Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
File:                     zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft (raw, json)
Hash identifier:          zCPOTSDgR1UPf9tEFeqDYt6DWKo2+bul43bsZW2sI2A=
Subject key identifier:   E6:B3:A5:15:3E:B9:8C:06:8A:E0:F9:07:0D:90:1A:F7:43:F1:07:C3
Authority key identifier: CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
Certificate issuer:       /CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Certificate serial:       019D992AFCA028D7F13071B31803D793D3F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 02:00:24 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:24 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:24 +0000
Files and hashes:         1: hP6LOiB-JXjzIxcAoNUeheYCC_w.roa (hash: Am0rp7j+BYvMadHXe785VdV8wLgqVi6auP8kJTGDcRE=)
                          2: zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl (hash: huc86KTbwU2aBuZOrhh4s460U2JDf/D9VGgtYuMEoK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2a:fc:a0:28:d7:f1:30:71:b3:18:03:d7:93:d3:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
        Validity
            Not Before: Apr 17 02:00:24 2026 GMT
            Not After : Apr 18 02:00:24 2026 GMT
        Subject: CN=e6b3a5153eb98c068ae0f9070d901af743f107c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:79:bf:5e:6a:cc:56:a6:44:5b:56:c4:5d:de:
                    3a:2e:94:38:ee:8e:56:89:8b:f9:8b:7a:2c:8d:1b:
                    bd:60:d9:92:25:7d:00:62:41:a1:c1:a9:d0:56:a9:
                    ef:5d:2e:8e:d5:b2:f4:a4:b1:b4:bd:1d:90:cd:78:
                    95:82:9c:1b:84:28:6a:c6:4b:4f:85:45:91:68:e5:
                    31:9c:4d:3b:f7:c7:23:1e:36:88:bf:42:ad:3e:4e:
                    38:94:0a:9e:77:54:ac:24:d6:63:e2:20:b1:d3:d6:
                    20:9a:2d:23:37:a3:d2:cc:a3:50:78:1c:d1:0b:c7:
                    46:af:c1:45:5a:19:6f:de:f0:d0:81:10:1f:ae:94:
                    5d:96:c2:2a:77:af:a7:37:02:fa:0e:b0:5f:29:98:
                    63:88:3e:c6:0e:29:c7:34:bd:dd:1a:cb:49:04:d9:
                    9a:dd:4e:6b:50:aa:90:9f:bd:d0:90:8d:ea:0b:b8:
                    15:45:21:aa:48:49:43:55:29:03:7e:b3:e6:f3:33:
                    0e:5a:3a:4d:40:52:40:12:f3:0b:88:5e:0c:1c:a7:
                    ed:8c:b5:93:d3:c0:1e:12:ff:24:ee:40:ce:c0:e4:
                    26:4c:00:bb:0d:ec:9a:43:d1:22:25:1b:d0:d6:b4:
                    62:21:39:a3:5b:c7:2f:41:14:58:fc:be:be:87:f7:
                    ec:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B3:A5:15:3E:B9:8C:06:8A:E0:F9:07:0D:90:1A:F7:43:F1:07:C3
            X509v3 Authority Key Identifier:
                keyid:CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:f3:fe:62:c1:40:60:73:53:27:8b:98:f7:74:2c:59:a1:f3:
         63:36:2e:87:82:e5:32:ee:36:17:6e:5e:ca:6c:86:0d:c2:13:
         59:fa:79:a5:9b:7e:e2:49:e1:c9:e1:63:9e:d5:fe:51:cf:da:
         45:85:ae:e1:6e:22:ba:92:29:10:4a:96:6b:45:f7:84:80:53:
         37:6a:94:72:68:f8:7d:17:51:ff:07:9f:6d:4b:0d:eb:ed:67:
         b5:42:72:eb:15:5c:80:3f:b5:97:63:39:3d:58:e4:d1:14:aa:
         6c:75:52:0c:ee:49:22:36:47:cf:e1:af:37:0d:c6:1b:ff:f8:
         d4:ae:f3:d9:88:63:66:cb:e2:5a:14:43:7c:05:19:c2:c4:d8:
         2c:37:93:ef:24:21:51:40:ea:f2:e7:e0:8b:03:5f:f2:a6:9d:
         1c:57:8a:f5:69:00:35:3a:33:7f:7b:df:14:d9:ff:16:c3:a1:
         f1:8a:b9:a3:52:5b:32:46:5c:74:9b:1a:b2:08:0c:ce:b9:a1:
         d4:ff:ab:fd:d5:2b:27:cc:f6:ec:92:f3:6f:a3:ae:27:f1:6d:
         10:c9:81:4f:77:59:6f:a5:d9:94:fd:2c:a5:d7:2d:e9:82:05:
         4a:45:8a:8a:5d:ba:e8:fc:58:33:ff:68:5a:8f:32:82:54:6e:
         13:4c:be:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:19:24 2026 by rpki-client