Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
File:                     i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft (raw, json)
Hash identifier:          fOuKMUE5xzoNq5Y74E19uc85p3k/ULBKGBAB5Dlvkks=
Subject key identifier:   10:8B:55:E6:18:07:9F:4B:6E:59:DF:3D:94:62:1A:CB:61:07:E0:0E
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Certificate issuer:       /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial:       019D9B1A09DDC876F2F657A957ECBA4DBCFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
Manifest number:          18D1
Signing time:             Fri 17 Apr 2026 11:01:08 +0000
Manifest this update:     Fri 17 Apr 2026 11:01:08 +0000
Manifest next update:     Sat 18 Apr 2026 11:01:08 +0000
Files and hashes:         1: EIlm2UOK4a43mkGzeWHWkYSMea0.roa (hash: +wMjOafG8Bh/qQ6ngEeSs6Schjv6y2L45oZoRJ0DZNo=)
                          2: i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl (hash: EZLyCfkCtRlfvtq63eQArmt/OHfckcdHrlX/0PKKJdY=)
                          3: luGI1U_JMgcQZM65wInUiA4UdbA.roa (hash: ZyKZURW02DYdgFTMs0cmnkA3UVYypfPPFFRpyjWyugA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:1a:09:dd:c8:76:f2:f6:57:a9:57:ec:ba:4d:bc:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
        Validity
            Not Before: Apr 17 11:01:08 2026 GMT
            Not After : Apr 18 11:01:08 2026 GMT
        Subject: CN=108b55e618079f4b6e59df3d94621acb6107e00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:ed:47:fc:82:e3:f5:c4:bb:53:c6:72:24:
                    57:44:30:41:1b:2e:00:9e:ed:ff:5c:22:1f:49:38:
                    e1:6f:15:f0:e1:a7:52:56:6f:d1:0f:36:f8:d8:61:
                    e1:e9:14:32:f2:71:3c:20:f7:42:2d:5a:d8:8f:14:
                    d2:a3:07:ba:ff:2f:68:37:73:9b:23:49:9f:51:dd:
                    fe:3b:11:cb:b6:c4:a2:20:e7:c6:ad:c7:16:2d:18:
                    a4:d8:41:22:1a:7f:58:a9:98:74:1b:8a:97:fd:4d:
                    a7:03:71:97:26:23:b2:3c:c0:16:7a:4a:40:44:85:
                    03:90:98:82:67:fc:d1:28:3d:1e:66:b6:41:f3:fa:
                    1f:7c:7f:d9:33:e3:a7:8a:d7:b7:73:28:78:a8:fb:
                    41:72:ab:94:94:6b:29:93:62:4e:3a:07:5d:71:c6:
                    16:6c:cd:77:5b:1f:a8:84:0a:64:6b:58:b3:03:a7:
                    8a:82:68:6d:63:94:2c:b7:b0:15:3c:b4:99:72:41:
                    86:b3:06:4e:4a:94:97:6f:24:84:d8:6c:d1:28:2b:
                    81:ad:d0:fd:66:37:d1:a6:2c:a0:4d:1d:33:19:c1:
                    bc:08:4a:0e:d1:fd:af:6c:1c:79:ff:f0:14:fa:73:
                    a0:c6:b7:f7:26:46:32:76:bf:11:16:6b:42:a6:e3:
                    66:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8B:55:E6:18:07:9F:4B:6E:59:DF:3D:94:62:1A:CB:61:07:E0:0E
            X509v3 Authority Key Identifier:
                keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:8d:6e:00:38:c8:71:26:06:0e:5c:f5:b2:fc:d4:0a:d4:95:
         6d:b0:a4:52:80:9d:4c:8a:4c:a8:19:52:c9:30:98:a8:ab:62:
         f4:df:c6:dd:c2:f4:b0:6a:ad:e2:0d:44:06:ca:f2:ce:97:39:
         b3:5b:54:4f:62:fc:40:2b:49:b6:5a:ba:be:73:79:85:e9:29:
         bd:f3:48:86:de:0b:06:f5:4b:77:88:5f:f0:c3:6b:09:3f:67:
         32:11:f6:ce:dd:9e:99:c4:fc:f3:2b:2d:8a:0f:85:24:b6:56:
         39:de:58:ae:2f:ed:0a:3d:81:1e:79:48:52:e0:b4:42:fb:34:
         ae:79:44:4b:99:6d:97:89:3f:f7:5c:20:47:e7:7a:cd:df:eb:
         2f:a4:a6:04:32:e8:e9:9f:ab:c4:08:ba:6f:df:d3:4d:6b:ff:
         a2:1f:63:f8:0c:e7:7f:a4:2d:75:c3:11:36:c5:c2:0d:45:39:
         3a:6f:3b:21:d4:63:4b:9f:bd:1d:1c:62:41:a1:2a:2c:45:1b:
         bb:8b:c0:8d:f0:1b:e2:0e:8b:5a:55:36:61:4a:ae:b0:55:0f:
         4b:83:a3:74:f5:ca:07:62:da:c5:84:98:db:98:2f:17:98:c5:
         82:b8:6a:07:30:23:b8:ff:bf:c1:6c:c6:5a:3d:7b:1b:e4:be:
         c1:c8:a4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:44:28 2026 by rpki-client