Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
File:                     3V8ufMLGh_WMDR9hMrstz984y2Q.mft (raw, json)
Hash identifier:          4EPU5ryQi3n4Mn5+zUeL4hNHn485UrLDQ2+MJxxafYo=
Subject key identifier:   80:61:82:A7:1B:F7:B5:5A:84:1E:4D:E6:51:36:AC:30:54:D5:2E:97
Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
Certificate issuer:       /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Certificate serial:       019DA41CB4139FE2C649A5B1A8B6A61DBFF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
Manifest number:          18D8
Signing time:             Sun 19 Apr 2026 05:00:37 +0000
Manifest this update:     Sun 19 Apr 2026 05:00:37 +0000
Manifest next update:     Mon 20 Apr 2026 05:00:37 +0000
Files and hashes:         1: 3V8ufMLGh_WMDR9hMrstz984y2Q.crl (hash: RuvJnfeGmLo8HbfR+/LPjpf/DXDENFhCv8Q//qa+qR4=)
                          2: 9iXPkKQ54sHh9FCulI77t8C1PLY.roa (hash: /ecGydtHF8wvlQeIO0uuqqIOnlvcqPbpsJvKK5M4Szw=)
                          3: CnlOxC7_uwBkJ3v3U1fHQBRIdjo.roa (hash: qBL5SEn9bLiNiZ8kK6JPW1aDdUpSEsezqM0e+ePG6oI=)
                          4: g0mhvAZsLExNosr94fQnamWzRDY.roa (hash: /xN1qB7faHsczS8ezFck6vhb0aDhcJHPTlgHGBz6WiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:1c:b4:13:9f:e2:c6:49:a5:b1:a8:b6:a6:1d:bf:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
        Validity
            Not Before: Apr 19 05:00:37 2026 GMT
            Not After : Apr 20 05:00:37 2026 GMT
        Subject: CN=806182a71bf7b55a841e4de65136ac3054d52e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0e:74:c5:37:43:9c:bb:24:60:31:16:61:6c:
                    0f:f5:ae:41:bd:d6:d1:09:75:d6:f2:81:e9:44:11:
                    c5:cc:01:34:36:5a:b2:e5:a7:b6:ed:fa:7c:82:fa:
                    2d:04:ee:68:fd:c1:56:6b:ec:cb:5e:27:24:47:f7:
                    82:9d:a3:9f:e6:30:a6:a2:23:f2:5f:b2:68:6c:8a:
                    2a:d7:91:22:11:ed:9e:fd:6f:12:f1:f9:53:d0:e1:
                    e4:8c:f3:48:42:99:42:ca:d5:98:95:25:99:eb:40:
                    cb:26:ce:ac:2a:72:8f:f3:2d:2b:23:15:e7:2e:fb:
                    87:7e:f5:38:5c:e9:63:7f:d1:a9:a6:02:54:cd:12:
                    d6:4f:23:ea:ae:a4:80:e6:a6:6c:57:0c:c2:95:65:
                    c8:3b:e6:3a:df:20:42:20:5e:97:2c:87:b2:fd:c3:
                    38:6d:ca:49:41:cc:7a:e1:28:59:36:8c:4e:be:e2:
                    2c:c0:5e:94:81:f5:28:b1:cd:72:ed:bc:27:7f:e7:
                    2d:2f:40:3e:5e:f5:6b:29:84:6e:1e:4b:45:96:83:
                    24:c0:ec:a6:fc:f6:8c:0d:2e:ed:30:50:04:98:b9:
                    7d:dc:d7:8e:fb:05:b4:f9:0d:d9:6e:57:01:56:ba:
                    d3:28:ad:7f:36:da:6d:66:4f:18:2e:dc:cc:24:e2:
                    88:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:61:82:A7:1B:F7:B5:5A:84:1E:4D:E6:51:36:AC:30:54:D5:2E:97
            X509v3 Authority Key Identifier:
                keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:24:81:ee:2e:37:49:e6:89:76:09:7d:38:fa:83:2d:00:2e:
         37:ae:3b:24:70:0d:68:83:23:7e:ba:3f:59:08:c3:9b:53:fb:
         ac:dc:e8:c3:51:15:ed:3f:0f:d4:1f:13:9b:54:39:b4:27:b7:
         e8:58:8c:5d:06:52:09:73:42:28:10:9f:27:a1:93:59:14:cc:
         92:7c:7d:79:dd:68:a9:1d:cc:be:de:5f:6a:a1:40:c6:b9:ab:
         f5:ec:7a:d2:f3:3e:92:fc:03:2e:56:bd:76:b6:ff:27:1a:ff:
         d0:a7:37:8d:67:9c:f4:d5:ed:fe:cb:e1:c2:a3:34:12:3d:95:
         3b:94:06:c3:20:96:8b:b0:d4:6e:64:7a:0c:f1:e9:b1:c9:7a:
         16:7a:e8:9f:0c:cd:a4:a6:1f:2b:c2:69:cb:86:61:14:7d:7f:
         f4:c5:70:8c:01:cc:0d:ef:b2:ae:3b:fe:4c:18:55:0a:2b:a6:
         56:25:e6:b9:20:60:6c:c0:c7:fd:2e:29:08:7a:fb:56:0f:2f:
         51:cf:08:0c:71:60:10:2a:31:94:17:d9:3a:56:68:61:b4:0e:
         ec:6c:a3:7e:80:5a:98:7c:68:ac:bc:00:46:69:3a:4a:e7:d9:
         3c:4e:67:e5:32:2d:72:f7:90:07:cc:71:94:b7:a9:19:cb:64:
         27:96:39:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:08:20 2026 by rpki-client