Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
File:                     sICdwHvAd1GY8vMVVBUvNWqD93A.mft (raw, json)
Hash identifier:          boIfPk9twa8jKqLoHFzTAPDeqOPuUjQM686z9lNPab4=
Subject key identifier:   59:02:67:4A:72:A4:05:8A:C5:38:85:4D:63:E4:2B:51:CA:22:8F:C0
Authority key identifier: B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70
Certificate issuer:       /CN=b0809dc07bc0775198f2f31554152f356a83f770
Certificate serial:       019E30E0148922A260D3D5C418A0BF3D2D67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
Manifest number:          18A4
Signing time:             Sat 16 May 2026 13:00:52 +0000
Manifest this update:     Sat 16 May 2026 13:00:52 +0000
Manifest next update:     Sun 17 May 2026 13:00:52 +0000
Files and hashes:         1: 9y3JK83GAsm13D0YffuSXVmKNYo.roa (hash: mRnoN4uYmedrpU7jo9ReZ2AadwnL5SQlW0OFJSUdrsE=)
                          2: sICdwHvAd1GY8vMVVBUvNWqD93A.crl (hash: oYhpiynkOPQVlvxxze5ujDnL2vl5xLPYDFBu2Id7Tvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:14:89:22:a2:60:d3:d5:c4:18:a0:bf:3d:2d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0809dc07bc0775198f2f31554152f356a83f770
        Validity
            Not Before: May 16 13:00:52 2026 GMT
            Not After : May 17 13:00:52 2026 GMT
        Subject: CN=5902674a72a4058ac538854d63e42b51ca228fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4f:e3:0f:30:c8:e3:6e:b8:3a:83:f2:44:d4:
                    d5:58:8a:4d:15:b0:15:f0:a3:82:b1:da:b2:ea:a9:
                    b2:d6:84:ec:3e:73:1a:48:eb:5c:54:e1:2d:0c:b8:
                    bf:dd:ba:58:21:ee:a1:e6:c3:b7:02:9b:f1:56:4a:
                    27:c8:8b:fa:eb:1d:a5:64:f5:93:fc:b8:85:f4:6d:
                    9d:ff:8d:d4:3f:75:2f:e6:e9:79:49:5a:f3:06:f0:
                    52:b5:88:b1:4b:d3:d8:bb:ea:97:14:12:fa:ab:dd:
                    f7:11:24:d0:43:c8:38:ec:7a:db:63:bf:ee:f6:86:
                    85:1b:7d:5f:09:84:02:42:f7:e8:5c:48:68:d8:dc:
                    77:bf:62:e2:d6:8a:19:ab:eb:f7:89:11:a0:1a:e6:
                    61:0c:1a:2d:52:10:61:cf:dd:71:7a:1f:b2:b2:96:
                    86:8a:2f:a1:fd:67:11:76:8c:87:69:3d:5e:f3:d5:
                    ca:39:c2:36:26:12:4f:b6:b6:79:52:a4:96:ce:9a:
                    39:3c:d8:68:09:ad:b2:a8:54:96:86:e3:11:4a:51:
                    2e:3d:ce:56:e4:da:30:de:b1:9d:62:58:fe:1a:96:
                    78:14:ef:85:53:01:9a:b8:b0:c3:98:01:cb:58:52:
                    09:18:70:c6:47:42:14:eb:f3:25:c5:48:eb:b1:9b:
                    29:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:02:67:4A:72:A4:05:8A:C5:38:85:4D:63:E4:2B:51:CA:22:8F:C0
            X509v3 Authority Key Identifier:
                keyid:B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:56:c2:bd:32:4d:4d:92:53:eb:31:ce:00:b9:7f:ea:b8:98:
         8f:56:cf:f0:c1:6b:93:8c:df:9e:aa:23:1d:f7:a2:5b:53:f0:
         be:08:7b:bf:96:95:13:49:b0:c2:16:e3:eb:98:09:4a:8c:d0:
         be:2b:9d:df:e1:6c:51:c1:cc:d3:54:00:8a:e4:f7:13:54:6d:
         cc:fc:e8:d8:8f:95:37:3e:b2:3f:19:cd:e9:45:ab:03:29:29:
         d4:22:16:00:9a:0b:4d:3a:75:ab:b4:ef:52:ac:02:f3:9e:96:
         e6:7f:48:ae:58:49:47:50:fc:fd:3a:b3:14:e3:9e:e6:ca:4a:
         af:b7:f0:2d:ba:4f:39:e6:94:01:85:09:62:42:97:d8:b1:7a:
         c6:b9:ee:09:74:75:9b:16:75:4e:7d:9d:fa:23:ed:92:fa:61:
         ed:d9:04:9b:48:ad:ab:fa:4a:d1:8d:04:58:61:1a:f0:d8:f9:
         c6:d3:40:af:ef:9f:d4:14:09:f6:cf:bb:26:75:3f:97:01:9c:
         3f:49:1a:eb:1a:b3:f9:31:84:7c:3a:d2:ea:05:8f:c7:98:2e:
         c4:2a:64:8d:96:38:80:ef:3f:9b:7d:b1:ee:9f:97:2c:51:e3:
         69:88:7d:59:d6:ec:bd:f4:b1:ce:35:6d:3e:45:57:a4:e2:6d:
         57:1b:23:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:30:32 2026 by rpki-client