Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
File:                     _SYdRTGeg3UYdDbaRL9bmtsESn8.mft (raw, json)
Hash identifier:          5bRi5di2xhuvdeQ0EVmmGS3/MtgG08btqnIy7QOYUkg=
Subject key identifier:   D7:4A:51:98:69:D1:68:93:E8:1A:3C:3C:55:BF:FA:D1:7A:CB:AD:39
Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
Certificate issuer:       /CN=fd261d45319e8375187436da44bf5b9adb044a7f
Certificate serial:       019DCE99330858327BE0274085F07ADB6072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
Manifest number:          18E4
Signing time:             Mon 27 Apr 2026 11:00:39 +0000
Manifest this update:     Mon 27 Apr 2026 11:00:39 +0000
Manifest next update:     Tue 28 Apr 2026 11:00:39 +0000
Files and hashes:         1: JiEsZ1zOe46gzADySdG16eZ5Sjo.roa (hash: 0bq0qa1f8p4Ial4yz+WAIFxn5n2T06ajuz5dHOKo9Bg=)
                          2: ZmDQJclFbfRowgpnHRptrYIeIug.roa (hash: H/7KqBnapWq4unhs3UjmS/EFy+upD+qehXGAkF2UTwA=)
                          3: _SYdRTGeg3UYdDbaRL9bmtsESn8.crl (hash: ingf6eOwA3a7DZXMgVPtjrjaGX7X9KbcpnL6w3hpwHY=)
                          4: gX_bo7WycAyP4eHEuchQhpnD15s.roa (hash: 4TJL/ac+L1uxUdH7FW4vMCHyhAZJAL3RXJ9Pg1etDtA=)
                          5: yNoIji7kPj6SkrPhrYc1VI7PgwE.roa (hash: y0iJCdo0OgTZ1Mu1ZduXdjf6TefpBi+JC2BMHyoKy/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 11:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:99:33:08:58:32:7b:e0:27:40:85:f0:7a:db:60:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f
        Validity
            Not Before: Apr 27 11:00:39 2026 GMT
            Not After : Apr 28 11:00:39 2026 GMT
        Subject: CN=d74a519869d16893e81a3c3c55bffad17acbad39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:39:fa:de:fe:81:e3:72:20:5c:bb:76:2e:08:
                    0b:fa:05:19:6d:ce:d7:6d:1d:8f:04:5d:f5:6e:c8:
                    f6:59:fa:70:61:c6:39:7f:02:59:fa:fc:91:f3:62:
                    b9:91:a4:6d:fc:0a:98:18:52:f3:60:21:6b:fa:ea:
                    a4:18:08:02:cc:2c:9e:c2:fc:4b:0e:10:e9:27:30:
                    3f:79:42:23:c3:49:c1:0b:a0:cc:20:48:36:28:24:
                    4b:c0:1e:10:96:61:fb:51:04:9c:6a:24:cf:54:8b:
                    50:b8:0c:91:d1:cd:e3:5d:ed:8e:56:f9:f0:bc:8e:
                    04:b4:eb:0f:ca:0c:de:50:fe:ef:6b:dd:8c:42:fd:
                    23:7e:1c:38:02:fb:4c:e7:55:92:7b:c4:e0:59:ab:
                    47:d1:55:50:bc:15:9d:32:5e:3f:fc:33:9e:ef:98:
                    e7:a2:b7:76:97:26:1f:1b:f4:5b:3c:56:06:f2:1d:
                    ce:c4:24:8e:79:18:8d:a4:b9:e7:dd:d1:85:49:9c:
                    09:6f:9c:97:09:92:b9:5e:29:da:7b:56:ce:84:3d:
                    33:3e:d1:75:5d:ea:95:91:dc:ee:81:80:e0:14:ce:
                    ee:63:6d:d5:0c:59:ed:8d:c9:b4:51:a9:31:76:97:
                    fe:ad:06:51:52:b2:86:2a:2e:3c:ff:de:a0:13:bd:
                    a0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4A:51:98:69:D1:68:93:E8:1A:3C:3C:55:BF:FA:D1:7A:CB:AD:39
            X509v3 Authority Key Identifier:
                keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ef:33:3c:05:4e:2e:c9:df:58:8d:88:37:03:7a:21:8c:22:
         90:c5:a7:0c:26:5b:22:21:de:af:95:6f:ee:39:f3:1f:d6:7a:
         f9:3d:4b:cf:79:89:87:c1:b5:42:5a:4c:2a:b2:28:69:43:a7:
         42:00:a2:25:53:77:8d:b2:fc:30:05:bf:74:d7:a4:db:56:9e:
         55:e4:07:0b:81:f6:f3:e0:ae:ef:79:05:9d:a8:bf:89:6a:ce:
         e6:8d:a4:25:1e:c9:c9:bb:83:30:a7:ca:69:ae:95:fb:5d:4f:
         8b:68:9e:f0:b2:e2:16:1e:3c:cf:85:5e:9a:01:33:58:18:98:
         bf:64:3f:56:fb:e1:2c:a1:b9:c5:a9:3b:c3:35:1b:d1:e0:6b:
         7e:a1:fa:ac:ba:87:2d:09:37:19:68:33:b4:6b:3c:8b:14:77:
         97:f8:6a:e1:e6:be:be:b6:1e:1f:30:df:b1:eb:a9:51:c6:29:
         3a:9b:fb:0e:5a:b5:7c:b4:2a:c7:5b:c1:49:c7:0f:97:83:ca:
         ea:72:56:74:fb:fd:ae:4d:12:b5:a7:b7:d0:d0:c4:dd:67:43:
         3a:45:43:35:18:56:7e:97:b0:fe:61:a8:7f:05:3d:45:25:f3:
         fa:a7:bf:53:1c:cc:70:9d:ac:56:db:ea:62:f0:37:95:7c:06:
         64:20:78:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:03:33 2026 by rpki-client