Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
File:                     w7DVNe688o5grJiuSVs0mBtak-w.mft (raw, json)
Hash identifier:          rv7ryRuvebkizSVBTA6Ab85HXzrT0NQL2oEeCt/h+B8=
Subject key identifier:   69:2A:FF:93:33:76:ED:DD:74:02:9B:94:1E:79:E8:52:8C:DA:C8:83
Authority key identifier: C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
Certificate issuer:       /CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Certificate serial:       019D992BC90F92CC1D3AEF4553BBD04F7C3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
Manifest number:          18C7
Signing time:             Fri 17 Apr 2026 02:01:16 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:16 +0000
Manifest next update:     Sat 18 Apr 2026 02:01:16 +0000
Files and hashes:         1: Ds_F00ohq3nXWLzRmi9aEPr67nU.roa (hash: 1EvXZP4sj8Rg0yDZm/YIiaxWg+BbA76mSJSuIRiuH9c=)
                          2: P12XKmajnQzt4TT10Louk6Kjyco.roa (hash: KqnQ+RYQfRbLN2Brq+Uz+gVyYb0l27obpG7KQSdsmEk=)
                          3: fePx0kRYwwPcb_zt9-rrwAjmN1w.roa (hash: 4KZtW3GQm6K/quUvrFVgvmKhOxzcCLWTN+/j8SN4EQI=)
                          4: w7DVNe688o5grJiuSVs0mBtak-w.crl (hash: O4tY93lulhNkER4auEsaLAValaprThm9a0YFL/y4pDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:c9:0f:92:cc:1d:3a:ef:45:53:bb:d0:4f:7c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
        Validity
            Not Before: Apr 17 02:01:16 2026 GMT
            Not After : Apr 18 02:01:16 2026 GMT
        Subject: CN=692aff933376eddd74029b941e79e8528cdac883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:66:e2:85:18:d3:1d:f0:d6:de:bd:07:ed:f8:
                    21:83:58:b6:c7:70:69:d8:3f:eb:0a:45:93:4c:20:
                    4d:09:b8:15:df:ae:4c:15:70:45:dc:1d:32:db:ec:
                    45:c1:72:8f:9f:a3:54:f0:43:9f:50:3d:76:a0:55:
                    0c:48:71:2f:55:db:f0:53:c4:bd:32:c5:bc:f9:3f:
                    fe:cb:1b:b9:8a:a7:06:be:61:c3:cb:6d:33:dd:2e:
                    00:59:4f:7c:ae:c7:3e:10:41:16:f0:29:e7:e3:ba:
                    92:a5:3e:75:8b:0a:d7:3e:a7:85:d1:86:bc:28:1c:
                    7c:5e:ac:bb:20:e7:9b:f8:92:84:86:8c:7c:02:2a:
                    8e:fd:24:a3:46:cf:34:80:0f:fc:ea:b4:99:f1:db:
                    d2:8e:e8:7f:89:a7:d4:57:d9:91:c2:e8:44:7f:99:
                    3e:34:e6:0b:b4:fa:f3:b1:3e:d6:41:1e:95:4d:be:
                    8e:c6:66:55:81:2f:74:3f:d8:6d:6b:46:1c:6d:e7:
                    bb:13:d9:de:47:54:c0:31:3b:60:f2:19:96:65:d6:
                    c6:60:78:28:8c:19:3e:0a:fd:9a:a3:95:bc:e7:47:
                    fb:e5:e5:89:f6:a5:d7:53:ac:cb:f3:80:ec:53:f0:
                    59:6f:a1:68:61:a5:bc:54:36:a4:e9:17:e3:2e:fb:
                    d7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2A:FF:93:33:76:ED:DD:74:02:9B:94:1E:79:E8:52:8C:DA:C8:83
            X509v3 Authority Key Identifier:
                keyid:C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:01:d6:62:fd:d4:65:7e:98:91:88:ce:95:11:33:88:94:1b:
         a7:7b:c2:20:c7:e8:3e:60:9b:0b:b7:ba:49:04:02:99:d7:5d:
         6f:7c:1d:54:4b:62:87:d0:24:17:16:83:6f:f0:60:91:c8:77:
         e6:71:83:21:68:32:6c:24:bd:00:63:c8:46:98:f5:12:da:a3:
         9a:40:0d:ce:22:d9:26:97:c1:8a:0f:7e:12:59:2e:f1:ed:1c:
         c4:7e:63:f8:42:2e:87:41:e2:01:64:49:6d:34:f0:f9:9e:e1:
         f4:07:55:6a:b9:89:de:2c:84:93:e8:be:a0:9e:fe:98:a4:28:
         ae:75:18:02:67:0c:0d:61:ae:14:8c:d6:22:95:11:3f:7e:20:
         ac:d3:b2:4d:be:3a:9a:19:06:b5:01:cc:3e:60:a4:0d:15:0c:
         1d:8c:8a:2a:70:15:2f:d4:72:eb:28:22:38:08:15:d8:3a:d5:
         d0:84:eb:9d:96:dd:a7:c4:93:84:3e:8b:3c:88:cc:f9:d1:f1:
         0a:64:8f:dc:66:06:60:93:24:d9:9b:b9:86:b0:1a:5b:93:fd:
         71:3d:9f:54:b2:61:49:ff:5c:a3:6f:bb:cc:1f:a0:cf:c7:df:
         9c:79:99:00:09:26:18:3e:4c:41:76:a7:f4:c9:3a:f5:46:1e:
         17:54:44:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:13 2026 by rpki-client