Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
File:                     g5qaG34R_ed-Th9X_xGGTO4h8WU.mft (raw, json)
Hash identifier:          eRXZD+5PlDKF5/Wzd+/9FM/OyC7MHv/AZUXs31ieWhM=
Subject key identifier:   73:47:05:78:4E:3F:33:98:FC:00:09:B2:63:5A:BB:BC:85:F9:F0:0B
Authority key identifier: 83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
Certificate issuer:       /CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
Certificate serial:       019D97AAEC7D7FDAFA4B001E76C5DC539DA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
Manifest number:          18C3
Signing time:             Thu 16 Apr 2026 19:00:54 +0000
Manifest this update:     Thu 16 Apr 2026 19:00:54 +0000
Manifest next update:     Fri 17 Apr 2026 19:00:54 +0000
Files and hashes:         1: g5qaG34R_ed-Th9X_xGGTO4h8WU.crl (hash: XUfVw+7fZl1Oi8q3gSJN4KQS/CHLdwkF3ch8EYGjEwM=)
                          2: jpn75Yfp2rf8iixY-pf9HBQZtFQ.roa (hash: 2FkfOX5PwPIaVt0unZh3WoxL9QILOq0nkQ+r0zmQiMM=)
                          3: u0rrwecw3ubOxlMWibDzWHGFQeE.roa (hash: PPKjE8PKmukpw4GpWagL0x0PZuUxYtWJ2kQC/cAQIfc=)
                          4: wWxKrvdoWqK7y69DimZbYdEbApE.roa (hash: yfTG7KBZH/Uzc3GBeio5iSYvohaMSnZRgVyybf7lC/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:aa:ec:7d:7f:da:fa:4b:00:1e:76:c5:dc:53:9d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
        Validity
            Not Before: Apr 16 19:00:54 2026 GMT
            Not After : Apr 17 19:00:54 2026 GMT
        Subject: CN=734705784e3f3398fc0009b2635abbbc85f9f00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d1:35:09:b9:b5:83:c8:91:81:b6:c6:27:87:
                    ba:0d:8f:6c:a2:26:30:e4:c4:cb:a7:54:e0:ab:3a:
                    ea:df:0e:45:cc:f4:93:72:b0:b2:dd:49:e0:34:e8:
                    a6:d5:f2:0f:d2:39:74:3d:9c:af:15:82:54:31:51:
                    71:94:2c:21:d8:04:eb:4e:1f:84:35:4b:bd:71:d3:
                    19:20:9d:65:bd:8b:1b:5a:4b:15:62:c2:21:cb:b0:
                    10:5e:ed:63:f2:01:10:d0:26:66:61:23:ec:2d:f6:
                    64:33:c1:71:e6:c4:af:68:25:c7:cc:f0:77:c1:15:
                    2e:92:82:6e:ad:c7:0a:cc:04:4b:15:39:a9:94:59:
                    36:c1:c6:67:93:9b:2d:13:52:13:65:08:e0:80:cd:
                    83:bf:15:7e:fc:68:17:05:9c:f8:1e:6b:11:95:7b:
                    47:3d:56:db:de:56:4e:5e:6a:39:15:51:6a:e9:b3:
                    13:e1:03:ec:55:8c:95:88:97:8d:f4:50:72:be:96:
                    3e:d9:6c:e1:02:20:62:af:c1:9d:4b:f4:28:6f:c3:
                    20:96:38:fa:52:5f:b1:21:b9:c8:62:84:ac:09:d9:
                    09:65:2c:22:f4:e7:71:f1:26:1b:f6:3b:2e:98:6c:
                    b3:d0:54:27:f9:98:71:c8:fe:ab:85:39:2c:29:a3:
                    ed:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:47:05:78:4E:3F:33:98:FC:00:09:B2:63:5A:BB:BC:85:F9:F0:0B
            X509v3 Authority Key Identifier:
                keyid:83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:fa:fc:e6:c3:56:27:3c:e1:30:41:25:de:d4:a7:47:77:77:
         1d:66:20:f1:f9:a6:e8:9f:be:ef:63:42:a2:bd:af:9a:2a:72:
         f3:36:bf:cd:5e:dc:22:4d:45:e4:0c:15:da:34:eb:6f:2e:7f:
         3f:ae:11:5b:f5:2a:18:d9:6e:41:4b:11:3e:0d:59:66:00:a2:
         24:0c:32:e8:ee:f5:ab:a9:51:d0:0f:4d:1f:b6:5f:ca:1b:98:
         7c:54:ac:87:3f:e6:1c:52:48:33:10:7d:18:fa:1c:ef:96:b6:
         b1:eb:c3:62:44:9d:d0:30:fa:f5:60:5a:24:6b:55:86:16:48:
         49:a8:15:fb:3c:0a:30:06:73:51:c7:21:6d:80:86:6a:5c:b6:
         b6:32:d0:03:27:8c:cf:b5:5d:50:75:82:c5:dd:55:bd:e3:cb:
         e7:93:86:b0:eb:df:4b:6c:2c:a0:82:1c:02:9f:2e:bf:d4:09:
         00:b4:a4:ca:9e:0e:8f:24:fd:35:b2:65:e8:06:2f:b6:1e:7b:
         3f:db:86:31:02:2b:7f:40:3f:8f:e4:fc:3a:65:84:6d:1a:12:
         13:ab:a8:0d:f2:ec:56:23:ed:32:65:52:24:73:69:35:67:65:
         55:7b:e0:1c:9a:39:30:19:22:2d:e4:7f:9f:a2:11:2f:e3:51:
         48:06:7e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:34 2026 by rpki-client