Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
File:                     0YpW1qFOZ2P8dzOopflDHbdWjLU.mft (raw, json)
Hash identifier:          njw0SaKo/sYqWW4+TVI9e3u9GoGFbAQ+f3+NT0oqqb0=
Subject key identifier:   44:8D:F6:4F:1E:41:48:98:3A:01:BE:34:FA:C0:D3:95:DB:8C:CC:BA
Authority key identifier: D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5
Certificate issuer:       /CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
Certificate serial:       019D9A7493244C7534D1C5A8005C82BCE143
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
Manifest number:          1857
Signing time:             Fri 17 Apr 2026 08:00:24 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:24 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:24 +0000
Files and hashes:         1: 0YpW1qFOZ2P8dzOopflDHbdWjLU.crl (hash: wJYl0qh05K0uijv2S5hjxVfxXeqIUhEYag3kv3ZPzIU=)
                          2: 1-BUCojs1oWaXAaxy03s5Db9MiJk.roa (hash: tiMBJlRoBCDWpjG2YxYym9l9MTTcSiD5be7NjPI5OEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:93:24:4c:75:34:d1:c5:a8:00:5c:82:bc:e1:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
        Validity
            Not Before: Apr 17 08:00:24 2026 GMT
            Not After : Apr 18 08:00:24 2026 GMT
        Subject: CN=448df64f1e4148983a01be34fac0d395db8cccba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:44:cc:5a:9c:96:77:7a:a6:8d:5b:d1:44:3f:
                    dc:0d:6d:0b:d2:46:b6:5d:48:c1:2d:1e:5d:5b:e4:
                    d4:3a:be:59:cd:1a:75:6c:b6:70:83:2b:87:a5:8a:
                    57:72:e0:ff:80:fc:44:58:bf:43:5a:02:da:20:aa:
                    71:9e:f2:2a:c8:bc:d0:fe:f9:d3:40:bb:7e:55:26:
                    69:d5:ca:b9:25:69:2c:ec:b8:9c:58:ad:13:2f:c6:
                    14:6a:82:9d:57:62:1e:02:c9:57:4a:a3:b2:08:86:
                    e9:97:df:5c:4c:5e:a4:7f:05:e1:ce:9e:8c:79:44:
                    0d:15:85:b5:fe:91:5f:9a:63:4d:ae:ee:ae:30:a7:
                    0e:34:bd:2b:92:af:13:28:eb:b3:66:bb:98:5c:84:
                    a9:6f:32:76:d8:6e:49:ce:f8:c7:f7:35:71:12:c9:
                    69:c9:be:33:03:86:ae:4c:4e:45:1c:cd:a2:55:cc:
                    34:10:1a:a5:a4:e6:87:c2:04:cc:85:d3:5b:a4:7f:
                    17:26:20:8c:6b:f0:e2:6f:09:f3:1a:0c:ec:d4:b9:
                    79:47:05:29:6f:7c:85:c0:74:4a:ce:31:28:82:f2:
                    a0:02:39:e9:3a:37:c3:9f:0b:3d:21:08:60:6d:65:
                    a9:28:ac:35:13:58:32:d7:16:b5:71:0a:cf:b7:2d:
                    37:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8D:F6:4F:1E:41:48:98:3A:01:BE:34:FA:C0:D3:95:DB:8C:CC:BA
            X509v3 Authority Key Identifier:
                keyid:D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:26:59:f3:04:dd:31:ce:2e:83:a0:67:e6:d1:f5:6e:98:
         06:09:8e:06:75:0d:99:73:f3:ef:23:03:63:17:2d:c5:db:af:
         6a:22:94:83:b3:18:76:3d:e0:45:8d:f5:7f:c2:2e:3f:2f:02:
         6a:f5:21:56:1b:3f:b1:48:99:c3:83:ad:96:5e:25:f0:2f:b7:
         41:13:5d:ff:a5:25:97:06:cb:ae:51:a1:3d:cf:2b:5c:c6:1a:
         3d:3f:35:58:c8:ca:a0:a5:65:1f:ab:5d:95:6f:b2:cf:95:a4:
         a9:54:5e:88:dd:73:2f:94:cc:3d:cb:4a:be:e2:e5:a6:0f:f7:
         e2:5c:23:3d:31:11:f6:b6:59:86:00:1b:3b:b0:cd:c7:af:e7:
         65:c1:4c:5a:04:fe:3f:8e:f4:7d:8b:c6:0d:2d:3e:85:af:62:
         9d:94:16:27:54:c0:f4:21:c9:1b:e4:92:5b:16:e8:b8:25:95:
         9a:2c:5c:a1:49:14:8b:f3:41:40:7f:9e:c8:c6:01:d3:a7:3a:
         9e:6f:61:c2:82:8a:13:e8:ed:ad:2a:7e:04:e6:4c:33:9d:be:
         ad:df:3e:8a:82:64:24:39:cb:13:57:d2:58:26:b0:c5:81:0b:
         30:f1:41:78:4b:15:11:21:24:5a:03:58:92:2e:b2:41:a3:e5:
         97:05:b2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:25 2026 by rpki-client