Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
File:                     kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json)
Hash identifier:          7OU0xj2SC26ZEud9Wcd9mbeE3CzNuWc/34HUdsJBkso=
Subject key identifier:   8C:33:04:37:6E:E8:6B:E8:36:CE:85:45:4A:DF:66:F2:7D:E0:78:C0
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Certificate issuer:       /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial:       019DCFE39A962238FF36ECDD543980657F8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
Manifest number:          18F1
Signing time:             Mon 27 Apr 2026 17:01:33 +0000
Manifest this update:     Mon 27 Apr 2026 17:01:33 +0000
Manifest next update:     Tue 28 Apr 2026 17:01:33 +0000
Files and hashes:         1: 1-Av5slqVQGl13SrEfsDMUE9C8xw.roa (hash: fHxcC/pLnuuTMmJ/MEePK0x7KhULD48H+HBYLlLnLM0=)
                          2: 2rAGmumAatpMz3kw0VsK7nvOOnQ.roa (hash: QkO7bxWZSDvJ15l2k1OHawSRFNSNmwY3Ip4idTP8XgU=)
                          3: 4b5IG88yGY57oOV8rMMD65D9450.roa (hash: L2WJBC1WPudMtSgpBc/n3eAovKHJ7Y5NfWrM/nSEbtE=)
                          4: 4kfyvx6IcqlCxed7fdvb4m5sTD4.roa (hash: KVGLl3eS3kXmc+q2aJ0R4MjOlnAmyZYkvCj/Q8Juapc=)
                          5: E0o_FE2T3DZ1D-UezcaaMgIR4Cc.roa (hash: 5MnQxHTjDi2NDKJrwnJ1AAzWp+hIpNaMlweOYJUqXj8=)
                          6: HfpMqcQpb_Oyo8q91Gxgrjfcnfs.roa (hash: 3z+4GXfqGZOD8OYrsC4T9FL0WEjQRqb08RZme3k48Lw=)
                          7: JsVZuQIKNIHzo3qKU_aGaN9TGy0.roa (hash: W7p0gBk862eedQpONG4wyoOk08n0osQClMT4stp+hJs=)
                          8: PyPswdGk1ZVrHOm_LMSZBjhQB1A.roa (hash: +8V8Dt++uOTSXhRHoCWJ+fxEyoBe8YcJTvD0shhiPWM=)
                          9: V0ZbvO-Kau_hina_xax1FtPv3HU.roa (hash: 5pDhKp4j1D9CHXJw1ml9s4a1yEyDrOVGDOf0oK5BSVI=)
                          10: WrWwHOItDmU_S3g0-w_cgsaPRFA.roa (hash: jNNtsFSn9AMYEFYuH0fqqD4hwORadbXk3pHoHndZnnc=)
                          11: ZJD3Q6iJx8-f2YHw1Hw_i2VwDds.roa (hash: 4ehtslOSeTUspbDXf2ztNXuLiv7hRwHykkGiKzcBHMY=)
                          12: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: xw/wC0jsu2R8k8zmcKyNlJjSRDQPKyBlK3xPi9PifzU=)
                          13: oU210CVFzLuiQyHcf_YEp8pxk6M.roa (hash: HDzrvRtHa5TwJys+/lsPvAJ6xNgxTrYnp7lOvSNjpgo=)
                          14: oYXyy77jFFZFt2039BhjAw8G3L0.roa (hash: Cn7bnwSGye9UBPsmnOsVK1mE3z5k0eAVuqmgNwd2Ik4=)
                          15: pOcafHbNpE6IufWUjCXZs2WWYP4.roa (hash: lDDN8g4MAtlbqtSRtBrtfZVHqI5iUxRV0FsUbPWXCHU=)
                          16: s1pXuGWW8y0eMDg2PLAPlJOS44g.roa (hash: 65AbhQkFbG41XkwAPCWwnfEfJS7XNkEvl4ocnYbT4oA=)
                          17: tKQOFu4gDtiR9E_Fs5E_WSdxqYs.roa (hash: WdBgiiX6jEX+9nf9y/4sf97cV0r9Y0+TqLFDE6JwVjA=)
                          18: tZjmsStp0VcKPFFLWR9K3de-3PQ.roa (hash: OEQhtHW2/RhfDyyYWpUnjsi1Rb0UQYxvnkk2lrldW2w=)
                          19: yt4sMwydKd-q7CRhhaUoMNZQcYE.roa (hash: HAZLAfvTvsad0Yf/uypEMiAh8+oiLiVNNSNJqAQE/M4=)
