Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
File:                     8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft (raw, json)
Hash identifier:          Cjjscx7opBC7FB8991KGU001Ew6SGK0ppSnkv1h/CIU=
Subject key identifier:   87:9C:B5:31:9C:AB:D6:D9:36:65:C0:A5:DC:99:79:43:43:CE:D0:34
Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
Certificate issuer:       /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Certificate serial:       019D97E18FDB67199C63D5CC9407DF4A7EF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
Manifest number:          18C3
Signing time:             Thu 16 Apr 2026 20:00:35 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:35 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:35 +0000
Files and hashes:         1: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl (hash: cg2U11eHK8oaCwnoqbLDHeYJ1VjG7x5Epja+SjtI4gk=)
                          2: UFHh3vV19ELev_hBQqmjdsJvdRk.roa (hash: xSmonOfsBVxyyfdFAzmkSxeWMqfBkDOi/XXRvC/iB2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:8f:db:67:19:9c:63:d5:cc:94:07:df:4a:7e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
        Validity
            Not Before: Apr 16 20:00:35 2026 GMT
            Not After : Apr 17 20:00:35 2026 GMT
        Subject: CN=879cb5319cabd6d93665c0a5dc99794343ced034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:db:36:9c:81:05:c3:84:17:c9:44:48:c4:d0:
                    c2:c5:ce:af:ba:8d:56:1a:3a:1d:85:96:34:ab:db:
                    d3:4e:43:60:8f:1b:0b:60:50:35:51:06:c0:c7:93:
                    d5:41:5f:e3:bd:3d:df:fc:6f:4e:c2:1f:af:b1:50:
                    68:fc:5f:6e:44:38:2a:4c:52:0c:54:e4:e6:15:57:
                    43:18:7d:10:7c:ec:be:04:24:7e:3b:8c:c4:c3:8f:
                    cb:b3:27:a9:6d:e1:5c:88:01:7d:2c:4e:73:27:db:
                    33:78:e7:a5:24:75:9f:97:82:ff:8f:94:e0:35:0b:
                    53:3e:ae:0d:71:a7:cd:9c:95:a6:7b:93:1a:be:b9:
                    0f:f4:ee:7a:09:34:a9:d8:fd:37:78:d4:10:7f:1e:
                    1e:c9:96:fb:b2:f4:6a:81:44:13:17:8a:d3:c0:d4:
                    fb:b8:3b:e9:7b:b5:cb:5d:bc:3b:41:44:f6:6b:40:
                    0a:44:38:58:65:a1:8b:be:f8:be:a8:8a:ce:fe:bd:
                    42:8a:2c:19:96:25:f6:84:83:58:84:5d:09:00:e5:
                    d0:16:22:19:78:36:d3:b7:6d:02:ae:81:16:63:00:
                    65:54:ca:af:0a:59:f6:fa:06:79:6f:fa:14:a4:31:
                    31:d8:7a:ec:7b:1f:6b:17:4f:ba:13:90:00:86:99:
                    85:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9C:B5:31:9C:AB:D6:D9:36:65:C0:A5:DC:99:79:43:43:CE:D0:34
            X509v3 Authority Key Identifier:
                keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:24:91:3e:30:1e:2c:b2:59:9a:7c:f8:b2:ef:08:0e:1b:30:
         a5:d4:3d:c4:55:16:78:30:ff:99:d2:33:d4:27:f5:c9:38:c5:
         cb:dc:cd:6d:d1:3a:57:7a:71:4b:da:d7:fa:79:1c:ab:6c:a1:
         a7:ff:88:89:7e:dd:98:a4:f8:a2:3c:61:7e:06:e6:f1:f1:55:
         58:b6:0e:ba:1d:51:6d:9f:32:52:61:51:30:54:0c:4a:3a:ed:
         c7:b3:38:31:30:1f:55:fd:f1:fa:ea:02:a4:75:e2:98:b8:92:
         5f:10:ea:af:ac:98:79:17:a2:3b:91:de:82:9d:49:d5:26:40:
         88:30:d1:f8:54:de:3d:53:a9:e2:c8:ee:80:e3:ed:9f:e5:38:
         ca:5e:51:d5:87:ea:03:2b:82:69:c9:98:df:a1:34:42:12:e2:
         35:cb:14:1b:2f:97:e1:e2:4b:c8:9b:71:f6:0c:f7:26:38:b5:
         02:02:09:cc:25:c1:47:c9:53:e9:2b:87:6e:a1:79:87:e0:ad:
         7a:96:00:fc:d9:a2:b1:07:ae:1f:ad:72:54:25:ca:d0:56:e3:
         64:45:44:9d:ca:ae:2a:0c:47:d7:87:5a:72:68:bf:b4:63:d6:
         50:dd:e0:33:74:51:24:e8:ca:b3:48:cd:21:4c:2a:fe:7e:9c:
         de:6a:a4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:26:31 2026 by rpki-client