Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
File:                     1mc4qNrawtDTrt25NPggBmufX-s.mft (raw, json)
Hash identifier:          XKBSf3pXckNiW3Bi0dfJLx0lnVqehPnr5Z3Sj89rcxI=
Subject key identifier:   1B:C0:36:12:D4:35:02:0B:56:8A:0D:EA:E8:B7:A6:13:7B:31:BA:09
Authority key identifier: D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
Certificate issuer:       /CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Certificate serial:       019D9A3E3F085C760173F3748943AE433997
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 07:01:03 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:03 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:03 +0000
Files and hashes:         1: 1mc4qNrawtDTrt25NPggBmufX-s.crl (hash: lpnwDwZdkH8APWaqAlD3DmQZ1m/fhIru2gkEoeJCqYQ=)
                          2: PvHMHD0aeuQ9T3MtfIs2XmJyQOY.roa (hash: EfRNqiHIBaBfAkezAxeKdTs07evzHPZKbuFa+2c+KMc=)
                          3: TIYeUVbpvuyDC2t31dkXKX77tpM.roa (hash: jq2yqV/pOREhu3bPBF+p4OSILcPoLvkCkURypiB0/n0=)
                          4: cOxS0E2XjVzTbopS5QPfLKjjtnk.roa (hash: mNaGGlEdJbAJ+qyD+c0RDVAtGl4B6iWrOcUapyB/UK4=)
                          5: pI-v5uJ1SgQhhfO7bCx9EJHVnoY.roa (hash: QNyQpokvQqLnIzlnj95bhIcxCT1zZNKDcQ4ODnYC8DE=)
                          6: rCFpqnF0TcjxMo0Y1C5GR4qc4ng.roa (hash: PMdlGjc9Af5sq4QJ2HwfDr1apnmai7YobB9Ga0B6v3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:3f:08:5c:76:01:73:f3:74:89:43:ae:43:39:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
        Validity
            Not Before: Apr 17 07:01:03 2026 GMT
            Not After : Apr 18 07:01:03 2026 GMT
        Subject: CN=1bc03612d435020b568a0deae8b7a6137b31ba09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:12:13:09:ed:26:21:00:73:50:54:a6:0e:
                    e8:72:26:1f:3e:4f:1a:48:e5:ca:82:39:9a:66:94:
                    db:6d:24:0c:d4:68:cf:6b:3a:58:b4:c1:66:84:64:
                    b8:b8:a7:8e:56:6c:ba:92:10:d1:75:5b:16:b1:08:
                    99:47:e8:60:41:a1:dc:78:33:d4:51:cf:a9:8c:4d:
                    1f:86:1d:c2:de:47:54:0a:98:77:71:2d:f8:27:f8:
                    7d:61:c3:ad:de:ec:f5:6c:13:af:8f:ca:85:18:e2:
                    64:b4:97:f3:0c:35:24:dd:23:a5:28:c2:37:2f:73:
                    57:eb:77:6c:a5:b6:c4:b9:a2:18:ab:a3:1f:b1:69:
                    47:6d:2a:d3:14:e3:39:75:79:ba:01:ba:78:06:89:
                    ce:f5:6c:bb:e7:51:82:ae:2a:ad:4d:98:1e:f8:87:
                    f6:6f:4d:5a:07:a4:9e:a2:a4:42:34:36:d5:2e:7a:
                    3b:2a:d3:ba:65:fa:da:c1:a6:5d:db:3b:03:88:0f:
                    c4:ad:80:76:d1:f9:99:c0:da:e5:25:9d:bd:fa:37:
                    d2:7b:95:b9:5c:1d:d7:a4:82:a0:d9:fb:f1:13:1e:
                    95:b5:9c:4c:2c:51:e6:91:d9:9f:4a:1e:c7:60:57:
                    dc:fe:90:c0:35:86:1e:21:e7:17:e8:d0:93:74:c9:
                    ca:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C0:36:12:D4:35:02:0B:56:8A:0D:EA:E8:B7:A6:13:7B:31:BA:09
            X509v3 Authority Key Identifier:
                keyid:D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4a:53:e2:df:a5:87:4a:bb:da:94:62:df:8a:46:00:c3:52:
         86:11:08:6c:3c:7b:8e:db:cb:5c:e2:8b:9d:ee:dd:39:8b:81:
         fa:2a:a7:23:c0:67:9f:20:f9:c1:c1:d6:65:c1:5f:ee:16:32:
         d3:60:f9:04:45:b8:e5:40:22:91:fe:8c:90:06:1f:f4:df:a4:
         30:36:7f:6e:4d:f4:17:8c:5e:15:85:7d:9f:aa:ec:61:3a:13:
         e4:f9:26:15:b2:f0:cf:9d:06:74:12:59:de:bf:48:6c:46:d5:
         a4:89:35:e3:19:f3:87:42:f2:63:68:8f:22:e6:fa:fc:24:e4:
         72:b0:a6:af:a7:a4:af:7c:f6:07:73:a8:6d:6b:67:09:f0:77:
         c2:23:51:34:c7:e5:e1:ba:ae:d5:ef:6f:d3:7c:16:8c:62:ab:
         93:d1:92:9e:ff:46:91:ff:18:62:03:b1:7d:a3:ef:46:5c:27:
         46:67:39:8c:13:9a:19:04:c1:a2:e6:e5:a2:65:74:65:97:41:
         b9:05:68:e9:7a:ce:99:62:89:d0:14:db:8d:1c:0a:dc:0c:85:
         2b:28:4f:03:8e:a6:3e:8d:bc:f7:48:98:ef:f7:cf:4c:c4:19:
         74:8f:2d:d2:17:e8:ba:bd:53:ac:6f:56:36:f3:d3:33:08:6f:
         79:bf:16:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:51:25 2026 by rpki-client