Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
File:                     GNtfz9wY74Qh4mUfGybBZaAdU_E.mft (raw, json)
Hash identifier:          0qricd75lXvUoE5b/hpXHg3GVaZvrsBR1c1afRyfuAc=
Subject key identifier:   ED:09:A7:6F:AC:E1:23:86:7C:BC:D9:AA:68:2D:71:67:99:4B:39:96
Authority key identifier: 18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1
Certificate issuer:       /CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
Certificate serial:       019D9A06BE04871548671D6EBB7260C52F43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 06:00:26 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:26 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:26 +0000
Files and hashes:         1: GNtfz9wY74Qh4mUfGybBZaAdU_E.crl (hash: zGvlvetRZ+NShQ1HKMAK9bq+5o5E9dYme4h8OHqva5o=)
                          2: HyBfdHBu-E_xnT2LV4MR8Uj2x2g.roa (hash: ECkHLWD5o4a328xINTv5HTRD82ypaSriGLU8WBsJUfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:be:04:87:15:48:67:1d:6e:bb:72:60:c5:2f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
        Validity
            Not Before: Apr 17 06:00:26 2026 GMT
            Not After : Apr 18 06:00:26 2026 GMT
        Subject: CN=ed09a76face123867cbcd9aa682d7167994b3996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b8:e2:c9:86:d7:09:96:ba:d2:58:07:fa:18:
                    ba:2a:17:0f:8c:fd:c6:15:af:81:50:02:dc:91:1c:
                    3d:49:b7:5c:30:06:8e:60:d2:a3:0a:5a:9b:0d:95:
                    54:cd:46:7f:09:f2:60:0e:32:c4:81:80:78:49:d2:
                    bf:ae:ad:3b:37:ac:b1:e7:7d:17:c3:fc:e8:b9:24:
                    d2:dd:41:01:3c:4e:89:93:6d:35:1d:7f:e3:ab:8f:
                    99:19:ec:57:b1:7a:b8:69:5b:b2:8b:df:09:c5:48:
                    62:8b:98:83:71:77:b3:c7:13:8b:10:04:c5:0a:3c:
                    f9:f5:4c:2d:1c:2d:85:cf:bc:61:ff:b0:e3:e4:f9:
                    6e:8a:ea:43:55:d8:bf:41:fe:7e:a3:dc:c2:d5:36:
                    6f:ba:c7:00:2c:af:ff:50:1c:d7:62:8f:0a:f6:c5:
                    47:28:50:f6:84:08:25:20:95:ca:46:f0:3b:e7:32:
                    22:71:4b:25:25:49:b4:2d:3c:a9:ae:b0:fb:9f:68:
                    df:92:0f:59:03:6a:6c:37:3c:8d:ee:2a:5a:01:52:
                    8f:a9:68:5f:54:d9:b0:8e:bc:6c:f7:5b:d3:19:90:
                    5e:b1:55:89:18:fa:37:72:0c:d2:b9:4f:f1:a6:18:
                    ef:c0:3e:70:69:5c:91:21:9b:c7:3a:58:f0:20:ab:
                    4c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:09:A7:6F:AC:E1:23:86:7C:BC:D9:AA:68:2D:71:67:99:4B:39:96
            X509v3 Authority Key Identifier:
                keyid:18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:01:72:f5:82:c2:eb:1d:27:e3:65:26:e0:f1:7f:d6:80:e4:
         1d:e0:30:05:dd:64:18:3f:cd:92:d7:81:4d:20:fa:dd:54:59:
         08:a2:dd:66:4a:9e:7b:34:6b:1d:1a:a9:ce:9a:97:b0:25:21:
         33:a6:d7:f1:9e:6e:97:eb:3d:44:ca:4a:7b:ee:8f:ba:65:ab:
         e5:73:1e:94:27:50:c3:8a:2e:9c:32:a8:02:94:da:f1:c8:19:
         e5:a1:8c:85:36:44:7f:97:4b:46:73:85:8e:de:0e:24:ff:9d:
         46:8c:ed:89:78:eb:0b:41:ce:a9:b1:e1:ba:55:4f:87:17:1e:
         ce:95:67:d1:88:f8:65:a4:3b:aa:b2:53:06:af:2a:64:94:10:
         a7:f0:ca:2f:84:a9:25:17:54:ed:4b:1b:26:d8:fb:4e:a6:a2:
         f9:5e:84:a2:09:b9:ab:a9:81:86:d3:fc:a2:cc:b5:d6:33:57:
         31:db:a7:ca:a4:67:40:3f:b7:46:e3:29:12:df:a9:71:99:43:
         61:8d:1a:39:04:44:14:72:2a:b1:83:df:1c:d0:3d:05:18:77:
         f4:5f:49:e0:35:aa:72:6e:ad:37:f2:8f:b2:76:dc:46:1f:ff:
         0f:cc:8b:c3:75:25:d9:c9:63:04:2f:c0:85:2b:db:79:0b:1b:
         61:49:13:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:47 2026 by rpki-client