Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft
File:                     _eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft (raw, json)
Hash identifier:          J3Z0VIMap5VaUOqnne31tRJ24Kn87vOzS/PohBAsplo=
Subject key identifier:   15:20:7E:DA:02:44:A2:A9:89:AF:F6:17:3F:55:A2:8A:BA:CB:8D:43
Authority key identifier: FD:E1:AF:B5:5D:8B:B3:DF:F1:F0:FE:63:06:F3:EF:20:79:58:5A:AD
Certificate issuer:       /CN=fde1afb55d8bb3dff1f0fe6306f3ef2079585aad
Certificate serial:       019DA48A99D3752751D669FAD06A65AF53B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft
Manifest number:          18CA
Signing time:             Sun 19 Apr 2026 07:00:39 +0000
Manifest this update:     Sun 19 Apr 2026 07:00:39 +0000
Manifest next update:     Mon 20 Apr 2026 07:00:39 +0000
Files and hashes:         1: _eGvtV2Ls9_x8P5jBvPvIHlYWq0.crl (hash: AZrmeQpGYUmTKKJv4eqq7RCRTjk3OKOnh8khRf9Nj0c=)
                          2: on30vP_7lhEk_ANI-hC7N7ncjQc.roa (hash: IwqyrOOuo/a85bmmWLflGufy3ZaNAVPI0XCwr1Nb6qU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8a:99:d3:75:27:51:d6:69:fa:d0:6a:65:af:53:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde1afb55d8bb3dff1f0fe6306f3ef2079585aad
        Validity
            Not Before: Apr 19 07:00:39 2026 GMT
            Not After : Apr 20 07:00:39 2026 GMT
        Subject: CN=15207eda0244a2a989aff6173f55a28abacb8d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:35:95:8a:9b:60:2b:fd:b2:09:2e:6d:ad:5c:
                    35:fd:67:58:3d:81:9c:9e:86:08:55:39:b3:00:20:
                    75:9c:c2:28:46:df:4d:f1:08:8e:15:52:97:e2:51:
                    89:02:8c:6c:8a:c5:55:89:fc:f8:fa:3a:c9:e2:80:
                    f7:24:76:53:b8:dc:ae:fd:4e:b4:05:c4:42:c3:74:
                    e6:d6:80:0c:03:e4:2c:d1:f2:e4:df:4e:df:4b:d2:
                    c5:54:23:65:d3:b5:4f:30:8e:5c:1f:77:eb:44:08:
                    de:53:e7:2a:6b:34:57:7d:d1:c9:e6:e7:48:b2:5a:
                    59:f2:df:9b:54:24:a5:6b:03:41:1e:ed:64:1f:20:
                    d9:89:59:e0:89:4d:cb:e8:52:a8:7b:b9:77:3f:8d:
                    27:72:3e:e6:72:7e:b4:0f:f1:5d:75:4b:23:87:26:
                    a0:e2:c9:c5:37:a7:2d:43:2b:5e:65:42:6e:a4:6b:
                    5c:d8:1c:47:79:33:a6:72:6e:7e:b4:64:72:42:1a:
                    8e:21:49:ec:b9:12:86:5c:9e:7f:b2:bf:e8:3c:f3:
                    bc:cf:f2:90:0e:84:00:41:4d:ef:a0:5e:a4:a6:46:
                    57:23:c9:20:c2:e4:75:03:c0:ea:be:cc:72:7f:1e:
                    f9:b6:3d:7f:e1:95:e8:f7:ed:d4:74:de:8e:39:f3:
                    0c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:20:7E:DA:02:44:A2:A9:89:AF:F6:17:3F:55:A2:8A:BA:CB:8D:43
            X509v3 Authority Key Identifier:
                keyid:FD:E1:AF:B5:5D:8B:B3:DF:F1:F0:FE:63:06:F3:EF:20:79:58:5A:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e4:2d:b1:d3:8d:6e:8e:c2:73:09:d6:06:22:17:78:20:22:
         5f:98:61:f9:f2:85:d2:b8:62:23:3e:36:56:72:6e:65:7b:6e:
         aa:1d:ec:d8:9a:c3:81:ec:b6:91:49:bb:4c:cb:93:03:ab:d4:
         8e:ab:e2:09:21:98:60:a1:a8:85:25:9b:84:07:bd:01:31:4b:
         12:5c:1c:06:3b:49:ff:e3:69:f2:79:ff:d4:ed:49:d7:2b:bc:
         c9:4d:04:b9:0d:b8:c1:4e:d2:9a:ee:f4:43:fd:d3:30:ab:80:
         31:3f:7c:c4:fc:e0:41:3d:46:55:36:e9:36:d4:52:b9:55:77:
         2e:f8:fb:f4:75:85:5c:d3:12:ec:c0:07:b6:43:fe:67:48:06:
         c6:2f:52:47:8f:40:a0:3d:77:8c:7c:03:98:61:71:19:0c:79:
         53:f3:95:8c:f6:82:cb:b6:11:f4:5e:7a:d4:bc:40:05:ee:00:
         67:c5:f9:1a:3a:2d:a5:d6:43:1e:51:36:22:a1:d5:8a:3f:c2:
         1c:a8:27:e3:e0:09:28:3b:43:ac:5a:29:07:bd:f8:c1:e5:6f:
         e3:90:f8:ca:37:d5:2a:17:96:d5:3d:19:96:f1:41:73:86:50:
         8b:93:d5:56:22:2a:cf:d1:4e:06:24:bf:fe:69:09:a8:26:cc:
         db:10:9a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:28:41 2026 by rpki-client