Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
File:                     57M-njyTL3pULrAhBWzpSx6Ljws.mft (raw, json)
Hash identifier:          iS8xA6wRlzotfOvjUU+q001vERyq84x71MWuKbE/VTg=
Subject key identifier:   2C:33:BC:1F:CF:F4:5D:02:E4:59:44:A7:D6:23:B4:96:25:3C:AB:AF
Authority key identifier: E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
Certificate issuer:       /CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
Certificate serial:       019D9B874FBA6F335E32248D1BA2869375B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 13:00:29 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:29 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:29 +0000
Files and hashes:         1: 57M-njyTL3pULrAhBWzpSx6Ljws.crl (hash: bV4Zc24+0ldhSuk5923ZzE+cx4jHcmYsTTQW4a5+9pM=)
                          2: gJDl0e6pQoHRD8a2YS52DIYUPzk.roa (hash: 56yjo07tXuvgM9qB1noCR3pRJ78UgBBtZbYbUMGEhbw=)
                          3: llsqy-7pM-tNdAJNt-bwZRhO6Wg.roa (hash: eLssT8xJb29om9Cu43JpK9Q0r8uQslZ3Kt/B498Si6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:4f:ba:6f:33:5e:32:24:8d:1b:a2:86:93:75:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
        Validity
            Not Before: Apr 17 13:00:29 2026 GMT
            Not After : Apr 18 13:00:29 2026 GMT
        Subject: CN=2c33bc1fcff45d02e45944a7d623b496253cabaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:aa:81:4f:df:75:21:59:48:f1:a7:cf:6b:
                    89:a0:c2:c7:7f:d6:81:d1:ea:bb:93:d1:b5:1e:23:
                    2c:02:d9:70:73:df:ca:8c:2e:85:46:d0:89:77:ff:
                    1d:af:4f:28:dc:93:55:69:e1:88:b3:17:e6:a6:9a:
                    42:45:25:be:04:6a:c3:a4:0d:14:b1:5b:9d:ae:cf:
                    32:69:34:02:c3:a2:8c:8a:53:93:c0:b0:9e:10:86:
                    d2:17:a2:0e:db:b7:f3:8e:60:8e:d1:9d:c6:97:a5:
                    93:d4:b3:8f:90:87:a3:48:6d:0b:cd:77:86:ed:9d:
                    43:46:45:7e:22:04:1b:56:ff:69:67:51:44:d1:c4:
                    25:ea:1d:ec:4e:14:cd:f6:9c:5e:5a:7e:e8:82:c4:
                    90:5a:d9:7f:dd:32:de:a0:07:8e:b1:3d:ae:33:e5:
                    1a:be:af:02:71:2a:8f:ca:ec:ee:59:47:90:24:f8:
                    ca:ba:df:a9:de:93:9d:a3:2e:7f:d2:04:28:35:3e:
                    7d:52:d1:ee:d6:d4:4e:cf:c3:b3:14:d4:e2:d4:5d:
                    d3:e0:2f:08:39:f1:31:9a:52:68:f9:9c:3f:fb:37:
                    98:63:bc:e2:8c:b4:9d:8b:fa:37:d1:eb:ea:4e:1e:
                    78:b7:30:a2:b5:a0:a9:10:9f:4d:3f:8d:62:b8:6b:
                    0f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:33:BC:1F:CF:F4:5D:02:E4:59:44:A7:D6:23:B4:96:25:3C:AB:AF
            X509v3 Authority Key Identifier:
                keyid:E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:e2:e2:61:8c:4d:b6:47:a9:b0:8b:0b:f8:bf:e6:6d:67:cb:
         1b:be:d2:1c:87:a2:9d:45:22:f3:0e:a8:6f:f8:50:04:fd:22:
         34:17:3d:17:98:b2:e2:ae:46:68:91:8d:01:2f:9f:44:c5:3a:
         b9:43:43:d5:a6:aa:9b:f4:cc:c3:13:71:b4:8f:c9:c2:1d:1a:
         c1:13:ca:c4:37:d0:bb:8c:c6:9d:fa:e5:d0:e2:a1:0b:ed:15:
         3d:e7:8b:69:ae:d2:12:75:5e:0d:ff:2f:d7:ae:01:31:be:0d:
         d7:b0:4b:3e:4f:9a:30:e6:5d:00:9c:e0:d3:1a:1b:08:16:9a:
         8a:6b:15:3b:25:d5:68:ff:82:88:00:c7:b8:16:86:28:49:47:
         b6:8e:e7:21:03:0d:aa:8c:ea:ee:1e:18:6e:e0:69:ab:60:30:
         3e:a2:e2:6a:a4:7c:1e:59:55:b2:ab:76:26:28:5d:fb:ba:dc:
         d9:b1:c4:95:df:79:9e:ec:52:48:2e:b9:0d:c8:75:44:ee:1b:
         be:54:25:9c:e9:19:ac:39:b6:25:01:fa:ea:b2:d6:a7:50:cd:
         8f:7b:01:69:db:f5:e1:fa:6c:10:87:2f:8a:ca:25:56:9a:e9:
         04:fc:18:13:f1:05:64:e4:1d:b6:2c:94:fa:7f:a4:a0:f2:aa:
         66:a9:97:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:42:16 2026 by rpki-client