Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
File:                     v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft (raw, json)
Hash identifier:          C4x2X6jn0VurCwEzqjfeCS5/n0CTUQM1qj/YyDZz9FM=
Subject key identifier:   A7:A1:2D:F8:E3:B5:85:F6:C8:15:F4:B8:60:25:3B:D9:BA:B5:88:D1
Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
Certificate issuer:       /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Certificate serial:       019DCF073099FB37224E4FEFAC45D004DAD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
Manifest number:          18EA
Signing time:             Mon 27 Apr 2026 13:00:47 +0000
Manifest this update:     Mon 27 Apr 2026 13:00:47 +0000
Manifest next update:     Tue 28 Apr 2026 13:00:47 +0000
Files and hashes:         1: Flz_OFQsmX-w-Rd12UyQRHMKatw.roa (hash: JA3smf8ytCG+n6SIrvOZ9o06IVKgViJsuYy9wwAuvgw=)
                          2: Iso7UtudzqybI9P-u3N4xN3OFFA.roa (hash: 0IZeZas6NGaEqB4YndDnq080rW0AwifZGEDKnTQjRRg=)
                          3: R-fseu38BXZxWnP0LRUzT06RrV0.roa (hash: WBYn5t2LzQwRk5CEk7ZRIj5Al789B5wx6blN8odTtJA=)
                          4: Ul_Wf7zGibMnBoONOBmC-CbebuE.roa (hash: rHROysQB1FOGTFZPpOKof8CKn+9ezFraJbOm+zE4tGw=)
                          5: iEjKKLRDgJz2LhvN_sxHnJkxBc0.roa (hash: OfSTMvRyldawaL7wcMvycL+8+eQXeUtcB3572S96OXc=)
                          6: k1dO5v20V18ZdNp1zmkc6LIciGg.roa (hash: 438dqyns6emIjrk0QOOi1yUCaMjxkliDFNzKcc/PdRA=)
                          7: v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl (hash: 4glHHghfy7eJ2Ucs9M7w1MrBHJqibUnUaTtU4BTN8Xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:07:30:99:fb:37:22:4e:4f:ef:ac:45:d0:04:da:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
        Validity
            Not Before: Apr 27 13:00:47 2026 GMT
            Not After : Apr 28 13:00:47 2026 GMT
        Subject: CN=a7a12df8e3b585f6c815f4b860253bd9bab588d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4c:61:d3:24:eb:19:16:7c:fe:61:a5:e7:7d:
                    4c:27:e9:b0:93:24:82:b1:b9:03:c1:7f:b5:80:66:
                    c5:23:a0:9f:af:61:d4:c8:3c:8f:88:32:00:ff:a9:
                    22:a3:c4:bd:84:73:a7:f9:2c:30:d3:a2:f9:a4:9c:
                    e0:44:9d:2c:bf:c9:05:14:13:d3:e5:ed:55:56:4f:
                    14:48:6d:25:6b:d3:3c:94:d8:34:3a:7d:07:c5:02:
                    2e:3e:0d:2d:bd:3f:25:ff:3d:69:19:98:4c:d2:df:
                    d5:3a:0f:5e:f9:84:df:87:14:a4:c1:0a:ef:54:46:
                    3a:41:7e:c7:a2:78:44:bd:26:d9:85:fe:f0:d1:d7:
                    57:f5:ba:0d:9c:2d:3e:c6:5a:65:9f:6a:55:6d:00:
                    9a:2b:f4:74:dd:6c:80:0d:4a:75:c3:79:3d:02:56:
                    e3:ca:58:2b:0e:6e:49:62:ca:b0:cc:1a:09:88:68:
                    64:b6:09:84:ec:ca:2e:e2:64:a9:f6:a5:13:a3:8f:
                    86:ba:01:de:2c:83:9a:62:94:17:f1:e5:8c:98:b0:
                    e2:06:28:94:20:32:58:83:70:02:ec:f4:6a:50:c8:
                    a9:9d:86:85:da:b2:ee:28:99:3d:f3:81:6f:39:03:
                    f8:62:f8:22:a2:a4:e0:a6:cd:52:a4:f0:95:dc:0b:
                    7f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A1:2D:F8:E3:B5:85:F6:C8:15:F4:B8:60:25:3B:D9:BA:B5:88:D1
            X509v3 Authority Key Identifier:
                keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:2c:b1:d5:6f:57:4d:80:5e:17:ba:5d:38:60:05:11:07:be:
         c6:be:a3:bc:7d:5c:4a:5c:1f:9d:8c:85:8e:1a:e4:39:e1:41:
         a0:4b:c9:03:29:be:da:06:07:d4:34:70:c8:3e:24:a0:b2:ec:
         0f:ad:34:45:7e:73:9e:4d:3f:1d:db:f5:0a:eb:fa:43:28:81:
         9c:bd:66:cd:57:50:f1:a2:99:e9:36:79:b4:8d:5f:60:9d:80:
         4f:3d:8a:54:e7:b6:bc:c2:b0:4c:65:54:ed:28:8f:b7:d0:8f:
         4f:d7:0c:b9:85:41:90:1d:f2:31:34:ba:8f:a5:32:71:54:e0:
         c9:bf:a7:1c:22:be:ba:13:5d:5b:56:73:b9:6b:72:dc:ef:52:
         93:e5:49:1e:13:90:78:b2:60:ca:41:90:7b:79:99:a6:35:d1:
         91:a9:dc:15:a9:26:7c:29:28:b4:1a:a6:0c:9b:ec:f8:f0:da:
         6d:1d:b1:5f:a7:a1:3c:1d:d3:e1:5d:56:50:88:01:39:dc:f5:
         8f:24:ee:94:8f:78:3f:e2:3f:9a:2c:f8:4d:00:72:ee:8f:20:
         25:6d:e3:bf:16:e5:f9:cb:f7:63:94:c3:53:90:d9:a8:9d:2b:
         27:dd:e8:06:5d:15:bd:04:e3:c8:74:72:c5:cb:26:e8:f0:f1:
         41:43:16:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:38:30 2026 by rpki-client