Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
File:                     ADssOHEGkAKtCy9CsMv16S475LM.mft (raw, json)
Hash identifier:          dFKSAFGDWGWFItkDswLNJXMVuOooY+Rq2dMa8zNQsPM=
Subject key identifier:   DD:6A:CD:E0:49:30:AA:02:44:BF:1B:F0:9A:41:64:F3:1B:CD:C6:9C
Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
Certificate issuer:       /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Certificate serial:       019DA1F868CC68BAA579D56832AD7F28A2A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
Manifest number:          18D4
Signing time:             Sat 18 Apr 2026 19:01:44 +0000
Manifest this update:     Sat 18 Apr 2026 19:01:44 +0000
Manifest next update:     Sun 19 Apr 2026 19:01:44 +0000
Files and hashes:         1: 2c0jqBuEH1mHawmDju5SJrb9XO4.roa (hash: 4iGaC+nsr7eIRDAsx1YlRBvu72t0bZzh6T9oxMZT12o=)
                          2: 49mG2LIAGgPUY2ZzmJGz3IeznXI.roa (hash: 7aWoWG5rNXduvslZ3E4HwcG2X6Htck+37nEJTi56c7o=)
                          3: ADssOHEGkAKtCy9CsMv16S475LM.crl (hash: fzcsngfGUEYCuvONLYBJdhYLbI9DE+yd2vUNK/VPvVs=)
                          4: Fb3QRguUDty9iQr1ULGmN54gLiI.roa (hash: kgzbakyVLR8dQ8e9EI+6xpmdVsMJI+WFbZcHU/IXAUc=)
                          5: SfEPdB4zSzundHQL8u1ry-xE4Vc.asa (hash: YBQfRgXIESZ5hCHeLjGYkAamoqJ89Tdiiao0w4ZWcjY=)
                          6: dECFcKuPIDtaKYfkBtHP9FzNkPY.roa (hash: nfxA7gIFHYR0X3UKRvPVNyH71Z4WvtDgdmK9W79oICs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 17:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a1:f8:68:cc:68:ba:a5:79:d5:68:32:ad:7f:28:a2:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
        Validity
            Not Before: Apr 18 19:01:44 2026 GMT
            Not After : Apr 19 19:01:44 2026 GMT
        Subject: CN=dd6acde04930aa0244bf1bf09a4164f31bcdc69c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0d:82:ff:9b:ee:eb:8f:e9:d7:82:75:86:86:
                    d1:0f:3a:2b:ef:aa:ad:54:f8:56:88:06:56:a4:78:
                    82:70:fc:5d:4f:fd:85:0b:e1:18:ee:4b:12:e4:aa:
                    34:69:8d:ee:a0:cb:16:d3:36:74:b5:46:c0:42:97:
                    b1:99:6a:1c:d8:e8:46:b2:77:1a:43:24:69:1c:ab:
                    9a:4c:c9:49:c2:35:24:0e:28:0c:0f:25:de:49:0f:
                    b5:69:d5:5c:c8:1e:c2:f8:b5:23:46:c7:be:c9:d4:
                    c7:a1:af:f9:3c:61:f7:ab:9d:ef:67:3e:84:f4:07:
                    e7:57:34:64:a7:bf:e6:f4:37:13:b1:03:70:f4:53:
                    7e:4d:27:b3:ff:51:96:d9:85:26:73:7b:26:2f:a8:
                    ae:e7:29:00:fb:b4:77:0e:a2:9f:b4:09:f5:9c:66:
                    7a:d8:89:f0:02:78:59:e5:55:ef:0f:27:5c:b1:57:
                    22:d0:07:18:02:c7:30:42:df:b4:71:2b:aa:47:00:
                    73:c7:5e:15:7a:63:d9:42:b4:a8:85:49:c7:c8:dc:
                    2a:83:10:7c:79:b0:d2:06:3f:9c:7d:c7:d8:1a:80:
                    9d:26:97:c7:49:33:76:ac:ad:ee:29:fe:7d:30:8f:
                    0b:b4:f7:66:8c:a7:4d:0f:cb:73:83:0b:2f:33:bc:
                    6d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6A:CD:E0:49:30:AA:02:44:BF:1B:F0:9A:41:64:F3:1B:CD:C6:9C
            X509v3 Authority Key Identifier:
                keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:9d:f9:ad:bc:9f:2e:2a:32:5a:24:38:d6:c2:ad:cb:5d:9b:
         8a:d6:11:49:6a:f3:62:6e:ea:db:27:35:6b:94:f8:aa:0b:d9:
         9d:77:ae:f7:8d:11:78:1e:06:f7:b9:ec:d6:d3:01:9c:a1:22:
         b6:64:f1:20:16:08:4b:8d:71:f2:2b:0f:f3:38:df:17:47:2e:
         04:a5:2c:cd:91:f1:30:65:ab:53:5b:f0:9a:38:9c:bc:6e:c7:
         a3:87:e9:35:38:9c:75:8c:0b:44:ee:d1:f6:0a:ef:b5:b9:af:
         4f:6f:4b:77:7e:08:f7:86:e5:0a:74:58:1b:9f:22:27:9e:a0:
         d0:e1:04:d6:57:ea:6d:f8:81:06:97:05:30:ae:04:e6:69:25:
         bc:02:f0:ef:23:e8:94:93:3c:2f:f7:b5:75:36:f6:28:f1:36:
         18:b1:7d:1d:fa:60:27:6a:a7:aa:d3:d4:ed:1b:88:e2:71:56:
         60:bb:85:80:ae:99:0e:43:e4:17:0d:07:80:23:da:d6:ec:64:
         a3:7d:be:37:a8:4d:2b:44:4a:63:38:c2:15:dc:c5:a8:fd:85:
         8f:53:9c:96:9c:b5:e6:40:d5:7b:90:8d:d2:70:05:7b:4e:cf:
         ad:98:c5:29:8a:32:6f:bb:fe:ec:ab:5d:6e:a5:f1:a4:17:fb:
         d5:f2:c7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:18:27 2026 by rpki-client