Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
File:                     4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json)
Hash identifier:          Wx5A9FSQMv0b2Op5zVbHR+mWzyb4xN9wLLmZh1LOfKA=
Subject key identifier:   AC:3B:E5:6A:55:6A:05:F6:A9:B6:5B:DA:D4:87:35:B8:69:73:5C:09
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Certificate issuer:       /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial:       019D98188A951B03C13C63ECD22609E25304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
Manifest number:          18C1
Signing time:             Thu 16 Apr 2026 21:00:38 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:38 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:38 +0000
Files and hashes:         1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: 6hrsLzPwnYakPAjNLhWPnmZyYPPE6zLWHSpiHbzJXns=)
                          2: KrzOKl1qlDpYWxV-juWfSYeX7Gg.roa (hash: sm+bvfJZr3b8QZ7AAJ4wrF+UsO9vk0OydT19C79k6CE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:8a:95:1b:03:c1:3c:63:ec:d2:26:09:e2:53:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
        Validity
            Not Before: Apr 16 21:00:38 2026 GMT
            Not After : Apr 17 21:00:38 2026 GMT
        Subject: CN=ac3be56a556a05f6a9b65bdad48735b869735c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b9:a3:84:42:c2:0b:16:e0:db:1d:e8:fb:9c:
                    80:07:dc:ef:2a:73:7c:4f:18:eb:2f:f0:e9:2e:52:
                    f0:e9:36:07:10:5d:55:2e:18:21:10:52:8c:dd:c0:
                    e4:02:b8:c7:49:fc:8c:22:53:37:4b:cd:a7:02:7c:
                    9f:eb:40:c7:12:44:50:1a:38:8b:b8:a8:3a:79:f9:
                    82:e9:98:9c:9a:e9:c6:91:fd:ee:1b:01:a6:9d:86:
                    a1:dc:8d:58:7c:b7:1a:00:9f:98:10:be:b8:91:4d:
                    31:8a:82:f5:b6:1a:43:77:2f:af:80:c0:2c:ed:5f:
                    9f:9d:51:ef:43:8e:d0:e4:b4:32:bd:12:fd:5c:e7:
                    c9:72:7e:6d:8b:95:ee:f5:01:0f:9d:5c:b1:24:ec:
                    78:6d:df:d5:2d:87:fc:65:51:53:2e:15:48:0b:f8:
                    bb:bd:cb:ff:6b:45:76:90:ba:ae:8a:c9:43:d0:88:
                    b6:f6:82:4f:5d:20:b6:78:65:18:91:e0:ee:5b:09:
                    9e:b2:42:30:0d:da:83:5c:bf:a7:7a:09:54:fb:39:
                    01:10:fd:48:59:86:69:ed:ca:a0:7b:26:55:e1:e7:
                    bb:75:fd:3e:d9:4d:3c:5e:36:0b:50:53:55:03:2f:
                    87:9d:88:f8:1a:27:ae:b7:fb:9e:85:bf:05:a5:09:
                    7f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3B:E5:6A:55:6A:05:F6:A9:B6:5B:DA:D4:87:35:B8:69:73:5C:09
            X509v3 Authority Key Identifier:
                keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d8:6b:86:37:41:fe:e9:cb:8a:43:1f:3f:1b:69:f1:a2:e4:
         aa:d7:8b:28:f2:54:7d:3b:2d:74:39:a1:23:07:09:a4:98:d6:
         da:e5:f7:84:65:66:6d:6d:5b:cc:5f:7d:ea:59:d7:b8:92:06:
         26:7c:1d:6c:14:9f:d3:26:45:2d:8a:72:24:67:94:f2:13:5c:
         46:6c:33:35:47:0d:20:cf:f4:0a:85:3b:a7:bf:ba:b2:3c:7a:
         db:f0:7d:07:07:21:50:73:1b:2a:4c:5e:1b:60:79:d9:a1:df:
         4f:58:ec:e9:c0:4b:35:4a:c2:25:b8:7c:2e:08:40:76:5b:14:
         20:db:9d:21:d3:ab:af:ef:68:b2:c7:f1:04:82:da:63:77:76:
         ec:e8:f8:28:d1:89:e1:f2:bd:20:3e:f4:09:b5:63:14:aa:b6:
         3c:d5:38:01:f4:4a:79:9f:a5:6f:52:99:df:cc:bb:d9:34:87:
         bb:5b:f9:68:8f:c6:bf:ed:84:94:9e:e9:02:c9:9b:e2:7d:d5:
         26:95:b5:f2:57:10:d3:61:9a:6a:26:d4:d5:5c:1f:09:8b:df:
         2a:ff:28:70:94:ca:41:27:d0:2d:61:8a:e7:2a:64:a1:12:88:
         cf:2e:9d:ee:ff:d6:27:4a:a3:28:0d:eb:c5:14:ee:c3:50:b8:
         30:9c:60:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:55 2026 by rpki-client