Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
File:                     N0862b8UbAabjYPW1a1UggRetw0.mft (raw, json)
Hash identifier:          eH2rJn8gm6i5naMRh1+paTNAAaPjNSxILOS+JoiROsg=
Subject key identifier:   1E:BD:13:2D:00:E1:5D:C9:7B:90:99:A8:9E:CC:D8:5A:89:8E:17:EC
Authority key identifier: 37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D
Certificate issuer:       /CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
Certificate serial:       019D984FC7ECAB3A5883BD20FF5DE684A958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
Manifest number:          18C1
Signing time:             Thu 16 Apr 2026 22:00:58 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:58 +0000
Manifest next update:     Fri 17 Apr 2026 22:00:58 +0000
Files and hashes:         1: N0862b8UbAabjYPW1a1UggRetw0.crl (hash: /s2CdQo2jsl0GVQCT64UiBPPY5eRZaabxjef/o4NUz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:c7:ec:ab:3a:58:83:bd:20:ff:5d:e6:84:a9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
        Validity
            Not Before: Apr 16 22:00:58 2026 GMT
            Not After : Apr 17 22:00:58 2026 GMT
        Subject: CN=1ebd132d00e15dc97b9099a89eccd85a898e17ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c0:ad:14:4e:a7:63:5b:9d:dc:96:3e:9e:cd:
                    0b:a3:5e:b9:3e:0f:91:3f:6a:af:dc:eb:40:72:db:
                    b5:7f:25:14:f8:ba:53:f9:e9:63:61:fe:fb:9b:e5:
                    f6:09:e9:48:de:33:c4:a2:c4:92:57:e9:9f:94:8c:
                    3d:e0:a1:4c:21:7b:af:77:5b:f5:78:44:bc:41:e4:
                    01:23:11:86:96:42:79:bb:08:10:54:85:23:16:2e:
                    54:4d:1a:1b:a6:14:d8:30:33:ae:42:23:08:1d:4e:
                    13:ea:3d:e6:6b:6a:19:2e:e5:12:40:1a:17:31:84:
                    1c:8e:86:19:8e:df:87:e1:ba:b6:6e:21:f2:06:7f:
                    57:54:47:87:75:86:4b:49:21:b0:4e:2f:0a:6e:7c:
                    d4:72:a7:98:a3:7f:67:d9:3b:5a:c3:4e:69:7c:c7:
                    48:46:f7:d3:84:02:74:06:c2:f4:cc:99:f2:e7:12:
                    1f:83:8e:5b:d5:ef:fa:ef:03:55:c7:77:ac:df:dc:
                    f5:7c:5d:dd:fa:51:7d:b6:dc:eb:4e:9c:ec:d9:43:
                    ea:ca:e7:b9:e2:9e:d0:21:22:5f:a2:84:82:53:db:
                    bb:9e:9f:2f:74:de:8d:55:3b:49:50:2a:b8:82:07:
                    1c:e1:25:e8:20:0a:5e:5c:99:a7:da:80:9d:96:87:
                    c8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BD:13:2D:00:E1:5D:C9:7B:90:99:A8:9E:CC:D8:5A:89:8E:17:EC
            X509v3 Authority Key Identifier:
                keyid:37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:07:d0:d1:2f:bc:60:05:ff:44:a8:92:3e:bd:ab:c4:09:d9:
         b9:dc:a4:60:d5:c9:6c:dc:bd:29:4f:f6:c6:b1:19:a3:7f:d9:
         61:fc:63:0c:c1:22:18:05:8a:df:5f:e2:fe:3e:7d:cf:70:0e:
         5b:9f:b9:b9:7b:4a:f1:f4:db:15:44:71:ba:d8:69:68:f1:ef:
         93:c8:2a:b4:18:a7:3f:fd:42:62:73:0b:07:42:1f:6a:76:d9:
         f4:70:1d:98:5c:68:fc:f4:50:92:58:70:b1:fc:bf:9d:c2:fc:
         78:8b:bd:70:c6:19:7b:c4:7e:fb:c8:6b:c9:ef:dc:91:54:ee:
         c0:d2:08:ae:d4:92:36:99:b5:6c:be:3d:59:ba:01:89:df:ee:
         ba:ab:3d:d8:84:d6:25:35:56:f3:1c:8d:9d:37:87:07:b5:33:
         63:32:94:a4:ef:f0:52:a1:ac:6e:ae:ee:43:9c:d7:a2:24:6c:
         ad:f9:50:1b:3f:53:7f:8e:f4:e1:53:90:3f:04:42:5f:75:bf:
         8c:99:2e:98:b0:aa:7e:10:d5:d7:03:92:0c:c4:f6:1d:7b:92:
         84:b5:fc:98:13:ee:cd:bf:06:91:e2:60:bb:ad:49:d3:b5:8d:
         dd:f2:4f:80:31:1e:94:77:8b:7b:75:52:9a:8b:c3:10:4c:85:
         bb:a2:6e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:51:18 2026 by rpki-client