Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
File:                     0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft (raw, json)
Hash identifier:          vy/G8J/rDAYdqf7M66JT79JRdJLdbTY01YBv/ab6YIY=
Subject key identifier:   4D:48:A0:53:19:0C:70:A3:D7:C5:48:F9:11:71:A5:F5:00:08:7A:E9
Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
Certificate issuer:       /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Certificate serial:       019DA30AA57DCA852EF12AC1ACB7D3D302DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
Manifest number:          18C7
Signing time:             Sun 19 Apr 2026 00:01:17 +0000
Manifest this update:     Sun 19 Apr 2026 00:01:17 +0000
Manifest next update:     Mon 20 Apr 2026 00:01:17 +0000
Files and hashes:         1: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl (hash: SlWs+W5HZZeyss/GPPO7s+zwyRXY52m4DxUqhit5PQo=)
                          2: lNZ8b2GqipxFmFvx0Lw_q8EwfSo.roa (hash: qDLpSNqlibtH6zRBXzlD7tUyev4dQUA/1eIb4IG63oo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 00:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:0a:a5:7d:ca:85:2e:f1:2a:c1:ac:b7:d3:d3:02:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
        Validity
            Not Before: Apr 19 00:01:17 2026 GMT
            Not After : Apr 20 00:01:17 2026 GMT
        Subject: CN=4d48a053190c70a3d7c548f91171a5f500087ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0b:79:42:3d:81:66:e8:a2:e9:33:0d:f6:7b:
                    ba:0d:03:21:53:08:96:f8:6d:89:7f:61:54:7a:5c:
                    44:ea:81:10:58:d3:89:93:89:3e:26:88:0f:04:a1:
                    1b:97:3a:55:fd:35:57:b5:4e:d0:61:71:5e:16:a1:
                    40:68:21:19:54:f6:ba:02:f6:4b:ee:04:1e:49:b7:
                    af:48:91:55:6a:14:2c:4c:be:32:27:2d:fc:b9:56:
                    1d:d2:cd:f9:5c:c0:15:15:48:d9:07:94:8b:b9:b2:
                    3f:52:5a:e6:21:e2:2c:a7:d1:6b:72:5a:3a:1d:6f:
                    a2:64:f3:dd:7b:55:01:49:75:42:06:e1:33:a6:a6:
                    ed:a3:b1:88:40:6f:56:de:f8:42:de:30:43:41:40:
                    ae:da:0c:0c:88:ee:a2:a0:38:7c:bd:3b:38:27:e4:
                    78:7b:71:72:2a:9c:d3:9c:04:95:a6:4b:0f:4a:50:
                    56:37:94:5f:6f:2a:2b:70:5f:05:43:37:19:14:7a:
                    ec:cb:85:4f:b2:ea:21:8c:ff:12:b3:9b:0c:fb:48:
                    d3:de:00:c0:3f:eb:e1:46:26:45:6e:24:1a:21:60:
                    26:44:46:36:e9:fd:55:9e:c1:60:cd:7c:e8:b2:f0:
                    d1:cf:23:b0:96:63:93:fd:bc:9a:0f:d2:e4:c2:b1:
                    aa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:48:A0:53:19:0C:70:A3:D7:C5:48:F9:11:71:A5:F5:00:08:7A:E9
            X509v3 Authority Key Identifier:
                keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f0:e4:14:0d:d4:2c:3e:3b:55:3f:cf:22:9c:04:f8:b4:3a:
         d6:98:2c:fb:08:a5:11:e7:3c:7f:50:39:e7:42:ad:14:1f:4a:
         9a:6f:46:99:3d:41:4f:92:86:63:34:d1:a0:4d:ea:92:3f:03:
         b6:a9:65:5a:d9:de:ec:1c:d2:17:27:87:25:84:80:4b:1f:15:
         63:fb:68:7a:6c:52:6e:77:64:a6:30:3a:1f:0b:31:e5:73:dc:
         7f:67:f4:85:7c:4c:b2:61:86:dd:f1:b1:dd:5f:e3:fe:35:55:
         7d:14:45:5f:6d:4b:8a:3b:36:94:6c:ba:6f:9a:ca:66:be:b2:
         f0:ae:ab:36:d2:a2:e3:f1:ea:af:7c:5f:6b:7a:7c:3c:8a:6c:
         ce:af:b5:72:78:de:65:2a:1e:e6:fb:12:20:f6:95:de:49:4a:
         64:2b:8c:0a:f4:d8:69:1f:a8:28:41:10:66:7e:47:90:13:66:
         d7:f0:6e:e2:d7:e8:cc:3a:05:22:d9:f9:85:ac:dc:4b:0c:87:
         6c:de:6e:6a:e5:22:6c:3c:0f:69:f0:73:1f:cc:60:8d:00:5c:
         aa:d7:61:b0:d1:8f:fb:8e:0f:84:c9:35:14:75:78:40:70:51:
         aa:c5:95:ba:80:f6:0a:a3:d6:2b:21:0a:d1:60:bb:14:f6:24:
         9e:40:ef:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:07:22 2026 by rpki-client