Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
File:                     itN6mTOwUsLxLvG48U108F_dthE.mft (raw, json)
Hash identifier:          ReNYL/ypQAmhxLabcjM3tXq1eh4Ci0/hTTbLY79LlLs=
Subject key identifier:   FA:E5:EA:06:9A:48:A4:DC:CC:37:9A:A2:6B:27:D1:45:9B:1D:1E:26
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Certificate issuer:       /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial:       019D9B516A8018872E0E6B50B1FC5AF3BEB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
Manifest number:          18C7
Signing time:             Fri 17 Apr 2026 12:01:37 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:37 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:37 +0000
Files and hashes:         1: itN6mTOwUsLxLvG48U108F_dthE.crl (hash: FyVI+p0DvZC+2/Eedg7IQDfsnpwrd5bibfGOhGYa/jI=)
                          2: j5SNiWDExW4Fzdr91OyzIh3q2cA.roa (hash: f3l9/B3pjG4wxZ77vCWHe+oV14ybxAso+7Z2L/8x8tk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:6a:80:18:87:2e:0e:6b:50:b1:fc:5a:f3:be:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
        Validity
            Not Before: Apr 17 12:01:37 2026 GMT
            Not After : Apr 18 12:01:37 2026 GMT
        Subject: CN=fae5ea069a48a4dccc379aa26b27d1459b1d1e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:00:26:e5:94:32:15:68:27:25:df:71:a0:77:
                    35:d9:27:f8:57:4c:ae:8f:f4:33:e9:a0:94:e6:a8:
                    8b:47:5f:e7:83:4d:21:0d:c6:9a:6a:63:62:42:37:
                    af:24:ee:90:9a:cd:0f:e5:85:5a:42:a1:48:13:8f:
                    6a:89:17:e7:70:42:02:3b:e6:b0:bc:47:1a:b6:bf:
                    94:4a:20:25:42:9f:55:e1:58:e4:52:27:12:c5:7d:
                    8f:cf:90:85:db:1c:c8:a5:98:15:a3:24:8e:2a:fe:
                    78:ca:54:06:e2:cb:8c:97:9f:f3:ad:21:3a:8b:be:
                    44:84:d5:6a:6d:a8:48:48:60:bf:0e:0b:86:f0:1e:
                    71:33:f0:70:62:a2:92:e7:f6:ae:29:7f:be:af:fc:
                    86:d4:3b:aa:37:8b:09:f0:a8:03:04:b0:08:b5:7b:
                    af:2d:40:bd:d9:f0:18:26:e2:11:51:a9:c0:c4:49:
                    e0:02:67:e7:74:a7:c6:63:6f:d3:28:b4:f1:49:86:
                    ff:dd:3f:16:98:24:f6:84:c6:00:00:c4:63:10:81:
                    54:7b:5f:41:2c:48:94:ba:34:16:37:a8:25:f3:e1:
                    da:65:ee:51:71:3e:69:67:e4:47:0f:62:de:79:bf:
                    92:b9:a5:9d:03:75:5d:eb:30:6b:ba:76:30:11:df:
                    89:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E5:EA:06:9A:48:A4:DC:CC:37:9A:A2:6B:27:D1:45:9B:1D:1E:26
            X509v3 Authority Key Identifier:
                keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:48:c1:9d:b5:7c:39:2b:e8:14:d5:43:42:ae:32:8b:fa:d4:
         70:85:3a:9d:91:f1:81:18:60:78:3f:f4:8f:dc:e0:34:70:b6:
         e2:27:4c:0e:b0:ff:64:7a:42:b8:36:ee:5a:f1:58:7b:1c:50:
         11:dd:d3:31:3d:90:db:28:72:f1:4d:aa:e6:57:43:60:29:c5:
         91:2d:b8:e1:1f:aa:ea:dd:d9:59:19:b3:51:96:7f:8b:ec:32:
         3c:30:12:65:b2:20:71:20:db:3b:34:e2:6b:a5:d4:06:c1:51:
         3b:6c:9a:b3:35:55:b5:24:8c:b1:b2:cd:37:01:fa:3c:f3:53:
         ed:36:5e:4b:80:9d:9a:f3:90:a4:a4:e6:95:a9:06:91:b4:98:
         63:e7:67:d2:68:ab:07:d1:65:cf:e5:57:59:71:f3:ab:c7:22:
         75:11:a8:21:7c:12:2a:51:8b:81:74:92:fa:f6:bf:8f:c7:d2:
         1a:f1:51:ac:87:74:13:1f:44:f5:96:91:a1:27:24:e9:c5:91:
         e3:79:b1:bb:79:b2:28:25:81:c0:7b:57:83:05:64:ac:24:7b:
         6f:cd:de:33:6b:01:f1:e8:dc:d8:12:02:58:a1:9d:95:9c:16:
         3e:e7:26:d1:98:39:82:f2:c5:26:9d:88:2b:a4:12:07:cc:b9:
         5c:d5:3d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:22:09 2026 by rpki-client