Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
File:                     1-_YvdgYnP0GmzMjilWB288Ch61Q.mft (raw, json)
Hash identifier:          cGEMX7RuzxzzxhqZz+PXmwmZbxNOAul6p84XVomg8uY=
Subject key identifier:   62:A6:C5:A0:F0:9F:19:D7:F4:A2:FB:7B:9A:64:02:A4:D2:06:DC:3A
Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
Certificate issuer:       /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Certificate serial:       019D9AAB8A49693386B84B4E30831EC78AB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
Manifest number:          18E4
Signing time:             Fri 17 Apr 2026 09:00:26 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:26 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:26 +0000
Files and hashes:         1: 1-_YvdgYnP0GmzMjilWB288Ch61Q.crl (hash: avy3KE/LcU/Ex19OD7jK6Alfn/U5YPfy0ddNBDHdN8k=)
                          2: sxqFF3SrvGoUsRQZD8fu4--ERqs.roa (hash: 1C32Y1sbpjWSQ+8VoxTVRdY7H3ef9AMyVxgJYOjwRdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:8a:49:69:33:86:b8:4b:4e:30:83:1e:c7:8a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
        Validity
            Not Before: Apr 17 09:00:26 2026 GMT
            Not After : Apr 18 09:00:26 2026 GMT
        Subject: CN=62a6c5a0f09f19d7f4a2fb7b9a6402a4d206dc3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:a5:53:c1:9e:74:f4:2f:83:6d:7a:92:70:
                    3f:fa:40:6e:c5:06:af:c3:d8:d8:74:7c:17:32:19:
                    90:29:1d:c5:0c:9d:2f:e4:35:16:b2:58:3a:d1:40:
                    45:91:d5:c9:cb:19:4e:ef:84:06:fe:14:cb:cd:5c:
                    85:60:3c:2d:96:ae:0e:13:69:2f:d6:b1:18:43:35:
                    89:17:92:69:06:e9:e6:4c:a1:96:16:54:43:3f:fc:
                    0e:93:75:8a:a9:bb:89:85:ae:74:b1:1c:04:5a:d4:
                    70:70:c6:ce:68:0f:93:28:40:d6:a4:7c:16:bf:e2:
                    71:5f:c7:cb:49:bd:c1:27:1c:a1:9c:dd:44:a5:a5:
                    b4:e5:1f:c5:ec:de:cc:8b:13:0f:b0:fa:98:4e:b8:
                    b7:17:d1:99:8f:08:b5:57:a6:12:bb:91:7c:f5:12:
                    ec:e6:e1:a8:84:65:21:a4:ab:59:67:2e:28:fe:b2:
                    97:3d:62:91:58:47:eb:21:2b:51:ee:10:6d:35:a3:
                    31:28:65:69:12:4c:d2:ef:20:37:88:01:66:28:ba:
                    06:6c:51:fc:ad:b3:f1:b5:c3:3b:75:48:38:d4:64:
                    91:94:8b:b3:77:fa:68:0e:bd:6d:d7:72:93:fc:9c:
                    44:df:91:a3:41:14:ce:82:00:98:89:1f:a0:f1:a2:
                    db:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A6:C5:A0:F0:9F:19:D7:F4:A2:FB:7B:9A:64:02:A4:D2:06:DC:3A
            X509v3 Authority Key Identifier:
                keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:53:c7:b0:3a:f5:60:f4:30:96:7c:e3:6b:71:ee:f7:31:57:
         d7:f7:0e:19:28:32:98:23:21:c4:33:b5:6c:94:cd:61:fa:8a:
         dc:31:7f:61:c2:67:fa:d0:de:2d:7d:2a:0f:a3:7f:04:4c:11:
         54:12:a0:f0:a2:d0:31:bd:10:9a:a9:65:e7:6a:6f:34:2f:d3:
         36:21:b0:33:e7:75:6a:a2:d7:e9:6e:1f:fc:ac:34:46:3e:58:
         51:1c:b6:ea:03:a4:1d:64:11:3d:06:ec:62:7f:a3:f5:ce:38:
         8a:23:f7:84:6b:98:e5:e9:3b:c3:41:df:85:61:91:0d:79:3e:
         df:6a:bc:93:ef:78:0c:b4:36:1c:b7:03:ae:ba:0a:6e:0b:50:
         75:7c:29:15:83:07:6f:f1:5d:b1:21:ec:2c:64:31:3f:76:5f:
         43:70:79:11:12:21:bb:c3:7f:3d:9b:e8:dd:f4:77:9c:b7:37:
         f6:18:2d:9f:db:44:f4:00:8f:11:07:01:92:1d:3c:da:0c:47:
         59:51:5e:99:28:9c:3b:b6:01:6d:07:55:2b:32:44:d8:27:12:
         1a:22:82:09:06:12:85:7d:46:d3:29:c8:53:1c:98:c1:13:13:
         74:8c:63:d2:72:18:53:bb:e1:4e:fc:3a:61:7f:c7:3b:5b:fa:
         30:32:2f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:39:44 2026 by rpki-client