Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
File:                     7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft (raw, json)
Hash identifier:          VM21V6GxYY6S7AGkzzrl+b/sHF1qE41Ksf+iQwyGvW4=
Subject key identifier:   BC:34:45:46:38:1A:EE:F2:82:EB:4C:E0:0C:BE:E2:E9:F4:3E:1F:4C
Authority key identifier: EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64
Certificate issuer:       /CN=eccfdaee1e9eabd80237602961baa25abc69cd64
Certificate serial:       019D981904B771DC3A9D8981F0768CA114D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
Manifest number:          18C2
Signing time:             Thu 16 Apr 2026 21:01:09 +0000
Manifest this update:     Thu 16 Apr 2026 21:01:09 +0000
Manifest next update:     Fri 17 Apr 2026 21:01:09 +0000
Files and hashes:         1: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl (hash: 4l9B5xVhnCvU/VL7pOV6qfpcA+g9BivBGWwZKJlztY0=)
                          2: ice_LDnA6TShJ0tbBNY5iT0MS20.roa (hash: Ne/xr7FxI4PoMf09Z/160yY/95SJ/bfXY5TJhx10TCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:19:04:b7:71:dc:3a:9d:89:81:f0:76:8c:a1:14:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eccfdaee1e9eabd80237602961baa25abc69cd64
        Validity
            Not Before: Apr 16 21:01:09 2026 GMT
            Not After : Apr 17 21:01:09 2026 GMT
        Subject: CN=bc344546381aeef282eb4ce00cbee2e9f43e1f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:dd:77:e0:83:81:3a:af:90:a9:10:88:ab:17:
                    d2:5d:1e:6a:d3:0a:82:55:86:9a:39:f3:69:69:19:
                    cf:98:c5:a5:35:43:b2:1e:24:e3:31:98:76:42:7e:
                    eb:46:b8:92:be:75:51:68:da:ee:e3:47:74:85:99:
                    fe:aa:8f:86:60:31:57:47:98:dd:c1:3b:00:f9:c5:
                    01:5b:df:0b:d6:45:0a:3f:0b:97:ac:0d:dd:54:80:
                    7f:da:0f:23:2b:3d:71:3b:d2:6d:07:00:ef:22:6e:
                    25:7e:75:a0:35:63:1c:fe:9b:ab:12:fc:c3:8a:13:
                    e6:01:ae:93:cb:12:e2:99:2d:a8:ff:3c:a7:ca:a5:
                    ca:b9:2e:c6:6f:d0:e9:6c:a5:b2:fb:a7:41:b7:00:
                    cd:69:1e:92:e6:de:23:5e:7f:c9:de:e2:67:0a:f4:
                    94:7f:ce:7d:ab:b6:5e:3e:70:bf:25:76:55:b0:f2:
                    ac:3f:ba:d4:3d:f6:58:4f:61:51:c7:19:5a:1e:11:
                    61:6b:d1:4f:99:45:04:09:fa:79:e7:86:f8:f0:c3:
                    fa:3b:9e:56:b2:a3:3a:9f:fa:db:30:ad:dd:f8:a7:
                    63:66:4b:da:f4:4c:4c:4e:59:9b:00:1c:2e:d8:6c:
                    8d:d6:87:00:e4:3f:3d:a2:6f:c5:74:08:48:3c:30:
                    19:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:34:45:46:38:1A:EE:F2:82:EB:4C:E0:0C:BE:E2:E9:F4:3E:1F:4C
            X509v3 Authority Key Identifier:
                keyid:EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a2:86:d0:1f:c3:bd:62:7c:52:9b:1e:4e:0d:f9:d0:34:09:
         40:f5:58:e5:27:74:b6:ad:a3:f5:f8:31:d3:fb:84:08:a9:c9:
         f7:63:80:03:07:04:4f:72:f6:07:5c:5d:5f:3b:00:19:44:69:
         e4:bd:b6:30:ae:47:2f:6a:9b:f2:47:98:bd:2c:36:a1:2f:7c:
         ed:98:19:16:77:17:b8:d4:bb:11:22:05:25:d6:00:af:66:d1:
         dd:89:d8:67:d6:bb:4f:7b:ef:03:82:2f:ed:35:eb:c8:5e:fa:
         f7:f0:85:45:a4:2b:a6:d9:15:3c:0a:ac:e0:81:76:54:54:fa:
         09:bf:26:04:29:07:b6:96:cd:69:61:58:5b:e1:86:dd:56:94:
         c1:4a:a0:ce:95:08:78:82:f1:79:bf:ce:aa:48:6e:96:22:fa:
         83:77:bb:92:52:8c:26:73:6d:45:32:3b:b4:cb:0b:db:4f:a7:
         71:48:ac:7c:4b:8f:a1:82:da:4d:84:f2:18:46:ba:f1:4f:58:
         73:cc:c7:c5:db:26:67:d7:70:cc:ce:d8:24:d3:01:7a:70:6b:
         25:f8:2a:b6:fa:09:1a:31:35:ee:53:ef:82:0b:6d:12:34:d4:
         1e:a6:fd:55:a4:1c:1a:ba:a2:4f:55:b0:d1:a0:80:99:aa:61:
         4d:79:c1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:47 2026 by rpki-client