Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.mft
File:                     EAi6VCmnCbxY7NuuPxfhvJ06TVw.mft (raw, json)
Hash identifier:          s1WgXkA+vZ+uqr+J4mOwscaqNdaKQFntPUwLqqnz/EI=
Subject key identifier:   89:90:1C:E3:29:94:6D:4F:F4:08:31:A2:5D:A6:35:4B:7E:F2:4B:6E
Authority key identifier: 10:08:BA:54:29:A7:09:BC:58:EC:DB:AE:3F:17:E1:BC:9D:3A:4D:5C
Certificate issuer:       /CN=1008ba5429a709bc58ecdbae3f17e1bc9d3a4d5c
Certificate serial:       019D97E27BE3446355400B8BB6E52D2F206E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.mft
Manifest number:          18C5
Signing time:             Thu 16 Apr 2026 20:01:35 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:35 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:35 +0000
Files and hashes:         1: 4fqCQSxshLaQaCc6_3eBZkl2VrU.roa (hash: 4/LBW90r+6e8OW/cuccUKjPAX9MCGsSG7Hh7t/idr40=)
                          2: EAi6VCmnCbxY7NuuPxfhvJ06TVw.crl (hash: D+jlNvSpnBCu9YC2zK6/rKosyVG9hHfov0El31BV6Y8=)
                          3: Oe37s-vc86s8rotczppZ1s-JHRw.roa (hash: bLI0fX3EP1ECocdOJFMfjZq1fOytZDavvUAlMr8kej0=)
                          4: eKfPeQ0pVHNDq_anMz-foX-E7BA.roa (hash: Iv1BE8Jw8DIcy2g8xb7OAne6CeQO/s+G+wiNEGvaPmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e2:7b:e3:44:63:55:40:0b:8b:b6:e5:2d:2f:20:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1008ba5429a709bc58ecdbae3f17e1bc9d3a4d5c
        Validity
            Not Before: Apr 16 20:01:35 2026 GMT
            Not After : Apr 17 20:01:35 2026 GMT
        Subject: CN=89901ce329946d4ff40831a25da6354b7ef24b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:03:fc:99:9e:db:34:6f:0d:fd:db:97:fd:70:
                    ff:a1:fc:d7:c5:59:7e:f1:68:50:b8:20:a7:5e:2d:
                    b5:d8:0b:6b:2e:40:80:99:ac:2c:48:af:ca:5c:31:
                    1e:4e:fc:86:73:ca:98:4e:7a:70:6d:82:11:55:26:
                    b9:86:c2:55:64:80:1c:38:6f:42:48:f1:2d:72:56:
                    7f:8a:09:8e:bf:5a:84:62:82:d2:b6:26:7c:ee:bc:
                    9d:93:98:43:6d:0b:27:0a:8d:7c:5a:02:dd:a3:7b:
                    7e:cf:2b:d7:2e:19:44:09:97:c5:a3:ca:8f:2a:95:
                    c6:e2:09:c3:df:11:1a:78:75:0b:c5:55:4d:6a:52:
                    24:b8:fb:be:56:f9:8e:c1:69:5e:f5:0a:2e:92:95:
                    b4:20:37:85:b4:ed:5c:11:f6:d5:70:7d:f1:6b:d6:
                    31:8f:6f:e1:30:6d:82:cc:1a:15:e9:cd:aa:59:af:
                    64:29:0f:a8:7b:9f:dd:e5:52:e0:92:e4:84:c8:96:
                    96:08:8a:11:66:10:bc:06:83:98:b6:d6:81:c6:7b:
                    ed:61:ca:1a:f2:9f:50:ec:f5:bd:cc:14:c5:ec:b0:
                    bf:c8:0b:ac:41:2f:a1:ea:51:85:03:8e:c1:ed:c9:
                    5f:46:15:41:9a:09:da:52:88:8e:15:ab:41:3f:65:
                    51:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:90:1C:E3:29:94:6D:4F:F4:08:31:A2:5D:A6:35:4B:7E:F2:4B:6E
            X509v3 Authority Key Identifier:
                keyid:10:08:BA:54:29:A7:09:BC:58:EC:DB:AE:3F:17:E1:BC:9D:3A:4D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a8:40:41:98:b6:6f:3e:d8:12:34:69:06:85:38:07:0b:25:
         49:d6:74:28:3b:42:f0:6a:e0:c2:7c:6e:a5:df:7e:50:14:6b:
         7a:14:9e:b0:c3:ec:93:25:bd:a4:b3:d2:75:f2:7a:da:16:5d:
         1e:fc:dc:fe:c9:ed:8b:72:c6:b7:e5:87:0e:0d:82:08:63:9b:
         4a:1e:0d:67:be:d7:ad:cf:ba:e9:11:a2:2a:70:13:a5:dd:8e:
         4f:f6:42:28:3d:a2:60:f8:3c:62:3b:16:62:37:3d:e8:67:3e:
         5b:4e:94:91:30:eb:d9:2b:64:6c:6b:ca:74:30:7d:e7:cf:73:
         14:e0:05:5f:57:14:c7:21:74:5a:57:f9:60:3a:ab:e3:12:16:
         21:4b:d9:ca:55:96:dd:da:b3:c7:0d:e6:97:ca:1b:21:8a:86:
         8f:95:cf:65:9c:f1:ce:60:ac:a0:72:99:02:44:73:fe:4d:a4:
         0e:12:be:bc:36:69:07:31:20:1f:ec:63:d5:f9:2e:31:de:e2:
         0d:13:4d:03:34:16:9a:b0:1f:db:c0:cb:e4:37:0c:e8:31:74:
         9f:84:5d:f4:6e:18:ba:73:d6:f1:33:72:1b:04:28:53:46:20:
         3d:44:e4:a2:89:ad:0b:4d:e6:e4:1a:54:33:3d:cf:09:35:2e:
         bc:4e:0f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:42:39 2026 by rpki-client