Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
File:                     kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json)
Hash identifier:          IixLqZ4xl1pfX4Xe2n+puyVgfYyWkRxnP+ZvayVtOJ4=
Subject key identifier:   61:D7:64:6C:BE:F7:7F:11:7A:EE:E6:AF:55:0F:0A:2E:2A:EC:EA:CB
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Certificate issuer:       /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial:       019D6E40D8AE83A709ED1E9D50EFAE75B410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
Manifest number:          18D5
Signing time:             Wed 08 Apr 2026 18:00:36 +0000
Manifest this update:     Wed 08 Apr 2026 18:00:36 +0000
Manifest next update:     Thu 09 Apr 2026 18:00:36 +0000
Files and hashes:         1: 1-QrkJ1ReezcgF73EgGbqmxSp9iE.roa (hash: RSa2cTQxNZP76zXoi1N6FVpNx/a7WiCBFEO8rdHSaGo=)
                          2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=)
                          3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=)
                          4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=)
                          5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=)
                          6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=)
                          7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=)
                          8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: jxGhKTbrgLHO6lD9mLZakrWREr54pxF/BR0rdRcY/4g=)
                          9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=)
                          10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Apr 2026 15:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:6e:40:d8:ae:83:a7:09:ed:1e:9d:50:ef:ae:75:b4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
        Validity
            Not Before: Apr  8 18:00:36 2026 GMT
            Not After : Apr  9 18:00:36 2026 GMT
        Subject: CN=61d7646cbef77f117aeee6af550f0a2e2aeceacb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ff:73:ed:f0:79:d0:66:44:bb:c7:dd:bd:65:
                    d6:90:48:b7:5a:29:a7:21:09:22:0e:c5:65:0c:0f:
                    c1:2f:3a:6b:17:cc:0e:87:17:4c:b9:71:f2:8d:0c:
                    06:78:77:4e:f8:31:00:76:19:72:66:c0:b7:94:c8:
                    55:83:dd:0b:3b:e0:5c:76:ff:1e:d6:cf:78:81:ab:
                    8d:49:40:e7:5f:51:47:d4:a6:d0:2e:e6:ee:75:d2:
                    5e:99:84:6b:7b:ea:94:72:e4:93:37:11:8d:f4:63:
                    3e:43:35:8c:f5:db:10:28:0f:97:7c:ae:b0:4e:6f:
                    fa:9a:0e:70:1c:e1:6a:f1:ab:e1:89:d1:45:9c:9f:
                    3d:2e:91:de:01:26:5d:f7:9b:48:f3:0c:2d:cc:fc:
                    b9:de:29:40:f7:b4:3c:fc:e0:ab:b4:cf:e4:bf:73:
                    d0:b0:d7:1e:53:66:b3:05:18:a0:98:9f:e4:99:d9:
                    e8:86:a4:85:56:c9:85:9c:db:71:0b:f1:54:74:cd:
                    61:ec:30:eb:24:f1:ff:c5:62:0e:c8:11:79:aa:c8:
                    24:49:b1:ac:d9:06:30:34:22:8f:c3:ca:8a:d6:11:
                    50:f4:bb:f3:8f:90:f6:a3:1f:6c:19:45:77:7d:d7:
                    0f:f0:ee:ad:7d:b7:87:00:68:3e:b0:2d:13:72:2a:
                    0d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D7:64:6C:BE:F7:7F:11:7A:EE:E6:AF:55:0F:0A:2E:2A:EC:EA:CB
            X509v3 Authority Key Identifier:
                keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:6e:30:24:87:51:a0:15:ff:f9:6c:d9:fb:93:cd:45:fe:f5:
         5a:60:b1:ef:08:d9:a3:3d:4b:98:e7:3c:78:6d:a2:4e:43:ab:
         e0:75:6c:85:c8:3b:82:88:3d:2b:ec:8b:c1:10:f8:ea:f6:de:
         da:5f:93:55:1e:b5:87:57:d7:a6:9c:01:4e:a0:17:10:2e:4e:
         8d:6a:84:92:fc:64:33:59:0c:55:9b:9a:85:d4:04:78:b9:cc:
         ae:31:d0:06:c2:ee:0b:68:75:70:60:3a:4e:56:a9:43:77:3b:
         22:54:ca:1b:a5:15:7f:53:62:be:59:47:c9:b3:05:0f:0d:64:
         7a:d6:67:e0:50:49:94:a2:0f:11:66:39:3c:b7:7a:cc:0f:23:
         3c:16:e6:c6:fa:6d:bf:90:c7:7d:69:d8:c7:6f:be:41:87:ef:
         98:63:b5:c3:e0:e9:47:0d:0b:ea:94:7a:b2:6c:46:22:18:14:
         d6:6e:b4:85:24:51:54:71:02:27:3f:b9:92:1a:d3:8d:6b:04:
         0c:f0:03:e7:15:fc:55:7b:50:c7:f0:a1:35:9f:00:05:a2:1e:
         13:43:c2:bd:ce:53:cd:a7:c3:2e:55:66:c6:0b:b6:e3:cd:6a:
         c7:a2:11:10:f1:84:3a:d7:82:d9:48:89:f7:ce:bc:e4:0f:b5:
         78:e9:cf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 01:05:49 2026 by rpki-client