Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
File:                     Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft (raw, json)
Hash identifier:          IK6tJIheGzDkl2wTQS6nKOjFHnLSxuZWx64HpG6zdsg=
Subject key identifier:   C7:FC:66:DC:A0:AB:6F:C2:FD:58:77:A3:75:85:C1:E8:C9:F5:C9:E0
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Certificate issuer:       /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial:       019D9B50C08379ABF3D532A25235FE297635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
Manifest number:          18C8
Signing time:             Fri 17 Apr 2026 12:00:53 +0000
Manifest this update:     Fri 17 Apr 2026 12:00:53 +0000
Manifest next update:     Sat 18 Apr 2026 12:00:53 +0000
Files and hashes:         1: 1N902uWxBewZ5PtMsS3s5KUkFgs.roa (hash: o8+FHwdwrm2FTsBbNR1O1Ec7gfE8MxmnmProyM8q4BU=)
                          2: 2DNY0VHjCzgXwvjQNfwSv13IiMs.roa (hash: 8hJ99PzYGO7rhyJIiR2XiqspVTy1Mvm/8YAqXh3HlZM=)
                          3: Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl (hash: CNu2EVML9xQeEJTjUSaK8kCpYdb5vAGzlccQXKZXd9Y=)
                          4: NdaVlYyGJzmfbtga--jSELZwlbE.roa (hash: 44YtoyTu9IHJo6Ox432rtAmIAiFL2xtPhJVn1fVc8ls=)
                          5: PXLUhkQGAdUhNdDhpDuX0qygtu4.roa (hash: C+ltPVNXFjYPNIseXTX/KmgQFlM5AY25yJREciY6tp8=)
                          6: ScefcWvuVGksXbQ0acoDdIYtZjE.roa (hash: l6JU0XgsxIoGIXcMc/fmzvrEp0Yz0Adf89ehE860isQ=)
                          7: YPVTV3WJ_kGERtyfsujU7TWmTuo.roa (hash: 3mQ5HyF6SXyaMb4D8sGEX7HkxBwBKSkoqI68TSckUnY=)
                          8: h4TS8P3Y9MPkSGxAwU5ny5ii-0Q.roa (hash: Z3pTNwIsVEmIXkCWPiwIUSynncIo2xxknOvYt/KXrfg=)
                          9: khuyur07z0KIfw77cPqiILd6kWM.roa (hash: jw4UZ6Kl6Ypyl46B52Rks2JHmI7Dr2yJY3HZEtC2NY0=)
                          10: t4QXxCvVmATXxT0HCiqC_03hiYc.roa (hash: FFvuRkQsX/cM6EacvCjfXpy5kO0eYWaiz4Ci86Jfl6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:c0:83:79:ab:f3:d5:32:a2:52:35:fe:29:76:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
        Validity
            Not Before: Apr 17 12:00:53 2026 GMT
            Not After : Apr 18 12:00:53 2026 GMT
        Subject: CN=c7fc66dca0ab6fc2fd5877a37585c1e8c9f5c9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6c:06:1d:27:30:93:c9:10:0c:76:09:de:6f:
                    93:05:bb:e5:9b:e1:29:50:93:02:f0:2b:d6:ed:3e:
                    4d:21:4a:a5:96:94:d2:cd:6e:00:14:95:ea:a4:b8:
                    30:80:d0:58:46:e5:84:39:e6:b2:49:ea:3e:00:93:
                    33:58:1e:26:87:4c:29:a3:c2:2c:60:eb:57:0c:1c:
                    b9:b3:92:d0:52:e3:8c:cf:c2:27:c7:54:f7:a4:0b:
                    6a:f0:6c:0d:1e:27:37:11:d3:4f:63:eb:2f:61:ef:
                    79:21:d4:3d:e0:91:c2:b0:55:7d:9a:fc:96:ab:2f:
                    d4:49:01:b5:27:8b:f7:40:8c:16:29:78:3e:b4:73:
                    57:02:3a:39:64:c9:fe:1f:32:46:78:32:3f:58:0a:
                    c6:b0:7b:d7:9b:25:51:b2:ed:34:9d:c5:5b:4c:38:
                    5d:af:98:9f:f7:cf:be:f3:9b:f5:07:bd:a1:91:a1:
                    18:80:34:ee:9c:08:7a:89:79:39:a1:e3:de:60:ef:
                    a9:0f:75:b5:94:b0:87:72:2a:33:4f:7a:37:90:8e:
                    81:5f:e5:dd:a2:3b:7e:76:dc:21:95:e8:e7:4b:39:
                    76:f6:76:5a:ea:fb:79:c8:43:3e:1f:c1:e9:74:e4:
                    d3:af:fc:99:3b:e6:b1:b7:24:81:7d:d3:16:f6:f9:
                    6b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FC:66:DC:A0:AB:6F:C2:FD:58:77:A3:75:85:C1:E8:C9:F5:C9:E0
            X509v3 Authority Key Identifier:
                keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:9c:97:d8:ee:81:95:cf:01:d4:27:20:de:24:a6:81:7a:f0:
         f7:4f:e5:42:44:8e:e9:74:df:7a:1c:7f:0b:77:88:28:a4:79:
         64:dc:91:c4:e3:11:5d:85:82:10:5b:fa:53:88:ac:1e:8c:e2:
         f5:c1:25:66:0f:fe:b3:d8:d0:14:4c:fa:cf:60:75:dc:87:92:
         b1:f4:8d:a6:33:3d:d7:23:f3:b6:eb:d9:6a:d1:eb:ce:3b:0c:
         6b:e7:e1:23:25:51:64:2a:74:e5:59:4b:3f:38:6c:61:80:e0:
         aa:32:7e:68:86:d3:96:50:d1:40:26:fe:56:b6:d4:4b:1a:83:
         b7:09:a4:96:d5:77:c2:06:38:75:d7:d5:29:4e:a0:96:fa:f3:
         d8:7c:48:35:39:15:e3:06:c4:6b:3b:36:6f:48:a5:2d:98:35:
         87:09:1a:1b:1a:33:73:2e:a5:4a:82:2a:1d:13:45:06:60:f3:
         1f:99:14:c4:97:1b:4d:6c:f6:9a:43:05:9d:93:88:a4:b0:94:
         12:d5:78:82:00:fe:25:97:c5:8a:80:05:a5:0b:42:ac:b6:15:
         e0:5e:4f:56:08:e9:3e:84:82:5b:a0:42:ff:e4:a6:b9:df:e3:
         fb:29:a3:7d:ef:ec:a3:99:44:d7:fc:bf:16:c0:6d:ae:20:b7:
         f1:34:b0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:30:56 2026 by rpki-client