Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
File:                     xn6d6Ogmze4OZfYiWDQ0uBzze60.mft (raw, json)
Hash identifier:          GnfidJWm+SCTpqWBrjp95Ft56oNdSgNBKGV0bYtRsYQ=
Subject key identifier:   2E:B2:EC:74:84:D3:C5:B2:D7:B1:9F:3F:A6:49:E5:0C:46:3A:B7:E4
Authority key identifier: C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD
Certificate issuer:       /CN=c67e9de8e826cdee0e65f622583434b81cf37bad
Certificate serial:       019D99993895E2BCFAFE27421FA7AA2D931C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
Manifest number:          1853
Signing time:             Fri 17 Apr 2026 04:00:48 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:48 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:48 +0000
Files and hashes:         1: AfdcY0-Nv9-nDm8D_XhuzGvHs1M.roa (hash: Iln5My7Vy90xzmErWY2q1+QP+/1Vku9eLVf6no/e5Gc=)
                          2: xn6d6Ogmze4OZfYiWDQ0uBzze60.crl (hash: SbCHbETo7w1/AZBq+VjynhLiQRfhkU4Z81H+gcFtK2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:38:95:e2:bc:fa:fe:27:42:1f:a7:aa:2d:93:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c67e9de8e826cdee0e65f622583434b81cf37bad
        Validity
            Not Before: Apr 17 04:00:48 2026 GMT
            Not After : Apr 18 04:00:48 2026 GMT
        Subject: CN=2eb2ec7484d3c5b2d7b19f3fa649e50c463ab7e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c7:3e:0c:a0:bb:73:de:ca:8c:ca:49:76:5b:
                    10:cc:29:4c:37:34:16:5c:53:ab:09:55:f6:d0:b2:
                    7b:85:ba:9f:49:64:b6:c2:13:bd:99:5c:0d:b5:52:
                    56:e6:d1:f8:94:f7:f0:6c:66:43:cb:e9:6e:6e:e0:
                    da:79:fc:3a:4e:60:5e:7b:1f:de:2d:58:65:0b:c6:
                    99:13:0b:77:e7:41:d1:71:c1:8b:7d:14:57:6a:cb:
                    25:b2:25:49:8d:2d:5d:18:e3:7d:91:dc:a2:5c:0b:
                    a8:4e:c3:ef:8d:b0:0f:e0:1e:46:5e:fe:60:44:3d:
                    bb:95:df:60:09:ee:1a:85:4b:3b:11:ff:21:ae:3d:
                    bc:65:46:40:b0:85:b8:e9:13:2a:fd:11:ef:d3:63:
                    48:ec:df:1d:77:28:d3:8d:0f:2c:c5:0e:46:45:ca:
                    d6:bb:b4:d7:0b:e2:48:dc:25:32:a6:f5:d0:37:1e:
                    83:e3:a5:fe:29:10:db:c8:3c:37:57:2f:b4:b7:7c:
                    99:9d:c7:1d:1c:c8:7a:12:4b:3a:ed:a2:b1:45:20:
                    52:94:92:07:8a:0f:d0:72:5e:ff:5c:d6:37:fe:48:
                    29:01:4d:c2:cb:47:ca:84:b3:db:d4:3a:7f:dc:a1:
                    d2:cd:0e:bc:dd:39:a4:11:79:4e:73:38:26:a5:e3:
                    28:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B2:EC:74:84:D3:C5:B2:D7:B1:9F:3F:A6:49:E5:0C:46:3A:B7:E4
            X509v3 Authority Key Identifier:
                keyid:C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:07:6b:1f:7f:ad:93:41:24:32:87:f7:39:07:40:f9:15:bb:
         f2:f3:e2:d4:ab:70:a0:c9:ab:63:56:94:84:ef:b0:9f:f8:4a:
         d8:2a:81:8f:6b:ec:cb:59:11:1d:4b:9d:46:5d:e9:0a:7b:5e:
         09:b6:82:5b:a0:9a:ef:4e:65:09:9f:af:21:df:b2:3a:65:51:
         85:69:6d:5c:27:21:6f:37:3a:26:1d:f3:58:8b:e2:6f:28:15:
         02:5b:75:1c:a7:22:d3:8f:f7:0a:c5:22:a1:c3:d2:62:4c:16:
         6d:7f:06:c5:38:b9:06:2a:41:81:b8:ec:d3:9a:78:d0:15:8a:
         7a:cb:0a:b2:0e:30:1b:37:af:b5:56:5c:09:6e:c4:53:35:76:
         f0:08:91:ad:30:a3:ea:3e:3c:77:5b:4a:fe:80:3e:17:56:3a:
         76:47:43:7b:74:a4:50:79:46:5c:e4:9b:da:2f:bd:85:58:44:
         ad:62:63:9e:e6:c0:62:5f:ab:7c:d0:88:72:fc:9c:e1:c7:9e:
         3e:86:89:d6:2b:16:a5:21:b2:a4:42:2b:d6:38:d6:74:da:84:
         89:a0:34:af:76:b4:c7:88:d4:12:92:91:97:d3:50:29:94:a4:
         36:ef:a3:ee:84:69:4b:67:f6:b0:68:f9:eb:b3:a0:5a:d5:5e:
         a0:70:d6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:31 2026 by rpki-client