Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File:                     s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier:          LXXjuUgkDv1yEJJczU/80R+J9HM79svKqoJO4Bv50Mc=
Subject key identifier:   42:09:5D:86:27:7E:17:6B:07:35:A5:EE:15:00:4C:27:7B:2A:95:9D
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer:       /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial:       019D5FE1318B4CCDF3979BA8EFE49517F34E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number:          18BA
Signing time:             Sun 05 Apr 2026 23:01:26 +0000
Manifest this update:     Sun 05 Apr 2026 23:01:26 +0000
Manifest next update:     Mon 06 Apr 2026 23:01:26 +0000
Files and hashes:         1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
                          2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
                          3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
                          4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
                          5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
                          6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: gJuMgSCe+xMJLtkMpR92hOfguFcW6GaV/5aIFnQ6kGk=)
                          7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 Apr 2026 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:5f:e1:31:8b:4c:cd:f3:97:9b:a8:ef:e4:95:17:f3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
        Validity
            Not Before: Apr  5 23:01:26 2026 GMT
            Not After : Apr  6 23:01:26 2026 GMT
        Subject: CN=42095d86277e176b0735a5ee15004c277b2a959d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d9:3b:97:13:df:80:8a:3e:d0:83:54:22:58:
                    d9:c0:9f:86:73:66:e0:37:68:97:5f:d5:b7:20:0e:
                    4d:5b:7b:0a:9e:6a:82:a6:72:01:78:e5:c9:4d:33:
                    f9:6c:ab:d3:f2:c9:6e:d5:2a:f4:3e:89:2b:88:87:
                    5c:f9:60:5b:13:4f:a4:13:53:12:4f:7e:bc:dd:a4:
                    ce:f9:73:3c:53:c4:fe:31:b9:2d:f2:47:42:e7:7d:
                    1a:97:84:61:4a:44:84:bb:72:c8:84:13:b3:b8:1a:
                    c9:43:eb:bc:70:8e:fa:d2:fa:83:57:a8:c5:7f:ff:
                    eb:fc:5c:db:65:e6:f7:41:1b:9a:a4:d2:75:da:66:
                    06:a4:ce:9a:70:08:a1:95:15:b9:51:0f:b7:ad:a8:
                    d2:ad:95:86:36:b7:69:84:20:d2:6a:11:8e:ad:64:
                    7a:52:a7:36:90:34:40:e0:88:78:c0:78:df:6e:ca:
                    ed:c0:8d:b8:4a:6c:66:0f:ab:da:c1:86:56:2d:29:
                    b8:95:d1:14:6c:76:48:54:9a:d4:2e:c7:e4:cf:f8:
                    81:9b:e2:e6:3c:be:42:56:43:24:93:62:fd:f1:fc:
                    ec:ea:3a:bb:33:57:5b:8f:50:ac:c7:36:78:07:c3:
                    28:c9:32:4b:e5:54:87:e6:bb:cb:8a:a1:51:72:d4:
                    14:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:09:5D:86:27:7E:17:6B:07:35:A5:EE:15:00:4C:27:7B:2A:95:9D
            X509v3 Authority Key Identifier:
                keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:fa:a8:fc:17:7e:9c:b5:04:0e:b7:fd:cf:a6:af:af:3d:cf:
         7b:34:74:61:2a:0e:16:56:8f:c5:3c:46:9f:9c:26:ee:b3:53:
         66:17:8f:92:fc:08:8e:6d:95:9f:35:ae:14:e0:29:62:b1:d9:
         a0:ef:52:8e:20:ca:ea:f3:8d:66:61:6e:62:04:20:14:28:35:
         66:c7:e0:42:65:73:64:15:0f:97:39:ec:c3:a7:bf:7c:53:71:
         f2:6a:a9:d9:29:fe:cd:de:59:66:2f:59:2d:68:91:5b:86:b1:
         60:ca:70:f5:c4:44:e6:1b:4d:51:c6:60:8f:f9:7e:7f:1d:d9:
         3c:ef:9c:21:6e:e0:a6:96:46:ca:0c:e1:07:fc:a4:25:39:23:
         2a:80:ff:e1:97:88:6d:38:7b:56:0e:0e:ee:ad:1e:92:ea:63:
         fd:f1:9b:3a:d2:c7:ba:a4:0e:64:82:30:98:0b:13:ff:2c:02:
         8e:f2:91:b9:f3:c5:2c:6e:5b:ac:4e:b8:62:61:66:56:3f:bf:
         d6:0b:2c:87:79:de:57:17:cb:c8:9f:80:77:68:b9:89:13:34:
         96:0b:de:e2:1a:3b:fc:8f:0f:48:21:09:6f:c1:1b:da:b7:5e:
         f1:06:d3:78:01:c5:64:b5:04:f7:b2:a0:81:85:bb:1a:b8:5a:
         6a:16:91:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 06:36:21 2026 by rpki-client