Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File:                     s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier:          VNa5ZXW7SC041kA8SRXKjkYoQqrGugQS7Y+nS8QygbQ=
Subject key identifier:   03:01:E4:FA:E0:3E:12:B3:C3:FA:60:65:46:87:73:45:64:E7:3A:52
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer:       /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial:       019D63BD55608943E5BB99EEF67126184794
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number:          18BC
Signing time:             Mon 06 Apr 2026 17:00:45 +0000
Manifest this update:     Mon 06 Apr 2026 17:00:45 +0000
Manifest next update:     Tue 07 Apr 2026 17:00:45 +0000
Files and hashes:         1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
                          2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
                          3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
                          4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
                          5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
                          6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: 0+Q0M90JmVFZQy139A9QeDDz8JbuQYFa7BjMl3eBOWk=)
                          7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Apr 2026 10:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:63:bd:55:60:89:43:e5:bb:99:ee:f6:71:26:18:47:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
        Validity
            Not Before: Apr  6 17:00:45 2026 GMT
            Not After : Apr  7 17:00:45 2026 GMT
        Subject: CN=0301e4fae03e12b3c3fa60654687734564e73a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:96:3a:36:6f:4c:62:98:e4:da:64:43:78:ae:
                    91:d2:1c:fa:8c:93:d3:fb:3b:00:cf:e1:63:47:a5:
                    b5:75:ae:ce:c5:42:f0:e6:9f:cb:82:d3:16:6f:f8:
                    fd:1b:25:29:63:a9:30:ec:6c:e9:f2:6a:c3:15:f6:
                    30:9a:9a:89:af:51:31:ea:62:e2:ee:ea:7f:a8:5f:
                    1a:bd:d9:53:0d:a3:3a:d3:32:3a:9d:bd:bf:24:70:
                    47:7f:3a:16:09:22:06:16:bf:b5:fc:44:e5:c1:3c:
                    70:8a:5a:af:05:dd:70:b4:e9:b4:65:1a:c9:47:8d:
                    3e:2a:4d:6a:08:f3:52:c3:46:cc:3f:17:cb:a3:77:
                    ab:08:48:23:b1:c4:1a:56:20:b7:57:80:db:df:cb:
                    15:ad:ff:7c:01:97:ec:31:98:50:10:c5:61:9e:a2:
                    36:ad:f7:bf:fa:c0:f9:5e:e2:4d:3e:69:ab:47:aa:
                    c8:a4:cc:17:21:0d:fa:03:17:c5:d2:a2:f1:1f:de:
                    98:62:ef:b7:20:c4:7d:c0:f5:d2:60:ef:8e:ea:61:
                    55:45:13:f0:c4:a0:f2:ee:68:ef:30:00:22:14:87:
                    f4:64:b2:9e:9f:7c:85:80:66:a0:f1:ce:6a:01:05:
                    cf:53:e6:34:1b:51:5d:47:5c:ed:9e:cb:14:a1:1f:
                    2d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:01:E4:FA:E0:3E:12:B3:C3:FA:60:65:46:87:73:45:64:E7:3A:52
            X509v3 Authority Key Identifier:
                keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:79:89:d9:f9:f7:f2:43:70:f6:61:82:da:43:94:62:07:04:
         c8:a9:3f:82:4b:9e:be:6f:06:69:71:e3:67:b9:9e:82:02:bd:
         64:f4:ab:7a:38:e9:ae:66:be:7c:93:e6:99:d1:9e:8f:0f:d4:
         4f:a2:f7:bb:94:4b:5f:15:bc:c6:aa:6d:30:16:fe:f9:05:41:
         c0:73:51:28:4d:6b:00:3e:97:f3:c6:fe:97:11:9f:65:10:a3:
         c2:d4:e5:ed:99:d8:d8:e0:f5:7f:c0:17:3a:4c:66:4f:36:ea:
         0e:7c:b7:0a:ed:a3:26:00:d9:6c:1d:7f:6d:54:dc:ef:f3:fe:
         e2:79:03:2f:d9:2c:db:1b:c8:67:ed:fa:39:b0:c4:31:88:32:
         89:63:7e:97:00:ab:b7:81:36:a6:c9:0b:b2:ea:22:73:53:c8:
         ea:86:22:d9:74:83:27:14:9e:0c:02:d8:15:44:dc:63:1c:27:
         aa:91:1d:50:50:8e:75:a0:19:fe:e7:eb:b3:07:3b:a9:36:58:
         32:22:78:88:9b:30:59:1a:67:92:46:e1:a0:51:ed:49:e3:cf:
         ee:7b:d6:5b:c6:36:e7:2a:dc:73:c5:d3:21:56:08:4a:9f:16:
         15:bf:92:ac:80:27:fd:0f:ff:98:b8:b6:93:de:16:a9:26:f6:
         1e:56:3e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 19:30:27 2026 by rpki-client