Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
File:                     Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft (raw, json)
Hash identifier:          eOOIuTZIzzTWGE7EymUktmhN7v1GkywEh5uPObj7B8Q=
Subject key identifier:   7B:FF:8C:BA:FB:3A:6A:B4:54:2D:BE:99:99:4D:28:83:FD:57:FD:F3
Authority key identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
Certificate issuer:       /CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Certificate serial:       019D97E20F645290FA2D394DF3E8907C748F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
Manifest number:          18C3
Signing time:             Thu 16 Apr 2026 20:01:07 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:07 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:07 +0000
Files and hashes:         1: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl (hash: 46JfcnN1ZDZw5LXbT1v9jg93zpzRlurivfmk6yU5VfQ=)
                          2: R5kKLGujwVyN11kdJlzsqOL8oRw.roa (hash: cDKxoErZto4JESswwKsE0Hav5uBoVZS9w/0qja84b7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e2:0f:64:52:90:fa:2d:39:4d:f3:e8:90:7c:74:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
        Validity
            Not Before: Apr 16 20:01:07 2026 GMT
            Not After : Apr 17 20:01:07 2026 GMT
        Subject: CN=7bff8cbafb3a6ab4542dbe99994d2883fd57fdf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:10:dc:d4:b8:04:b5:17:c4:8b:1d:3b:cd:bb:
                    16:23:98:7b:5a:69:02:06:33:e9:9b:60:04:21:73:
                    a6:73:83:4a:2c:56:bc:3e:15:df:32:f9:af:fd:b1:
                    47:1c:ed:b7:b9:24:20:41:cc:45:46:f4:02:b5:5d:
                    59:9e:f9:65:4f:f8:90:8a:24:fc:a8:10:04:ab:2c:
                    88:ea:e0:b0:3f:31:3a:0a:46:af:fa:90:5e:18:de:
                    75:d8:9c:d4:98:ee:df:54:e8:a7:bc:d3:09:c6:fb:
                    ce:59:fb:dc:92:97:a3:1f:92:c5:6e:7c:be:6f:d6:
                    dd:16:9c:65:bc:01:31:b8:c9:19:5b:8f:b0:e9:b5:
                    e1:d4:36:ee:6c:00:6a:aa:54:75:b8:31:28:98:8f:
                    60:d5:25:1f:b9:41:40:bd:fb:12:e4:03:39:32:3d:
                    75:ac:f0:a4:1a:b7:1f:24:f8:b5:2f:55:c7:41:c2:
                    cc:5c:69:33:68:aa:13:f6:e7:24:79:00:18:a1:16:
                    40:6a:d6:09:1c:92:a3:bc:8e:fd:0d:11:9f:12:4a:
                    25:d6:ea:5a:41:89:f1:bb:f5:cf:cf:31:9e:c8:ec:
                    5c:74:66:01:3e:9c:db:f1:69:ed:3d:70:54:38:83:
                    78:f4:05:70:07:a9:55:ce:be:9d:6f:8e:ac:8b:be:
                    96:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FF:8C:BA:FB:3A:6A:B4:54:2D:BE:99:99:4D:28:83:FD:57:FD:F3
            X509v3 Authority Key Identifier:
                keyid:1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:23:92:3f:7d:9d:27:84:1e:cd:19:79:43:83:ef:5c:b4:78:
         61:3b:7b:81:68:2b:e4:ab:4f:16:9a:07:cf:aa:12:df:dd:ac:
         4b:a1:d9:d9:31:e0:da:4a:97:a5:41:dd:6c:bf:d2:55:86:03:
         49:e5:fc:9f:80:46:f8:c2:34:26:d7:9e:12:e7:4f:eb:eb:55:
         11:d0:2e:dd:f9:7b:a5:77:95:1b:6b:45:d4:8d:6e:ef:f8:67:
         35:9e:54:ad:24:0e:a6:42:71:7a:49:95:4b:af:15:ad:2d:e5:
         5c:24:6a:10:e4:a8:af:71:bb:fb:df:5e:de:e1:32:6c:a8:97:
         68:08:03:76:41:f2:96:3a:2c:9d:14:ba:fd:20:9c:cd:c7:7b:
         99:08:46:9a:f3:6b:75:e3:43:3a:35:87:48:94:68:fe:c5:3c:
         f3:25:ed:bc:dd:b9:a9:7d:2c:2e:e1:ea:20:c5:20:58:45:76:
         bf:fa:e8:90:d9:7e:46:c7:4a:83:63:83:de:38:19:47:ce:99:
         0a:15:34:7c:f7:3b:e0:57:4f:21:80:20:e7:51:1a:25:14:19:
         a4:f8:fa:76:a9:b9:c7:f8:0d:b8:43:f8:fe:1d:64:d5:b5:37:
         3f:90:57:aa:75:14:7a:db:53:a3:71:ff:82:68:9b:59:1c:8b:
         e6:79:44:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:44:50 2026 by rpki-client