Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
File:                     cWAmJ2eaSYC3DYreV48UGS-v65U.mft (raw, json)
Hash identifier:          OwStuHcqKCrqbmBvDisdyfx0W9dpYkq1KgM5GVB+tNE=
Subject key identifier:   08:C9:46:9C:05:8D:67:1D:AD:DC:0A:44:F1:34:49:D6:BF:D5:34:4C
Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Certificate issuer:       /CN=71602627679a4980b70d8ade578f14192fafeb95
Certificate serial:       019D99D0A6F587637B0092E52644088915BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 05:01:21 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:21 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:21 +0000
Files and hashes:         1: 1MNzVKC9htvcNDGJvI7xuyGACNU.roa (hash: 5RJpFE83PkUMhvbMNjs3KYN+COX8IjLxqtTzJmRO/6c=)
                          2: LO4YOUMQSFJh66TMDDMwnUwbqCo.roa (hash: dmbwDSHT1tN2CWO1W2a6nb7MTfEav+JXvlh9Nn0z+XQ=)
                          3: cWAmJ2eaSYC3DYreV48UGS-v65U.crl (hash: BjBvrYuDkl68FqdhzZ/ymwXl2QGHHEU3rPgVZvsJSwA=)
                          4: fnKKRoWAVJZeKiOvGQPgr3LCZIs.roa (hash: JHOAXHnAaTWFlsyraZAXCqYuOsM3xPfPaJdjfqdyKlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:a6:f5:87:63:7b:00:92:e5:26:44:08:89:15:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95
        Validity
            Not Before: Apr 17 05:01:21 2026 GMT
            Not After : Apr 18 05:01:21 2026 GMT
        Subject: CN=08c9469c058d671daddc0a44f13449d6bfd5344c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:08:53:01:e8:23:e6:14:09:35:11:dd:35:b6:
                    7e:43:8b:d7:11:c8:1b:9c:44:1b:c3:5e:f8:dc:8f:
                    92:7e:ca:24:5d:6d:8e:8e:ec:fa:53:26:4b:c9:bf:
                    4b:03:32:8a:34:24:03:b3:96:d0:a8:fa:69:3c:08:
                    a2:4b:06:f3:fd:9e:b0:37:4a:0c:ee:dc:21:0b:b8:
                    fe:4e:d2:13:cb:00:23:5a:ac:df:b8:cd:b1:51:40:
                    6c:14:7d:d0:38:39:9f:00:e3:c6:86:15:10:b1:e6:
                    9a:1e:e9:bd:7a:20:8e:f7:9e:71:1d:98:09:27:90:
                    36:96:46:d6:88:12:0b:06:77:3a:4b:88:a4:12:f1:
                    da:e8:91:a7:6a:da:af:65:7f:75:57:8e:ca:87:e2:
                    72:04:30:3f:4d:cd:6f:45:13:75:a0:5c:8d:3b:4d:
                    9f:b5:d6:ca:6d:24:b8:39:98:70:7a:a5:f9:0e:45:
                    53:9c:a5:1d:ef:82:c8:4c:ff:66:08:80:78:66:39:
                    a3:cc:c8:9b:21:34:b7:72:f3:70:b1:21:94:51:04:
                    03:0e:22:a8:e4:5c:d0:7a:c5:0a:6f:22:7f:98:88:
                    01:85:0e:ea:da:43:26:d5:fe:fd:8d:41:0e:d8:db:
                    75:9c:64:32:61:2f:79:8a:59:fd:9a:38:6e:4c:1e:
                    34:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C9:46:9C:05:8D:67:1D:AD:DC:0A:44:F1:34:49:D6:BF:D5:34:4C
            X509v3 Authority Key Identifier:
                keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:9c:af:8d:cd:50:14:97:66:75:52:2f:7d:84:74:3d:93:e4:
         40:94:43:8a:ba:7b:b7:f2:fa:90:b6:5d:87:e3:ab:9c:c2:b9:
         ea:3f:2c:a2:33:e0:0e:f6:11:51:a2:d1:a7:7f:7a:cc:92:fa:
         90:7c:d9:27:f2:02:b7:4d:e6:44:30:5c:ce:be:96:0f:0b:98:
         c6:c9:b0:49:4c:58:4d:65:fb:03:5c:d9:53:fe:1b:04:84:05:
         d1:db:33:0d:07:3d:b1:9c:25:1c:c9:3b:59:8e:ac:3d:bf:be:
         fa:98:24:f0:75:41:64:99:01:4e:cf:bb:b6:ed:21:78:df:95:
         cd:cc:96:e9:c9:75:e2:e1:e3:87:2a:cd:ae:d8:80:7c:6f:ff:
         55:37:f8:12:d0:dc:57:de:0f:fa:43:8c:b4:16:7b:b2:c1:09:
         48:1b:c0:88:98:af:b5:d0:18:36:97:61:5d:99:89:37:fa:71:
         00:32:98:ca:5f:33:ee:4d:56:b4:19:74:71:d2:47:96:1b:d1:
         9a:e9:db:e2:66:96:48:84:7d:14:aa:18:de:41:d5:71:7e:ea:
         d2:72:ba:91:7c:40:d9:8c:69:92:a6:29:74:fc:5a:8d:27:5b:
         0d:f9:93:4c:51:23:23:ba:1a:d8:f1:03:e0:5f:30:a3:27:e6:
         c8:e2:62:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:42:44 2026 by rpki-client