Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
File:                     _m27LD-YIyjgdJUUeRzrwuDqn4g.mft (raw, json)
Hash identifier:          Y5QddlTusp2/Bs8AIk7WE58kx8yWx8Vu5quvh6UozNI=
Subject key identifier:   48:6C:7D:3C:25:0B:15:FB:7C:7D:DF:AF:C5:8C:C9:AF:F8:59:14:58
Authority key identifier: FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88
Certificate issuer:       /CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
Certificate serial:       019DCCAAE8027E660FD55E8673DC9BA2B03D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
Manifest number:          18DB
Signing time:             Mon 27 Apr 2026 02:00:45 +0000
Manifest this update:     Mon 27 Apr 2026 02:00:45 +0000
Manifest next update:     Tue 28 Apr 2026 02:00:45 +0000
Files and hashes:         1: Gbz-BgEMYk_EZ_37nQq9nikSMCM.roa (hash: yU2DLGFjN9TCcYSlsrT9XWj7qaKv71819e5tIEo7sAw=)
                          2: _m27LD-YIyjgdJUUeRzrwuDqn4g.crl (hash: 8Q1r8YzzUiI5AM1ONXD8I6PgxF0DenS5SjGwJk6Nj6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cc:aa:e8:02:7e:66:0f:d5:5e:86:73:dc:9b:a2:b0:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
        Validity
            Not Before: Apr 27 02:00:45 2026 GMT
            Not After : Apr 28 02:00:45 2026 GMT
        Subject: CN=486c7d3c250b15fb7c7ddfafc58cc9aff8591458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7b:6c:67:f7:45:c6:1e:27:2d:43:e8:a9:e3:
                    9e:f7:6b:67:d9:fb:63:65:3c:49:2b:0c:71:e7:14:
                    03:6b:27:bc:3d:df:84:8f:98:f1:cf:8c:ba:9b:c7:
                    c8:5b:a0:5b:1a:fb:bb:28:b7:64:89:72:ad:c9:48:
                    3b:97:e1:02:7b:a9:da:b8:8e:ff:91:62:22:c4:74:
                    23:27:59:ab:16:6a:dd:94:42:9f:80:66:2a:64:7a:
                    05:58:ad:b0:de:13:25:bf:6f:6c:02:2d:aa:6c:97:
                    a2:87:3e:8a:97:6c:c4:b8:83:95:b5:6b:a7:2b:f7:
                    dd:a4:32:ee:ac:12:f3:0e:03:ff:39:50:38:79:8e:
                    1e:ee:cf:83:66:2e:86:95:0d:22:65:0b:b5:31:a3:
                    56:d3:48:f8:51:d4:77:cf:cd:4e:35:d7:6a:4d:5a:
                    7d:0b:d3:f4:11:47:45:01:e3:1f:27:37:ef:b0:c7:
                    f0:a9:2d:c8:5e:9b:cc:d5:07:0e:f4:88:57:e6:08:
                    c4:e9:13:18:65:37:8b:2e:86:70:c5:26:93:fb:ab:
                    0a:8b:63:87:c5:1a:76:0b:38:a8:1e:97:b0:a8:c7:
                    b4:2e:9f:a3:9b:96:f9:5d:87:02:80:7a:97:b1:a0:
                    c4:7d:ea:e8:64:6c:23:be:40:3c:0d:4d:e9:f9:20:
                    ae:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6C:7D:3C:25:0B:15:FB:7C:7D:DF:AF:C5:8C:C9:AF:F8:59:14:58
            X509v3 Authority Key Identifier:
                keyid:FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d3:5d:16:39:fa:23:09:46:e1:52:b5:c5:30:a8:58:da:bb:
         5e:51:6d:22:9c:cc:55:84:60:17:36:58:28:9d:26:cd:0d:6f:
         cc:b4:5e:fd:58:21:ac:7c:29:7b:f9:d9:98:04:2d:b5:bc:e0:
         63:f7:05:c5:07:38:4c:ae:d6:81:58:d1:05:84:f4:1a:61:c6:
         bc:8e:88:81:3f:f7:74:fc:26:9e:d5:7b:d9:c9:47:48:22:d1:
         d9:41:91:72:f9:37:2e:84:b3:a5:4b:cc:01:c7:b1:f1:e4:a5:
         f1:75:91:8d:60:06:59:98:c1:39:d8:9a:f0:f1:09:29:3e:83:
         54:dc:1f:0f:0f:11:f3:f5:8c:69:3d:03:26:e3:0c:0b:07:7f:
         a9:a3:55:ca:f6:b5:f3:2e:81:05:18:e9:f4:4f:75:f8:66:03:
         7b:f1:03:7c:22:35:8e:80:5e:38:c0:36:48:bc:9d:f3:15:0f:
         13:88:cc:b3:b0:f9:20:a0:b2:d4:1a:08:66:70:e5:28:dc:5d:
         b0:32:63:48:09:7d:2b:69:18:99:37:07:21:73:ae:79:94:ca:
         e3:63:47:b8:50:28:d4:51:10:ec:48:ab:cb:2e:71:bf:8d:3b:
         c5:7b:a5:19:7b:bd:37:bc:ff:6f:cc:e9:e3:15:90:12:3d:cf:
         6e:0d:d0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:27 2026 by rpki-client