Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
File:                     cBxcPyilwHENvkgp0hbInpQu8Os.mft (raw, json)
Hash identifier:          +hC8jwrYDUVsl7+bCUxbh1IpOegTBGVtw1qTAaM3nRY=
Subject key identifier:   77:6D:FC:A1:67:C5:6A:0B:20:C9:5E:E4:EE:9B:C1:D0:07:7F:6E:F5
Authority key identifier: 70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
Certificate issuer:       /CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Certificate serial:       019D97E22175B14BAC2BCB8FF98885E63640
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
Manifest number:          18C4
Signing time:             Thu 16 Apr 2026 20:01:12 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:12 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:12 +0000
Files and hashes:         1: cBxcPyilwHENvkgp0hbInpQu8Os.crl (hash: L/eC5aocVpQRwjLvwaSaLDlJezWL8ansp8pUNzdH7DA=)
                          2: eq_DMYPwsIw93qds04ZGjJJH5B4.roa (hash: AYOWm+f8xS5MEpFp7ruiXJOd+PYdgBsKeFC1t5gELcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e2:21:75:b1:4b:ac:2b:cb:8f:f9:88:85:e6:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
        Validity
            Not Before: Apr 16 20:01:12 2026 GMT
            Not After : Apr 17 20:01:12 2026 GMT
        Subject: CN=776dfca167c56a0b20c95ee4ee9bc1d0077f6ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7a:38:1b:ad:97:24:f8:5d:a2:b5:8f:56:70:
                    3a:e3:3e:c7:47:d5:9e:7a:b1:6e:2d:bb:5a:60:e5:
                    41:2d:06:ff:13:04:24:67:de:5f:2b:ab:1b:ee:99:
                    32:29:f8:77:1d:bb:95:3c:0f:6e:fd:ae:2e:72:3c:
                    96:c3:61:7e:d1:a5:e2:4e:a0:50:3b:01:e6:3c:16:
                    af:49:71:0a:f2:ed:8e:77:55:be:83:08:55:00:d0:
                    39:af:70:37:35:65:d2:94:e1:fd:f0:1e:32:58:60:
                    4c:99:ab:6c:fb:21:ac:9a:24:d7:8a:75:89:35:10:
                    51:bb:bc:9f:03:21:d7:6a:20:4c:79:33:26:75:3c:
                    97:09:7c:74:04:cc:f0:b7:55:df:a2:91:fe:40:45:
                    49:ec:31:b0:1f:20:77:da:57:ae:f2:ec:d1:0b:76:
                    0b:0d:5d:71:3b:6c:b1:38:2e:0a:59:3c:0b:99:5f:
                    36:9e:44:29:7e:d3:80:6f:2d:c2:6c:ff:fe:2a:8c:
                    a1:62:1a:de:05:48:93:6e:10:24:a0:fd:19:5f:95:
                    29:37:71:60:3b:d9:83:91:92:16:7f:6e:c7:9a:94:
                    0d:e8:ec:4a:a6:68:2f:15:5e:95:c2:57:45:4f:52:
                    0f:c7:5d:e4:de:c1:67:77:f0:d1:cb:be:ca:4c:3b:
                    ff:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6D:FC:A1:67:C5:6A:0B:20:C9:5E:E4:EE:9B:C1:D0:07:7F:6E:F5
            X509v3 Authority Key Identifier:
                keyid:70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d5:22:f3:e4:f1:90:76:d1:6f:20:3b:63:59:b4:5a:a8:c3:
         41:fe:c2:2a:44:2e:2f:3f:da:40:15:ec:35:7b:a5:3c:69:13:
         d5:29:51:39:f9:40:46:c4:6f:0a:d3:b1:70:4d:1b:d4:35:ce:
         7f:71:cf:13:9c:b2:57:cf:2f:a8:ff:a7:d3:6b:de:9b:99:f1:
         32:20:93:0e:54:f3:84:29:b1:c1:72:5c:af:0c:0c:67:a9:ee:
         60:46:ac:f5:96:f2:e6:82:5a:9b:4d:e1:a8:fd:68:ff:68:f9:
         40:dd:35:3a:a9:db:07:04:3a:a6:50:11:22:84:25:a7:07:5c:
         1c:62:dd:2a:c6:7f:cc:f3:e8:bd:b9:1f:0b:40:59:1c:a7:de:
         3d:0c:5d:b3:b3:9c:d4:96:5b:3f:24:f2:a4:57:de:4d:40:d4:
         21:6f:a0:41:e2:cb:29:e0:4f:3d:0e:24:b4:96:9c:b6:3c:59:
         46:69:8b:1f:d0:62:26:e8:f3:54:19:78:93:0b:1a:8e:b6:26:
         55:f3:c6:83:1c:50:4a:73:28:f6:8e:b1:23:ca:1c:96:84:a2:
         64:26:c5:96:86:85:4e:c0:8c:f3:b0:fd:41:e1:12:f6:4e:0e:
         db:69:b4:a5:d2:5a:02:fe:a9:63:f6:90:18:f5:2f:c1:71:b0:
         5d:70:fe:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:38 2026 by rpki-client