Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
File:                     4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft (raw, json)
Hash identifier:          GwIxEYl0xcyKe7hNrsX9CeetbHJsT7whq9KptV+h7Mc=
Subject key identifier:   30:2A:B1:EA:54:38:EF:20:91:C1:74:56:98:8D:FA:A2:38:3A:5B:95
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Certificate issuer:       /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial:       019D98BD3F7103D7EAF398478575677FAE01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
Manifest number:          18D2
Signing time:             Fri 17 Apr 2026 00:00:32 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:32 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:32 +0000
Files and hashes:         1: 4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl (hash: tQbaTsM/T02uTvvap5VhM3VGfm+IKX2ufrMAwp4Oo9Q=)
                          2: QoYf0tAUEKqIrSmIG2tWWODeEqY.roa (hash: xUGeL/d9PAos8zWTD1cTYvl/O/Fd7xB/QfyjZxYeQ2g=)
                          3: s5zHySgUNC4r9yyDLUGS6hKc5AU.roa (hash: MCsyJIJVnFTvjDhLswke9JGgZHvXeY1VQLlom/hhChI=)
                          4: trEBVhTnYojMGk31Am98ZfEdQ9o.roa (hash: ZUjcn+k6KVdZ0YruJwm/37Xg7sBIq8yD/WZghxDB9RQ=)
                          5: u4dfVgTBlyOwWNQ0P6NKkpYOUUQ.roa (hash: w4779kW3IR6Ef4OLAy8K23RNH+GshDoVigRrQzkg78w=)
                          6: xvzjWZWQsB3A6lco8X1BjK51Rro.roa (hash: R+i0CBWTZwrH14DiftjMYo17Tzx/3SLww5XYhZACozo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:3f:71:03:d7:ea:f3:98:47:85:75:67:7f:ae:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
        Validity
            Not Before: Apr 17 00:00:32 2026 GMT
            Not After : Apr 18 00:00:32 2026 GMT
        Subject: CN=302ab1ea5438ef2091c17456988dfaa2383a5b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:27:36:26:1c:c0:0a:0a:6b:44:a0:6f:ae:
                    86:67:4a:9b:54:fb:8f:3e:99:60:43:dc:d4:8a:01:
                    cc:98:79:f0:4f:99:1a:e2:16:bb:84:5e:30:2f:16:
                    f2:e4:08:39:df:8a:45:a1:4c:41:63:fe:9a:c5:87:
                    ad:a2:75:fa:d9:ac:e3:d5:f4:d6:7b:51:b3:83:74:
                    f2:db:68:56:a2:77:6e:e7:52:d1:5d:c5:c8:6c:fd:
                    a1:b8:98:2f:df:a6:9b:64:25:d8:88:a1:82:9e:ce:
                    63:2a:fc:a6:ef:84:cd:78:be:67:8f:dd:26:d0:fb:
                    e8:d5:04:c1:f2:b0:f8:d4:70:a1:1f:76:75:a7:07:
                    59:33:2e:25:74:b2:b7:c1:70:e0:3a:1c:50:3d:d8:
                    00:7c:76:c5:f5:dc:83:bb:55:da:08:15:f8:0e:27:
                    38:a0:c5:b1:d3:1d:bc:87:c9:07:d3:7c:79:bc:c0:
                    af:6a:e9:10:f8:5d:7e:e9:a8:9e:71:c8:5b:f3:69:
                    c8:00:7f:84:4d:80:39:09:62:c3:a4:d4:04:bc:0e:
                    7d:67:81:e5:56:a8:44:ec:4f:c0:40:e7:e1:e0:da:
                    62:48:24:8e:22:87:34:87:12:d5:08:3a:7d:0d:1c:
                    85:61:59:9b:49:8c:e9:bd:9f:95:22:55:12:26:db:
                    78:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2A:B1:EA:54:38:EF:20:91:C1:74:56:98:8D:FA:A2:38:3A:5B:95
            X509v3 Authority Key Identifier:
                keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:22:e3:9e:00:48:82:0e:31:cf:05:fd:31:5e:ae:1a:59:53:
         d2:00:3d:bd:ae:f3:8a:5c:ed:ff:7f:f5:51:4a:9e:43:52:c2:
         58:df:57:f5:37:a8:cb:30:e2:67:95:50:7d:94:cd:45:2d:f6:
         e5:5e:87:33:b8:6b:d4:5b:27:af:7a:8e:3c:2b:4f:11:91:c3:
         f3:b9:26:05:63:a4:f3:b1:8e:e1:aa:ab:e3:76:0a:c8:40:19:
         57:86:93:7b:48:b1:a8:1c:7a:c6:b4:bb:72:33:1f:2e:8a:0e:
         c5:53:12:e0:f3:94:2a:bd:c9:f5:35:eb:60:b1:6d:5a:1c:0b:
         36:49:86:1e:ba:6b:5a:ea:ab:8e:47:ac:69:be:d6:89:8e:2b:
         72:b8:da:9e:12:5e:f6:bf:cc:f6:0f:b8:86:6d:03:4b:4f:07:
         c7:e7:23:c9:24:a9:c9:e5:76:d5:9c:98:b7:36:f9:5d:05:6e:
         a0:eb:b8:0e:72:96:06:f0:5f:99:c8:b0:5d:2c:c5:d9:0b:3b:
         7a:1b:10:22:40:ec:b2:fe:ae:28:0c:fc:70:61:e1:c7:b3:b5:
         66:c2:96:14:e9:7b:4e:1a:6d:ce:0e:40:52:64:1d:ea:75:42:
         a6:83:a2:bc:45:97:91:14:46:80:af:46:8c:55:98:3e:9c:bf:
         73:91:24:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:26:39 2026 by rpki-client