Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File:                     08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier:          L4TpUCINUpXBMf4LsoXjEpMSAnqwUr7DE3BBKz+q+N4=
Subject key identifier:   38:1D:6F:6D:C5:4D:FD:EC:08:9A:B1:1A:98:8E:F0:C0:29:DC:D6:DF
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer:       /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial:       019D98865E01F032181A16CDFF708FFE06D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number:          18C1
Signing time:             Thu 16 Apr 2026 23:00:35 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:35 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:35 +0000
Files and hashes:         1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: 6e2n5F+0q2Hu31DOhfOojZkilM/JvigV/UfN805+z7k=)
                          2: kDYFCwOTqCtWju9awtc-WWDQSp4.roa (hash: niu24Rn9CdcANUXflUaTh1yPPLtTi4dexe3GG8dp0NU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 23:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:5e:01:f0:32:18:1a:16:cd:ff:70:8f:fe:06:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
        Validity
            Not Before: Apr 16 23:00:35 2026 GMT
            Not After : Apr 17 23:00:35 2026 GMT
        Subject: CN=381d6f6dc54dfdec089ab11a988ef0c029dcd6df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ae:f4:18:87:5f:5e:c2:43:56:7d:da:9e:12:
                    10:39:a8:07:e6:de:9e:80:a5:2f:a9:cb:26:63:6e:
                    be:0b:b3:68:9b:19:b7:12:0a:ac:97:29:53:57:6d:
                    8f:c6:7b:46:07:b1:95:4c:6e:17:b5:a7:2d:fe:ce:
                    17:28:2f:cc:02:5e:17:e5:67:8a:6d:a1:d8:78:e2:
                    50:58:a3:48:2c:de:3b:f0:3d:eb:96:d4:73:a8:2c:
                    04:3b:d1:09:af:c5:6f:58:13:b2:06:80:43:fa:14:
                    f1:69:c2:6c:00:e2:a3:87:c6:65:13:9d:ff:a3:61:
                    0a:88:b5:ac:a6:e1:c3:54:55:50:23:be:69:8a:96:
                    33:19:a7:7f:52:f2:bb:00:64:aa:9d:1d:4e:f6:80:
                    2b:56:32:6c:f0:b9:ad:3b:fa:7b:2a:04:0a:9e:59:
                    1e:3c:4d:56:ce:22:76:54:7a:80:f9:7f:00:0e:ed:
                    6a:6c:a3:9f:6a:e3:d4:d3:f7:3c:1d:71:61:95:ac:
                    fe:11:9c:46:bb:2f:1e:5c:59:f9:c1:84:7b:e9:64:
                    75:54:3c:54:be:bc:19:66:fb:cd:eb:90:0e:03:11:
                    07:01:a0:b1:26:14:2f:19:48:f8:a7:aa:7b:d6:61:
                    fa:e2:e8:79:7a:86:04:36:27:c1:d8:e7:a7:a0:d6:
                    d7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1D:6F:6D:C5:4D:FD:EC:08:9A:B1:1A:98:8E:F0:C0:29:DC:D6:DF
            X509v3 Authority Key Identifier:
                keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d7:9b:ad:d2:aa:8e:e5:9f:54:8c:dd:04:86:17:5c:f9:ce:
         15:5f:4e:81:d2:c4:35:db:2c:c5:b2:d1:3c:c1:75:a5:54:15:
         8f:9e:c4:04:af:c6:9b:88:ed:75:ae:59:8a:4e:04:71:98:85:
         03:74:02:79:ce:80:39:9c:c8:10:19:8a:0c:5d:a4:4e:0e:8f:
         0a:8d:28:21:cf:80:8b:d9:42:44:19:e3:c5:ab:5a:45:dd:5b:
         c9:12:5c:11:f8:b6:24:1a:17:23:bc:9f:74:5c:ea:f2:e5:a9:
         1b:84:fc:87:f3:f9:4d:3d:11:ec:7b:d3:34:74:cd:ee:9a:31:
         56:7d:4e:2c:fe:c9:fb:75:c8:f6:ac:fd:0b:1a:3e:0a:41:50:
         d5:be:8d:e7:00:3c:95:52:da:e8:41:68:a5:71:4f:d1:20:19:
         9b:14:af:d9:74:5d:db:8a:26:4f:96:4a:db:75:c7:c6:29:45:
         77:6e:a6:66:e9:38:5b:6b:26:cf:b0:96:b6:ad:96:ef:52:34:
         4d:a9:08:bf:3a:91:e0:f2:2b:cc:bc:38:2a:f5:ea:55:84:e9:
         ff:2b:d3:8f:3a:1d:ee:75:78:a5:bb:7f:7b:98:f6:28:2f:ea:
         0a:eb:fb:42:92:eb:07:b8:3e:bb:96:b6:2d:ab:e4:51:3e:84:
         53:96:82:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:25:30 2026 by rpki-client