Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
File:                     e4jUpKsYpZtmTauv2ziA3DWyK5E.mft (raw, json)
Hash identifier:          2U62LE8M+huSyC6ArcNrWWk/rRYwKrKWKCYCcFpF0Eg=
Subject key identifier:   C6:6B:81:C5:80:F1:2B:20:F2:FC:4D:10:58:FD:BF:03:ED:F1:F9:4E
Authority key identifier: 7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
Certificate issuer:       /CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Certificate serial:       019D9E1BAB78F5B7EEBA92912B7245C9B5C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
Manifest number:          18CA
Signing time:             Sat 18 Apr 2026 01:01:46 +0000
Manifest this update:     Sat 18 Apr 2026 01:01:46 +0000
Manifest next update:     Sun 19 Apr 2026 01:01:46 +0000
Files and hashes:         1: 4SDEWo-xQsKLEV5N5c74kcSp4oo.roa (hash: Mn5HgxK6d1bhThHGyve20eCsHoaIqihBEBC3lrXSKiQ=)
                          2: 9XmTiY_H8jaK8nxNmw6DCXZkrL8.roa (hash: qzv4sP0iawufJ5iQxd2v/qGGI7FMui/kqPe0/MuBNTw=)
                          3: YgTu92EMlSHH6hAx-wKAfH0f5HA.roa (hash: w4NEQ8Pa4tghHvqnWHIsU9oi0/GjMWGF/km3INOctDg=)
                          4: e4jUpKsYpZtmTauv2ziA3DWyK5E.crl (hash: sM0yu6CTXqkc/WyQ05lJPbECow56LvYaWK7OjV5Wlxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9e:1b:ab:78:f5:b7:ee:ba:92:91:2b:72:45:c9:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
        Validity
            Not Before: Apr 18 01:01:46 2026 GMT
            Not After : Apr 19 01:01:46 2026 GMT
        Subject: CN=c66b81c580f12b20f2fc4d1058fdbf03edf1f94e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b0:d7:c8:8b:40:f5:1d:19:55:66:0f:66:d5:
                    ca:60:b6:5e:a1:d1:8c:77:de:a6:87:22:a5:39:4c:
                    80:39:d8:be:7f:e3:e4:39:50:8c:2d:af:67:00:69:
                    92:1c:b5:e0:b5:86:33:78:10:8f:3c:40:5e:67:c1:
                    e2:09:1c:c0:a5:d9:ca:84:c0:52:27:15:a6:3b:7e:
                    aa:5e:13:42:9c:26:9d:53:05:41:dd:8d:3d:93:62:
                    1e:4c:79:45:b6:1d:67:2f:15:e4:4f:1b:d9:46:dd:
                    74:99:63:81:43:8d:be:63:cf:92:d4:0e:cf:9b:b0:
                    89:e7:ea:a8:20:15:b6:43:ac:db:b0:37:97:fb:53:
                    90:91:fd:64:43:71:25:85:d6:53:7d:f0:2c:64:41:
                    39:78:cf:3e:67:d4:51:17:e2:b2:00:13:ba:20:f7:
                    10:5b:f6:42:d6:d2:35:93:35:6e:86:04:aa:b4:bc:
                    fb:bb:10:71:41:90:64:fe:78:29:b3:75:8d:10:a8:
                    46:79:f6:cb:b9:58:72:40:0e:ac:65:16:0e:61:8a:
                    19:be:c1:d0:ca:c2:00:68:f9:42:56:36:9e:ef:2b:
                    b3:f5:c0:d9:be:f8:21:cd:7c:c5:f1:a7:2f:77:80:
                    c5:23:47:36:2f:66:07:d7:54:a4:8c:a3:bd:54:56:
                    d4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6B:81:C5:80:F1:2B:20:F2:FC:4D:10:58:FD:BF:03:ED:F1:F9:4E
            X509v3 Authority Key Identifier:
                keyid:7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:53:50:cc:59:62:79:79:c2:d3:9c:0d:44:12:b0:b6:17:88:
         43:6a:fc:f8:97:31:1e:d1:37:6e:ea:f1:8c:b6:30:56:ce:1d:
         e5:e7:db:9b:82:0a:c7:b1:83:9c:aa:8a:0d:b9:e5:57:c4:3a:
         7a:6b:dd:93:02:70:0e:b8:2f:a1:fa:cc:9d:f0:45:31:ed:f2:
         fc:c8:96:aa:bb:85:dd:1b:64:b3:6e:6d:22:76:48:ad:67:00:
         92:66:09:a9:24:00:ef:c9:bb:12:e3:43:81:4a:0d:54:ce:7f:
         94:c1:54:d7:d6:31:08:30:6a:76:e0:f9:bc:26:46:32:07:0a:
         5b:fd:c6:12:f6:6c:61:06:a8:67:cc:28:a7:fb:f8:31:84:72:
         6f:38:44:b0:f5:b0:cc:97:d1:b5:80:55:39:2b:a7:39:41:a9:
         87:9b:1e:59:84:4a:ba:f0:0d:2f:29:9f:28:a5:53:16:22:c7:
         50:49:e6:2e:ec:91:c2:53:49:63:32:fb:b8:fc:7e:22:d8:ad:
         f5:46:fc:43:02:2e:11:42:91:e9:c7:8a:8c:be:37:62:da:2f:
         e6:a8:27:0e:db:01:08:d0:b0:11:af:ce:c3:61:2b:2e:71:90:
         3f:c0:8b:3e:0c:25:94:37:58:1a:af:c9:56:9b:00:24:9f:e8:
         b4:05:b9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:02:17 2026 by rpki-client