Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
File:                     ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft (raw, json)
Hash identifier:          S8s0PCUwMq7lrRYBOS633jKR4hV74KlPRZkXHv2q8Q4=
Subject key identifier:   3D:5F:A6:9A:3E:A3:5F:F1:8D:88:C1:3C:AC:66:D6:17:3B:35:FB:EE
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Certificate issuer:       /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial:       019D9962309046B0969938107A698C95FFD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
Manifest number:          18FE
Signing time:             Fri 17 Apr 2026 03:00:42 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:42 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:42 +0000
Files and hashes:         1: 5dAVtaJIi1EXqqYU5USv7fZXPs4.roa (hash: F+ZaLmkSoDDXKvEZfC55Pqn2Kegitmab6UvzlFAoMLA=)
                          2: EYW0DPWxBVq8OkJlufsQTH29-zg.roa (hash: LYmKFSnt04HxJKJsThK8gfh7k7FUGUtbXQNPAEzqIUM=)
                          3: ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl (hash: ijg4zNuen8Rx8fpdN1lEgcipyqART2KolBCsr5LmtVs=)
                          4: WyfVVVbupjvPxLzRmrpKaA7AkYw.roa (hash: 02QZajpOlAkNu8PwY46zt4fm5XsA4QV5bfhzU3rgZmo=)
                          5: Y_29QVsVJvHnxddFaQdcq2kyCOc.roa (hash: ycsC5DW4Lfa6OQ8J1BIx0zDPciZcjwI4JTfmbrMI8V0=)
                          6: _MW7W40W598GgASR5Eoa_4tP1ko.roa (hash: aru9WUwoYSO6XyN5TKKL7ZyhgIa+93XhWqRZBdE8/Ss=)
                          7: yGko-YtBNaNvOP4tDs7GDUXg2eA.roa (hash: wSaHrBildo4ZcOo9cc+dzQPk/7VlKqTO3FnCX6x1CG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:30:90:46:b0:96:99:38:10:7a:69:8c:95:ff:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
        Validity
            Not Before: Apr 17 03:00:42 2026 GMT
            Not After : Apr 18 03:00:42 2026 GMT
        Subject: CN=3d5fa69a3ea35ff18d88c13cac66d6173b35fbee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3e:72:66:36:f9:0a:86:65:25:63:50:28:48:
                    c3:dd:38:69:5b:c1:2c:31:12:b3:69:18:e1:bd:ff:
                    32:e9:6c:0b:53:e2:d4:8f:e8:e1:34:76:dd:25:29:
                    70:9f:41:3f:6e:69:37:dc:70:60:f9:ab:71:64:35:
                    c0:7a:c3:01:e4:bc:ed:5f:ec:dc:ca:24:f4:e3:63:
                    63:98:1f:f6:5b:da:58:17:17:e2:f3:14:d7:66:f9:
                    02:36:92:42:a6:cc:71:33:da:1c:9a:d1:a8:43:9d:
                    66:6e:47:d5:da:08:0f:cb:e8:5b:d8:e7:74:b9:0c:
                    53:1b:e1:44:e6:80:a4:ff:96:e9:8e:8a:b8:ba:c8:
                    9e:04:07:76:b5:d9:35:53:54:77:d3:69:68:27:84:
                    9e:6d:5f:c2:e2:e6:e5:30:b0:56:f7:bc:77:a9:d5:
                    a7:09:d5:90:18:c1:08:af:20:81:9c:9e:c4:cf:42:
                    eb:4a:41:2d:b9:6f:03:93:c3:f9:35:b8:53:55:81:
                    33:ef:73:56:59:69:d3:e4:c7:e0:95:fb:e5:96:42:
                    52:9f:35:ca:71:16:53:cc:0f:fc:21:05:7d:bd:b1:
                    fb:d0:be:0f:93:92:23:ae:b8:a7:e1:66:88:a9:fc:
                    e9:ee:e3:41:07:a5:3d:a7:e8:a8:83:40:b5:5c:d0:
                    5f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5F:A6:9A:3E:A3:5F:F1:8D:88:C1:3C:AC:66:D6:17:3B:35:FB:EE
            X509v3 Authority Key Identifier:
                keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:79:9f:0d:23:2e:75:e7:f7:b7:0a:fb:a2:45:2c:c5:64:43:
         88:ec:64:47:44:c5:09:91:66:f5:c8:e0:6c:a1:49:15:08:db:
         d1:9c:ec:47:6b:04:1e:13:95:4c:4a:58:29:6f:83:c8:8a:8e:
         f0:ef:6d:a5:8f:88:d8:13:f3:5a:90:70:46:be:03:b9:3a:23:
         85:e1:55:0d:66:0b:99:b7:93:9e:6e:a6:6f:cd:13:0c:64:ea:
         a2:ab:59:15:25:a7:58:8c:1b:38:d8:2a:1f:c2:da:fc:df:b2:
         2f:85:f7:c2:bb:45:d8:1e:20:8a:eb:ae:aa:7d:e2:a4:3c:fd:
         a9:ed:80:05:a6:8e:f9:47:2f:8e:d9:33:b9:3d:2b:9f:1a:4c:
         6a:2f:bb:d9:5a:cf:86:bb:41:68:84:d6:90:5a:5c:8d:e4:48:
         a4:6e:02:ea:6a:3d:89:bf:02:cb:b5:52:dd:b7:8e:d6:68:f4:
         3b:38:f7:7a:e8:d2:17:8f:a7:dd:0d:8d:a6:41:6e:f6:31:27:
         73:94:be:9d:d3:ae:87:76:a0:4b:64:22:ff:7e:38:be:17:9c:
         39:73:f5:e5:0c:67:8a:49:31:bf:4e:9d:4d:4d:33:31:03:30:
         19:b0:b8:a4:aa:5b:39:84:df:54:1f:3c:b2:07:a4:08:cf:2d:
         79:c2:84:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:07:07 2026 by rpki-client