Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File:                     v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier:          asSXy4W30syJoIjgVxyY3+h9T4RZ1dYA3QokIk7v82o=
Subject key identifier:   98:26:BE:DF:65:72:D8:C4:66:8F:5D:1D:13:6C:BF:9C:E3:A3:2F:5D
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer:       /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial:       019DB3C6DE874AF73971784DC0802B8CF155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number:          18D0
Signing time:             Wed 22 Apr 2026 06:00:47 +0000
Manifest this update:     Wed 22 Apr 2026 06:00:47 +0000
Manifest next update:     Thu 23 Apr 2026 06:00:47 +0000
Files and hashes:         1: 33KpGlS_VtYMS4VxaCOKuIoKRIU.roa (hash: PycRk9WWt2oF1w6VPqOesZM2Iyc5sLWnv91I0/vqfTA=)
                          2: 6FH6tzQ-OGL1olRZmGsLavyetEI.roa (hash: t7CC5E4Cq4qAeFI/xEX8HmFf3pMyY/Orv1k1m68NVmM=)
                          3: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: 8+XNrVxlmxbs1I5fY7jWqtEj/5TYOiIE5n2yxysuwtQ=)
                          4: zt1e9hXqnKC7GTDcsl5TmahbR14.roa (hash: cMjId05GIC2DoYaxGvqZ9tQQexKxYbYtbXXHMb77nW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b3:c6:de:87:4a:f7:39:71:78:4d:c0:80:2b:8c:f1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
        Validity
            Not Before: Apr 22 06:00:47 2026 GMT
            Not After : Apr 23 06:00:47 2026 GMT
        Subject: CN=9826bedf6572d8c4668f5d1d136cbf9ce3a32f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ec:fc:37:9c:79:fd:63:7e:4c:45:fd:74:aa:
                    f5:06:e4:18:45:e6:35:4d:58:cc:d0:e9:51:e7:94:
                    77:8e:6a:7f:66:90:d9:61:4c:d6:6f:85:5d:1e:26:
                    c2:a7:87:ac:30:2b:dc:48:af:32:10:a5:43:e0:2f:
                    58:b3:5d:38:0d:50:1f:04:16:cc:94:d4:8e:86:c4:
                    1e:c7:83:53:5c:cb:05:37:6f:fd:ec:32:57:cf:a0:
                    ba:80:e6:15:5b:ee:ed:86:0b:53:4f:e9:db:70:7e:
                    e7:ec:2b:e9:56:01:b7:eb:26:25:02:e0:4a:f2:92:
                    6d:91:ef:6d:ef:14:9b:0d:f0:ce:22:90:2c:b4:76:
                    a2:e5:2b:be:62:9f:60:6f:e2:90:ef:f5:c4:fe:f1:
                    5f:8c:84:5f:93:2c:92:c9:8e:a4:ae:46:e0:38:cd:
                    55:5f:b1:5e:d4:6b:18:c2:2e:5c:06:3e:52:1d:d8:
                    27:b8:74:99:9a:27:69:3e:70:a3:b5:ae:09:18:5a:
                    ad:94:88:c5:8c:94:fe:b7:f8:1a:1d:59:49:02:1d:
                    b3:85:4c:6e:74:22:4f:10:3b:1d:ac:82:20:a3:8b:
                    37:d4:86:20:9d:0d:5a:0b:72:53:7f:a8:a3:f1:f0:
                    73:79:f5:69:78:6d:c9:a5:86:49:91:14:c8:4a:b8:
                    aa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:26:BE:DF:65:72:D8:C4:66:8F:5D:1D:13:6C:BF:9C:E3:A3:2F:5D
            X509v3 Authority Key Identifier:
                keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ba:d5:a3:a4:08:2f:25:76:73:c2:9d:a9:4b:93:b0:d2:aa:
         68:32:97:0c:c5:0e:69:bc:06:ed:54:48:d5:ea:56:5b:e1:87:
         65:44:1c:c2:6b:6b:9b:b2:fc:45:cd:e9:83:da:23:7a:e6:68:
         c8:47:ec:8d:27:44:7e:ec:54:21:00:9d:46:c5:6c:1a:60:4e:
         a4:38:a8:1c:63:05:7c:a0:f4:81:47:81:8a:30:01:83:37:d2:
         c5:f4:93:59:49:96:cc:f4:72:4b:a0:f8:1c:70:96:17:ef:e6:
         99:af:45:d2:34:af:e5:f2:7d:16:f0:f4:cf:d9:ab:3c:32:66:
         36:0d:51:d3:5a:33:21:6e:43:ce:d0:a3:07:f7:10:2e:47:04:
         61:af:f8:27:73:23:9a:03:58:a8:1e:f7:3c:fd:72:8d:1f:42:
         de:de:a3:65:74:2b:4c:8f:80:31:15:90:f0:b8:05:89:ac:d4:
         85:ed:18:d2:64:fa:e7:77:9e:18:1f:73:8b:7c:42:a4:26:80:
         cc:ad:f0:00:e4:1c:6f:43:21:cf:99:5f:b7:fd:cc:d0:31:62:
         69:6f:01:94:71:fa:38:80:98:40:3a:a6:dc:29:fb:81:89:2a:
         72:76:72:83:05:ac:03:d4:83:f3:f0:07:e3:d9:e5:a6:b9:ca:
         09:a8:7a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 08:40:43 2026 by rpki-client