                          20: zMHnxNkGZBmoNQowVHKQvmrR1So.roa (hash: 5IVAfxXNsWU6GCJqjsRbswDzTaG988IprK4skA5INuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:e3:9a:96:22:38:ff:36:ec:dd:54:39:80:65:7f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
        Validity
            Not Before: Apr 27 17:01:33 2026 GMT
            Not After : Apr 28 17:01:33 2026 GMT
        Subject: CN=8c3304376ee86be836ce85454adf66f27de078c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:74:e1:01:48:4f:95:4b:a0:68:85:fd:a3:65:
                    6c:0e:7d:88:3d:44:a1:b5:20:8a:1f:87:4e:97:ea:
                    69:7d:1a:83:20:71:5f:07:ea:28:90:b7:8b:f9:99:
                    76:87:e0:11:12:d5:a8:b2:c8:27:9f:fc:7b:b9:48:
                    49:14:ea:88:fb:ed:55:e6:8c:2b:0f:d0:be:cf:e6:
                    1f:15:0c:f4:9d:2f:41:b0:66:c2:a8:f0:8a:19:07:
                    05:27:01:62:b3:d8:40:d4:1b:81:7a:90:33:c1:d6:
                    c5:4d:50:b1:85:5a:55:f2:4b:5a:69:37:f5:dc:1e:
                    6a:cc:6b:74:11:29:4c:c9:bf:f9:c2:e6:50:99:31:
                    b2:e7:b6:5c:3f:43:c8:cf:66:9c:bb:3a:e0:01:0b:
                    c5:5e:10:1a:6c:d8:26:7b:ad:60:8a:17:93:1d:e1:
                    26:e3:e8:c2:c4:dc:32:76:9d:b2:d3:ea:09:0b:45:
                    50:e3:dd:4e:fd:d8:d0:6b:86:13:d9:07:59:e2:0b:
                    32:3e:e2:ce:e9:74:0e:fd:e7:d3:91:79:95:cb:6a:
                    c4:0d:28:1e:99:07:25:3c:ad:cc:70:fb:91:65:ff:
                    9f:db:7a:01:e4:64:cd:62:2e:d3:ef:75:21:32:61:
                    5e:2a:52:0f:58:bb:8a:14:6f:bb:44:d4:80:ab:2e:
                    a1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:33:04:37:6E:E8:6B:E8:36:CE:85:45:4A:DF:66:F2:7D:E0:78:C0
            X509v3 Authority Key Identifier:
                keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:23:40:cb:27:f7:fa:f9:3f:9a:92:52:72:11:97:6c:8c:33:
         16:3e:4b:e0:14:4f:3d:b5:ae:07:ff:5e:ee:7b:bc:5a:db:eb:
         7f:9c:9c:7b:05:30:af:98:58:fb:46:86:9a:2b:e1:7a:0c:40:
         87:c9:59:f3:34:2c:5f:7e:8a:60:eb:68:07:11:27:db:d4:bc:
         35:ce:2c:63:1f:0c:a9:57:38:47:65:3a:f8:e6:53:40:b4:0d:
         5e:f6:9d:8e:50:6f:d0:72:34:76:07:95:18:fa:e3:6a:e1:49:
         b6:6b:5b:cf:59:63:c9:81:c4:34:91:c6:9a:90:b3:99:db:56:
         6b:b9:c5:bc:2b:ee:b9:6b:41:48:50:6a:75:7b:fb:83:d9:22:
         84:26:f6:ce:41:5c:f3:32:60:fc:bc:ea:c2:26:88:07:0f:ff:
         e1:bc:6b:71:48:51:8d:a7:96:89:3d:ab:81:12:88:84:21:7d:
         48:a8:65:99:d7:b4:61:5c:27:50:24:16:7d:92:14:63:ec:af:
         16:3f:4c:80:c4:45:fb:9b:11:c0:ff:81:4a:5d:7f:69:c7:cd:
         28:27:52:b1:f8:a2:39:b4:66:5d:8d:81:28:f5:28:ec:6b:32:
         eb:24:c2:a5:ae:57:fb:05:cb:91:0f:cb:c2:17:b5:4c:05:08:
         91:52:cb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:47:34 2026 by rpki-client