Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
File:                     zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft (raw, json)
Hash identifier:          anbML1+0jxg92r6FxZG3AHBNYIOv+Ip78/qnNmMIqEE=
Subject key identifier:   FF:D5:62:AC:7C:5B:95:81:D6:FB:2B:9E:59:AF:2A:4E:E4:96:CC:E4
Authority key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
Certificate issuer:       /CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Certificate serial:       019DA52F4668D722F249948A1B8ADCA90649
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
Manifest number:          18C5
Signing time:             Sun 19 Apr 2026 10:00:31 +0000
Manifest this update:     Sun 19 Apr 2026 10:00:31 +0000
Manifest next update:     Mon 20 Apr 2026 10:00:31 +0000
Files and hashes:         1: TAemyk33p1zXgyxiSJqWPeQVynw.roa (hash: qzyHhOuBo7tPm0yMPXt6srTNFtIZysUY2o24I/uqBiU=)
                          2: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl (hash: h9s2W2iVeQDEyRJ5Guv36eqLkYinubZn9kbSPq9k/Qw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:2f:46:68:d7:22:f2:49:94:8a:1b:8a:dc:a9:06:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
        Validity
            Not Before: Apr 19 10:00:31 2026 GMT
            Not After : Apr 20 10:00:31 2026 GMT
        Subject: CN=ffd562ac7c5b9581d6fb2b9e59af2a4ee496cce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c1:48:66:f1:4a:c0:4b:43:ac:c8:f2:df:04:
                    79:85:05:74:a5:8a:bc:63:6e:1a:cc:e7:dd:2d:33:
                    e8:56:91:ec:05:48:e0:84:63:e2:8e:1e:48:46:17:
                    3b:3b:e1:a6:83:d9:2b:b8:7c:5a:84:e1:37:97:17:
                    bf:42:d5:d8:25:fc:3f:b2:99:76:75:67:23:34:78:
                    a5:9f:a2:2d:d8:13:80:a6:dd:a6:bc:92:a8:db:6c:
                    3f:f6:0c:54:79:27:7b:f3:bd:e2:f0:58:40:0e:27:
                    c3:02:1e:49:a4:11:d0:82:34:e3:81:d8:91:89:92:
                    33:4f:dc:c7:fa:0c:4e:21:29:fe:8d:12:9e:90:de:
                    de:0b:46:cf:c4:2e:83:35:5a:a3:e2:83:7a:2f:ed:
                    a1:ca:5d:f2:65:51:af:c1:5a:94:f0:37:85:e7:18:
                    c4:b9:2b:f6:49:15:df:f3:74:de:61:13:36:3f:49:
                    27:f3:7c:9e:dd:ed:a9:68:37:b0:d2:99:25:cd:6b:
                    ec:ae:43:79:c4:14:65:fc:2c:80:97:91:26:33:37:
                    f0:dd:f5:6a:a6:8a:68:cc:d9:be:9f:ea:2d:eb:ec:
                    5d:ff:67:81:8c:33:ec:34:8c:69:87:ae:e5:bc:99:
                    90:e7:c8:18:62:70:6c:00:fe:dc:d2:65:82:29:41:
                    ab:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D5:62:AC:7C:5B:95:81:D6:FB:2B:9E:59:AF:2A:4E:E4:96:CC:E4
            X509v3 Authority Key Identifier:
                keyid:CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:1d:3a:05:5d:41:93:75:d4:04:20:ea:5f:41:ae:42:be:3d:
         b3:c7:85:68:19:0b:27:83:67:58:90:65:ec:20:68:4d:c6:61:
         5f:4d:f6:65:ea:9b:c0:91:ff:57:c8:d4:82:45:c6:f0:e1:23:
         e8:4f:9b:3c:a1:13:41:52:e0:a8:ba:85:0b:99:39:59:d0:1d:
         85:a4:75:df:25:b4:5e:95:18:09:99:da:92:3d:8a:9c:1f:cd:
         2c:b7:ae:9c:00:da:81:de:69:b3:da:e9:a5:78:10:2c:36:38:
         88:8a:5e:98:ac:bf:40:df:4c:ff:13:0e:ee:5c:e2:f9:8e:cb:
         f0:95:83:d1:87:00:0d:6b:40:b7:69:bf:01:28:d9:0c:d2:09:
         2d:d1:d1:32:c7:9d:28:6f:f3:6c:11:76:0a:d2:a2:46:13:a2:
         f4:86:28:df:c3:46:b5:24:62:41:d0:fd:44:f1:e2:ab:0e:b0:
         6e:15:d9:47:c2:b0:b0:89:a7:33:99:36:43:dd:46:cd:b4:21:
         22:fc:df:56:96:b6:32:44:97:19:29:18:6f:ef:8e:ef:fd:da:
         d5:1f:56:ff:17:95:54:9c:26:16:79:33:e3:fa:e5:69:36:29:
         49:65:04:60:24:9f:3a:38:fc:d0:f7:57:30:21:e2:a3:ac:b9:
         11:38:eb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:21:09 2026 by rpki-client