84:36:b4:2e:47:5b:ff:b2:ce:
         71:ad:79:86:9a:60:57:8b:60:00:34:c5:6b:b4:01:b8:fd:e9:
         7c:b7:d6:e6:7f:4f:2e:4d:d3:23:24:b4:32:f9:a3:84:58:21:
         34:f4:08:59:0c:db:c0:aa:6b:6f:d8:84:a0:5e:34:80:a3:8d:
         8b:10:74:df:25:96:8c:95:5d:ed:ff:9b:f2:9c:72:f3:4f:ec:
         51:13:0c:df:09:46:51:b6:50:e4:b8:f6:c7:19:e2:6c:2c:04:
         9b:ed:33:51:e7:76:34:93:0a:60:d7:bd:0e:e2:49:46:5c:12:
         97:1c:78:36:8a:ee:fe:cd:93:b7:26:6d:ff:0c:d6:a0:4e:02:
         f6:a2:2e:64:8d:3d:00:bd:b5:e8:40:1f:5e:2e:0b:04:4b:88:
         bf:27:d1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:32:21 2026 by rpki-client