Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
File:                     PrRw_U1nQhL_yCqZNvP-JUvszmY.mft (raw, json)
Hash identifier:          NWzerAjD0ZRRJW5w9b3zIknjX9aHdXSoSQVsK+QQCD4=
Subject key identifier:   23:EB:CA:7B:AE:35:BC:E4:0A:CE:93:DB:DA:5D:F4:B5:48:1A:92:A3
Authority key identifier: 3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
Certificate issuer:       /CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Certificate serial:       019D9C2D5F0E845F8AE6DF914A937CE8C5A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 16:01:52 +0000
Manifest this update:     Fri 17 Apr 2026 16:01:52 +0000
Manifest next update:     Sat 18 Apr 2026 16:01:52 +0000
Files and hashes:         1: LBDdRDDjw294mcZ0nbMxr8CzfS4.roa (hash: PPYwxRl5Le8Vm1g+lp2aZkNuPa03sEDkYEJw4YbvaRI=)
                          2: PrRw_U1nQhL_yCqZNvP-JUvszmY.crl (hash: Vgln2+wEI5wPYoQKz2Pnie9Ul+400qPX5KxG82I9kSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2d:5f:0e:84:5f:8a:e6:df:91:4a:93:7c:e8:c5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb470fd4d674212ffc82a9936f3fe254becce66
        Validity
            Not Before: Apr 17 16:01:52 2026 GMT
            Not After : Apr 18 16:01:52 2026 GMT
        Subject: CN=23ebca7bae35bce40ace93dbda5df4b5481a92a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4c:27:43:a4:2d:4c:c5:f3:ce:b7:66:e1:f0:
                    32:90:6a:94:c4:6c:b7:26:ed:b9:7f:a5:f6:99:8c:
                    38:24:e1:05:26:44:3c:f8:b3:08:dc:f2:31:7c:2c:
                    5e:62:d3:9a:8b:b4:2b:5d:69:e1:05:e7:8f:f4:8a:
                    a1:68:87:b3:03:c8:e6:8d:b5:cd:16:d5:ea:be:b6:
                    68:64:d4:b6:6a:b5:d3:ac:6f:93:bd:28:c8:d7:e0:
                    df:32:93:d7:7a:d4:6f:bb:de:5e:d4:5a:4c:6c:d4:
                    6f:4a:33:32:36:7c:01:9e:1a:81:89:ee:03:c3:bb:
                    8e:41:39:4a:5b:74:6a:16:e8:96:77:70:af:82:fe:
                    66:df:ae:91:47:59:36:22:b0:08:50:40:c1:bd:31:
                    cd:55:9a:d3:7a:50:d3:8b:b7:69:d8:a0:95:bf:df:
                    42:e9:f2:e3:2e:d9:c8:85:43:a5:1c:84:3d:3e:e7:
                    25:19:42:a0:f2:db:3c:4b:99:c4:ac:e9:10:e3:c0:
                    ed:da:d5:45:54:65:97:43:fa:aa:dc:1a:e7:e4:dc:
                    9e:1d:1c:d3:6f:02:09:4e:06:ff:b3:40:66:85:e6:
                    a7:dd:19:a2:35:23:3b:5b:24:eb:81:74:19:c5:8c:
                    87:9a:19:c2:eb:f9:c7:35:ef:21:85:b4:69:d9:cf:
                    72:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EB:CA:7B:AE:35:BC:E4:0A:CE:93:DB:DA:5D:F4:B5:48:1A:92:A3
            X509v3 Authority Key Identifier:
                keyid:3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:07:b1:0c:2d:c4:6c:4d:8b:3c:a7:86:2f:bc:8d:9f:4a:c9:
         67:58:c1:cc:b5:60:d6:db:2e:1c:f5:52:3e:cd:bd:b1:d5:1a:
         5c:92:ac:33:61:c9:4c:08:9c:4a:b6:66:78:c2:e3:9a:94:b8:
         fa:ed:29:a6:9d:3f:75:47:db:e2:14:0e:dc:ad:8b:4e:80:fb:
         a3:b6:85:bb:43:75:7a:9b:e0:81:56:d4:ec:ae:e0:60:ff:7e:
         36:9f:f9:c0:f9:00:bd:1d:b7:5e:6c:ec:f5:19:4c:60:fc:52:
         a0:f6:9c:80:77:3f:ab:d1:3d:c2:5e:0e:6d:e9:db:4e:92:e7:
         04:6e:01:72:60:58:52:d8:60:1f:d0:b5:c3:37:ca:64:3b:13:
         8c:48:9c:03:bb:04:9e:71:e2:5f:ef:a0:9b:ef:5f:80:23:0d:
         23:eb:cd:10:45:e9:46:8f:a4:01:94:79:5c:e6:cd:18:df:6d:
         15:a7:40:fa:1e:bf:00:57:28:e2:b6:3a:a2:8f:0a:13:d1:00:
         1c:83:49:fe:40:2c:d2:23:59:f4:e2:47:8c:77:84:74:dd:c7:
         a2:27:19:83:e1:c9:93:94:c1:bd:89:fc:ad:20:48:70:83:09:
         2c:8f:5e:80:e4:90:8f:ff:b7:49:56:9f:fa:38:50:aa:d6:d8:
         71:f9:28:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:33:55 2026 by rpki-client