Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
File:                     GOTxZiOGegux8zeFDqyr_4fEfhA.mft (raw, json)
Hash identifier:          OOfp7ZpVShBEdw8hkRt/8K2BFd6v/0NUj3fNtW+KI9w=
Subject key identifier:   C2:3A:6D:00:35:22:69:5E:72:4B:D8:00:4E:44:5B:57:14:57:3A:1C
Authority key identifier: 18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10
Certificate issuer:       /CN=18e4f16623867a0bb1f337850eacabff87c47e10
Certificate serial:       019DA3E6C9302D36DA980FDFE4464CFE2922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
Manifest number:          18C4
Signing time:             Sun 19 Apr 2026 04:01:44 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:44 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:44 +0000
Files and hashes:         1: GOTxZiOGegux8zeFDqyr_4fEfhA.crl (hash: IZkY0pRq+nrh4PAFLneYMbu2DHAOIueBOkT/RgP6N8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:c9:30:2d:36:da:98:0f:df:e4:46:4c:fe:29:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e4f16623867a0bb1f337850eacabff87c47e10
        Validity
            Not Before: Apr 19 04:01:44 2026 GMT
            Not After : Apr 20 04:01:44 2026 GMT
        Subject: CN=c23a6d003522695e724bd8004e445b5714573a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8c:66:5e:55:ce:19:82:93:08:b6:04:f3:3d:
                    bc:9b:df:15:b8:6a:58:1d:d5:39:78:c9:a2:a0:df:
                    62:67:e7:9f:64:45:3b:29:a8:b2:93:9d:c9:50:36:
                    93:f9:c9:1d:c8:c3:04:7c:47:6f:8a:60:a3:e4:b0:
                    d0:30:ef:69:a2:be:53:00:31:de:b9:fd:35:37:ce:
                    ad:db:cc:71:22:f9:62:34:ca:99:85:7f:8a:ef:cf:
                    8b:04:5a:16:f4:f5:39:06:31:ac:30:f7:26:f2:13:
                    58:b2:1f:67:bc:d6:57:9a:1a:24:05:59:8a:43:02:
                    2f:b8:25:f0:25:5f:c9:17:06:6b:e3:81:90:20:e6:
                    1a:60:f1:bf:9c:a8:d6:89:4b:ec:48:6d:28:7d:2e:
                    c9:4a:48:21:4a:82:43:5f:61:3b:d9:27:7d:4a:2b:
                    ba:fb:b8:26:7f:0d:0f:23:53:e1:ca:33:23:fc:ca:
                    be:5a:78:d3:6a:1c:47:a3:7c:5c:18:cc:a6:9d:36:
                    2e:46:8b:7a:8c:93:6c:5c:3d:40:68:a0:4c:15:dd:
                    33:56:9e:45:39:d7:c2:66:91:28:fc:c1:04:d0:4a:
                    df:55:22:24:ef:a8:4b:8c:b8:25:b7:f7:ff:c3:f7:
                    c4:cb:c6:bc:ca:8a:89:8b:a3:c3:fe:07:b0:87:86:
                    18:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3A:6D:00:35:22:69:5E:72:4B:D8:00:4E:44:5B:57:14:57:3A:1C
            X509v3 Authority Key Identifier:
                keyid:18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:8f:c4:2d:d9:0b:8b:27:50:37:8e:90:fb:72:7e:91:1f:2a:
         39:db:17:99:fe:c9:14:9f:e4:16:fd:f1:b2:ae:d1:ff:8f:e3:
         1e:99:3c:73:4e:94:fd:18:f2:c4:4b:46:8c:c0:d2:1a:95:fe:
         be:d3:8b:c9:aa:a5:87:92:82:8d:90:17:f2:06:74:73:91:a7:
         38:d5:5b:13:5d:3c:84:de:95:e2:e9:42:2b:ce:d4:90:f0:e1:
         7a:62:49:c8:5c:38:e4:b3:90:5f:a3:ed:71:40:61:9b:56:91:
         6f:d9:b9:9a:f1:24:f8:bb:6d:9d:c5:2e:17:09:43:6c:3d:a0:
         cc:9b:8c:96:4d:e4:fb:c7:e0:7f:49:7d:53:5e:3c:3d:bf:2e:
         a4:a1:dc:81:39:f5:ab:83:ac:65:5b:70:a2:3d:46:3b:04:89:
         84:bd:60:91:e2:42:ba:b4:a1:95:02:03:75:8d:16:9f:74:87:
         aa:66:1b:01:aa:f5:4a:ba:0d:1f:ab:14:1e:54:ee:75:3c:6b:
         53:be:7d:6b:15:63:c2:cd:c5:91:27:22:fe:01:13:ec:e6:d1:
         7f:01:79:08:0f:e6:bf:09:64:8a:30:34:91:05:92:a8:78:05:
         fc:9b:ea:b7:b3:7c:cc:63:8d:c5:bc:29:06:83:2d:41:34:56:
         cd:c1:94:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:34 2026 by rpki-client