Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
File:                     PseNgibLWq_xXGdSWvK4q8t7X5I.mft (raw, json)
Hash identifier:          07eB4HZOVOwkuO3ciz1TH/gwXuuMoHU1+KYi0S41wgY=
Subject key identifier:   A8:EA:FD:C7:01:AE:30:3A:D0:78:A6:26:2B:6C:DE:D5:4E:DA:21:B5
Authority key identifier: 3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
Certificate issuer:       /CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Certificate serial:       019D99D087D0F95646738C80D5AD33F07E36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 05:01:13 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:13 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:13 +0000
Files and hashes:         1: PseNgibLWq_xXGdSWvK4q8t7X5I.crl (hash: jehlBgchAgHl9mUobzL0iO38Yrby3kCK6/qbrDzgoD0=)
                          2: qKVtlv3W7vjWS1xd7JwxDC1EnCE.roa (hash: pQJ4/lFMndf01cjoPvkJY3R02om+5915006Zk5RIRaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:87:d0:f9:56:46:73:8c:80:d5:ad:33:f0:7e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
        Validity
            Not Before: Apr 17 05:01:13 2026 GMT
            Not After : Apr 18 05:01:13 2026 GMT
        Subject: CN=a8eafdc701ae303ad078a6262b6cded54eda21b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:56:4f:24:0f:77:90:7b:26:61:b6:3e:4a:3f:
                    73:39:3a:51:0f:f0:b7:01:71:d3:a5:ea:82:4f:a7:
                    c8:3e:08:aa:30:10:56:b1:1a:32:80:51:d5:a9:64:
                    a8:10:49:7f:0b:2a:7a:9a:62:6a:e0:6b:21:79:29:
                    29:14:55:8d:87:b2:83:5d:09:15:af:eb:7d:f3:00:
                    db:31:9d:97:8f:a7:08:b0:eb:df:59:31:5f:34:78:
                    49:16:a6:c7:3f:49:87:f7:59:07:41:5e:8f:77:7b:
                    e1:a8:97:a1:94:ad:8e:4d:b9:ae:9d:e4:7e:6d:04:
                    e1:36:a3:5e:e8:f2:cd:79:40:b7:ae:08:19:b7:72:
                    a8:f0:d3:1c:0a:81:69:64:44:39:a8:ea:39:43:82:
                    38:58:42:11:60:b3:b9:8c:0e:f4:04:fe:bf:60:58:
                    d2:83:da:2d:b8:2b:06:54:38:94:66:fc:ee:e8:25:
                    22:d6:21:07:83:f9:05:a6:f6:8b:21:e2:b4:51:7b:
                    80:2f:ff:c4:73:8b:7a:b8:f8:6f:3c:6a:1b:7d:fc:
                    7b:01:86:8b:44:21:aa:e2:6d:a6:17:07:8c:fb:16:
                    eb:c2:f0:5d:02:d4:c3:27:6e:71:3c:00:cc:53:0f:
                    9d:56:1e:e7:d3:68:c1:57:cf:e5:a3:3d:34:36:49:
                    dd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EA:FD:C7:01:AE:30:3A:D0:78:A6:26:2B:6C:DE:D5:4E:DA:21:B5
            X509v3 Authority Key Identifier:
                keyid:3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:8e:25:b8:97:14:59:0c:95:92:a9:dd:c5:90:8f:95:8a:e3:
         b9:8c:f0:ff:0f:cf:1b:46:d3:bd:8a:99:68:0f:29:b0:65:51:
         e4:5a:ea:76:e9:ad:b2:53:aa:cf:ab:ac:ff:fb:73:6d:85:18:
         45:d4:9b:ed:d7:51:37:c9:c9:fa:3a:9b:2b:96:93:ae:ce:df:
         da:29:4d:cd:ff:9c:bb:28:3e:7e:90:c9:f0:7f:31:5a:7f:f1:
         43:79:6e:44:e0:38:d7:1b:ff:d5:04:8e:7d:b4:a5:9d:ce:11:
         d4:8d:47:9c:a8:f2:55:d8:76:bf:dc:f1:67:5f:85:e7:b1:3e:
         e5:e0:fa:38:9f:7d:ec:47:59:34:79:2d:0b:21:6b:d5:43:c5:
         69:d4:83:ec:b2:3c:cc:03:0d:a3:50:f5:8a:7d:3c:47:4d:b1:
         31:36:44:ad:cd:1b:ca:9a:5b:c7:53:36:58:63:75:ea:68:72:
         37:a3:78:fa:b7:63:cc:ed:f8:00:3a:cc:db:dc:ce:d0:18:51:
         ee:ce:ec:95:e9:19:e8:65:73:ba:0a:74:85:1f:5b:74:7b:1b:
         13:05:23:d3:2a:ff:73:11:28:58:5d:f4:4c:14:e3:bc:c3:1e:
         fb:c9:8e:78:90:ae:fc:95:cc:53:01:49:9c:5c:25:f5:2c:89:
         83:0d:f2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:07:01 2026 by rpki-client