Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
File:                     B0ejbXdop7MKTuy7aWTIwjfXRAE.mft (raw, json)
Hash identifier:          hCwW1dGMQMvSsuKn5riOJFFM7EiJ2O7Pt5Vmfp8okQs=
Subject key identifier:   58:A6:FE:AB:FD:A2:4B:19:CE:6D:44:BE:56:64:22:A3:1C:63:20:CD
Authority key identifier: 07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
Certificate issuer:       /CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Certificate serial:       019D98F4131AA3B20139DB392103970C68E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 01:00:25 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:25 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:25 +0000
Files and hashes:         1: AiPCwT2mOHblP5OWBwZI_2If-qc.roa (hash: ZI02ce5tKSPDXFD64PX8BGZ+5za9hEAGoOG8T2YkDzY=)
                          2: B0ejbXdop7MKTuy7aWTIwjfXRAE.crl (hash: SswGNtZdA+K53U2922AmHPM45XrFQHyhaSkBSEpy4IM=)
                          3: R6tX7n1EUzhS2Rc8AgVfdcymHjg.roa (hash: nb/6KQdFOLZV09sF9OK9gvGL0HQoI0XdoKq2+mGgfyY=)
                          4: Rv-jwelP5qAOVsTY2O3lL6StCzI.roa (hash: 3p4Tm23LFUYRqfwgQDQDi43EjAXLyoXTDot/c2J7+7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:13:1a:a3:b2:01:39:db:39:21:03:97:0c:68:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
        Validity
            Not Before: Apr 17 01:00:25 2026 GMT
            Not After : Apr 18 01:00:25 2026 GMT
        Subject: CN=58a6feabfda24b19ce6d44be566422a31c6320cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:87:f6:0b:f9:82:a4:53:c4:1b:d7:74:97:8b:
                    40:99:62:83:46:3e:cb:86:24:c8:46:c2:6a:f3:03:
                    a1:b2:a7:38:2e:34:d2:03:77:a7:38:df:84:99:42:
                    01:f2:af:53:73:16:7e:bb:4d:04:18:b4:71:ed:f9:
                    72:59:bb:96:18:39:db:5a:12:ef:f4:64:e8:91:fa:
                    1c:83:02:46:a4:f9:44:a5:f2:59:5b:52:86:0d:20:
                    6b:52:77:32:83:3f:e2:49:f4:9d:f9:bd:9d:a7:cd:
                    9c:1e:32:21:3d:53:52:5f:62:cd:e3:ca:5e:2b:0d:
                    4c:5c:27:66:6f:79:cc:e7:95:4d:c9:63:b4:c9:9f:
                    b4:73:cc:96:75:4e:c7:51:ac:d7:c0:59:f2:12:f0:
                    79:f8:a9:1b:20:df:fa:9d:d7:d9:9e:fa:09:4c:5c:
                    67:fe:fe:00:51:0e:64:9f:1c:d3:8f:03:e5:57:e1:
                    31:d5:3f:b9:ef:34:f9:c1:bf:c5:5d:a7:93:f3:ae:
                    04:16:88:f0:e8:d0:ca:83:11:8e:e4:27:cd:44:3b:
                    90:13:6d:09:86:9d:8b:46:89:f6:80:85:23:0f:de:
                    45:95:83:f3:c6:19:74:20:69:d3:14:5f:d3:d5:8d:
                    5a:cf:f1:dc:e0:61:2f:ce:28:f3:46:4c:62:ab:eb:
                    28:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A6:FE:AB:FD:A2:4B:19:CE:6D:44:BE:56:64:22:A3:1C:63:20:CD
            X509v3 Authority Key Identifier:
                keyid:07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c9:ed:e3:ce:98:93:b6:6b:d1:74:4f:5c:15:84:2a:02:17:
         ea:54:42:9a:eb:12:fd:a7:18:f5:3a:e8:95:95:ed:79:4b:1b:
         b3:07:7b:db:55:64:79:6c:13:e5:81:76:67:c2:24:84:81:c9:
         91:8d:a0:e4:9d:a3:42:b1:3e:50:1e:05:98:29:77:71:c9:fa:
         0c:e7:57:20:94:28:9c:25:d7:63:5a:8f:4f:3b:ba:05:4f:f6:
         f1:13:fe:5d:03:70:d7:71:fb:35:80:02:4e:a7:bf:f7:10:98:
         f2:3e:f6:26:3f:95:b9:bd:d8:b9:12:f1:fc:d6:0d:ad:82:75:
         4c:f5:dc:a7:63:c2:f7:93:23:1b:71:5b:98:d3:b5:4e:54:bb:
         af:5b:42:a7:03:47:42:c3:61:ad:26:2a:b6:c2:15:ed:11:d6:
         47:b7:01:5d:51:28:7e:6d:8f:d5:bc:5a:5d:e1:16:74:f9:a0:
         c4:31:36:72:75:2c:47:eb:0d:c9:84:0e:c0:4a:56:dc:89:ef:
         ff:dd:3f:69:5f:59:51:8a:6c:76:04:24:05:97:a7:21:e4:45:
         c2:38:8d:eb:5b:e7:f6:24:6e:0f:2b:92:f2:b5:12:cc:aa:d0:
         d7:c0:2d:7d:e8:80:6b:7a:d5:3d:aa:85:85:42:34:fb:40:1e:
         51:3e:3f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:56 2026 by rpki-client