Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
File:                     qCybwtLaz9bxMNhahP7eq_F5pWc.mft (raw, json)
Hash identifier:          QViXTPyM0dLw6qscuWwh1V+SHs1rzm1eHohCQsIOVtk=
Subject key identifier:   63:1C:64:89:4B:12:A6:9E:30:58:3B:12:F7:7F:F9:D7:81:8D:CD:AA
Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
Certificate issuer:       /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Certificate serial:       019DCC74D1604F84EE69B4D9FD2C7D1A0288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
Manifest number:          18DC
Signing time:             Mon 27 Apr 2026 01:01:40 +0000
Manifest this update:     Mon 27 Apr 2026 01:01:40 +0000
Manifest next update:     Tue 28 Apr 2026 01:01:40 +0000
Files and hashes:         1: 4zqOo2SM12tzCSyJyEiRJDqyLeE.roa (hash: xhzylJcPJUd2ec6iCX/8IUuxbVDyJDMhXg/eaPmydQk=)
                          2: CpR7zdaWFgeP_a3JunXPR9g-kLM.roa (hash: +G+gW4DG9/VXzfDnCfnSWW4i5dWFOrWQai2m9hvQ4Jo=)
                          3: NcgEquPk4dqA6kZfv1d9WtImU1g.roa (hash: dJAF+c5UKrR5ihGU6h+RnFVtoMxdremp4iO/MCSr3CI=)
                          4: OghForkImI0Jo0zBq3XHOESQXuc.roa (hash: jMJmmzeuAO8dk90vNQKpGRRQiIdwuWD8TX9EqhW2Bbc=)
                          5: _W2M19fEeYWYsJYF-LdRGnP5HT4.roa (hash: Pmvi6OlA3CER/RWwL2L21FShj4gRY6R+MGZg5vLD+/o=)
                          6: qCybwtLaz9bxMNhahP7eq_F5pWc.crl (hash: DWUPL4ELx+ukGR+Ku40jgfKjjYgmfs57b/4abk0vw5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cc:74:d1:60:4f:84:ee:69:b4:d9:fd:2c:7d:1a:02:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
        Validity
            Not Before: Apr 27 01:01:40 2026 GMT
            Not After : Apr 28 01:01:40 2026 GMT
        Subject: CN=631c64894b12a69e30583b12f77ff9d7818dcdaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d0:5f:71:d5:36:d4:07:e8:6c:e8:b9:79:ee:
                    e4:d1:69:92:ae:43:bc:05:92:56:cb:be:d8:39:4a:
                    4e:8d:73:46:60:fb:d5:a8:c4:72:c4:f2:9c:b4:bd:
                    8c:35:f3:fa:16:3b:03:b0:57:5b:4c:9b:6a:0b:ee:
                    79:8c:dc:5c:29:5d:72:28:b1:dd:ae:88:f9:4a:07:
                    99:74:93:b8:ed:64:e3:45:46:15:76:a0:bd:58:cb:
                    6b:03:3f:78:e4:73:61:53:df:28:18:b4:6c:81:f4:
                    de:c7:4d:3f:d2:5e:f5:cd:f9:56:a7:79:a9:e2:29:
                    c0:cd:a8:d7:a9:5f:5d:8d:53:f2:e4:45:2c:2a:61:
                    99:dc:c7:2b:10:4a:1e:38:41:eb:00:ea:30:80:db:
                    93:e4:cb:77:57:47:a9:38:62:02:18:96:fe:0d:e1:
                    ce:f1:5b:d6:5c:b2:4f:b1:51:9d:79:17:c8:ee:ec:
                    34:14:81:e8:da:aa:49:69:bf:cb:3a:e6:37:90:24:
                    5f:59:1f:6c:e2:08:ba:12:7d:32:d3:85:3b:d7:e0:
                    9c:f7:5b:af:22:78:c1:6d:b3:bf:aa:64:f1:4e:f5:
                    54:88:9d:07:9e:b9:a5:fe:c0:9a:c8:95:ab:7a:0b:
                    60:7b:40:13:3b:1f:43:5b:63:46:14:30:33:fb:34:
                    b3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1C:64:89:4B:12:A6:9E:30:58:3B:12:F7:7F:F9:D7:81:8D:CD:AA
            X509v3 Authority Key Identifier:
                keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:07:22:d7:cf:cc:e5:c4:45:c0:1a:d3:dc:87:ad:7d:05:dd:
         2b:46:85:af:d9:f2:6e:9a:e7:20:ad:d8:3a:fc:78:a0:e4:76:
         71:ee:93:5a:fa:e8:e8:b6:e0:59:4a:a4:87:ce:6c:0c:af:5f:
         7c:4c:db:97:a6:eb:31:07:c6:6c:e9:2b:fe:50:ba:7a:15:5a:
         58:fc:54:46:01:c3:72:ed:88:89:9b:c6:7f:f4:17:19:ac:6b:
         c9:83:3b:6d:cd:a1:9d:b6:f7:82:7f:18:ee:0f:99:b3:9f:26:
         05:84:7b:bd:6f:cf:61:76:12:5f:cd:ae:5a:e8:f4:65:0f:de:
         eb:83:0e:06:a9:01:35:6a:73:f7:80:48:c2:eb:25:1d:36:ac:
         46:ff:c7:9d:72:d8:cd:28:da:65:d8:53:35:0d:00:3b:aa:b7:
         5f:b9:55:ae:91:70:f7:ab:53:51:a0:f6:86:72:72:b6:1d:71:
         4b:e2:2d:df:d0:d4:b5:44:58:f7:be:7c:90:71:32:a4:bf:10:
         8e:a8:08:8a:c3:57:a8:be:66:78:54:57:d3:38:94:3f:a3:35:
         a0:f2:ee:a5:ac:88:3b:a3:ec:a2:b9:84:9a:ea:3d:84:ae:ab:
         01:09:ec:bf:6f:d9:6e:b2:ae:d8:5e:5f:4c:14:60:58:11:17:
         74:1a:ec:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:11:23 2026 by rpki-client