Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
File:                     RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft (raw, json)
Hash identifier:          YcpHliiuYd/yXB3tbm91yukunYsaeVBPCGcC+bdRCMk=
Subject key identifier:   90:50:ED:CC:86:D8:11:3F:32:E0:51:91:ED:3C:FF:D7:35:24:41:11
Authority key identifier: 47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C
Certificate issuer:       /CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
Certificate serial:       019D9818541CC5E5535F2E504E2FEA29ADBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
Manifest number:          18C8
Signing time:             Thu 16 Apr 2026 21:00:24 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:24 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:24 +0000
Files and hashes:         1: RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl (hash: u3vWTxgRcugTrJ6K3n4yEzAoLiFfQ5ZjdwXGU0I2imE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:54:1c:c5:e5:53:5f:2e:50:4e:2f:ea:29:ad:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
        Validity
            Not Before: Apr 16 21:00:24 2026 GMT
            Not After : Apr 17 21:00:24 2026 GMT
        Subject: CN=9050edcc86d8113f32e05191ed3cffd735244111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c7:c6:e6:ce:1a:1f:52:8d:2b:69:88:c1:94:
                    64:ba:13:1e:1c:48:ed:f9:66:e9:0a:36:c7:05:c0:
                    d3:e6:54:cc:d0:9a:6e:dc:75:10:12:95:d4:83:94:
                    81:80:7f:87:3a:fe:ae:8d:79:81:ba:3d:9d:22:f4:
                    91:64:5c:a8:4d:2a:98:0b:fa:28:3a:74:0c:f0:a1:
                    8c:fd:f5:ad:f7:ce:e5:99:09:3f:f4:57:8d:c2:58:
                    29:13:64:87:f9:17:98:1b:f9:cc:ff:ae:e9:a9:89:
                    63:1c:45:f9:46:4d:03:d6:e0:b4:1f:06:3e:1a:70:
                    00:fd:60:c1:fd:64:b3:58:a7:80:9c:a0:49:92:87:
                    82:6b:46:f9:68:67:5a:d6:7e:be:f4:e0:f0:72:e6:
                    27:f4:c5:42:56:df:4d:b9:94:0c:9e:5e:7f:32:9b:
                    a6:7a:e1:a6:0c:1c:b9:65:d2:71:b4:6b:4a:6e:b3:
                    78:70:19:18:b5:4a:f2:22:cc:6b:3e:fd:40:3d:21:
                    dc:32:15:21:47:b3:35:24:81:2d:2e:ba:a0:02:2e:
                    9e:ed:6c:13:69:b1:80:68:cc:89:8e:de:60:37:0d:
                    9d:70:44:71:88:be:30:d1:01:98:5d:e4:87:43:c8:
                    3c:13:a7:14:9e:3b:7a:a6:8a:8a:7f:9e:3e:21:8f:
                    c1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:50:ED:CC:86:D8:11:3F:32:E0:51:91:ED:3C:FF:D7:35:24:41:11
            X509v3 Authority Key Identifier:
                keyid:47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:87:56:da:04:b2:83:2e:9e:fc:c3:6a:72:f3:30:03:a6:4d:
         d8:ee:93:46:f4:34:6c:6f:1a:9f:96:0a:8f:a7:fa:48:97:75:
         1e:40:00:e0:1a:98:1b:60:4d:9d:4a:70:16:7f:1c:0a:c6:09:
         0f:d0:35:b2:d4:c0:a7:ff:f3:92:8b:34:ef:0d:76:50:64:da:
         b9:22:6c:c3:d7:74:f8:da:28:50:94:04:e6:f2:68:3b:f5:9b:
         de:bc:24:41:23:53:33:c8:8a:df:11:f0:08:42:72:74:07:62:
         1f:33:72:8d:78:01:08:04:a6:cb:76:27:15:87:a4:6a:bd:e4:
         6c:65:28:bd:8e:29:5d:7e:7d:12:2e:5e:8d:e5:93:0d:ee:09:
         10:8d:86:eb:76:f7:6c:00:39:d2:cc:24:f3:8f:f0:0e:44:a6:
         55:d8:28:6b:54:d4:63:e1:29:61:f4:01:05:f4:43:f5:31:b6:
         43:6c:85:85:d2:fb:37:79:5c:44:55:0c:b7:eb:ba:fa:e7:76:
         fd:8c:c5:d2:10:1d:9c:74:32:dc:66:e0:20:d5:b5:2f:92:fb:
         a5:13:78:bf:2b:96:d5:c5:7c:7c:f0:14:cc:36:d1:68:0e:10:
         0f:02:70:b6:e9:cc:ce:81:6c:27:0b:a2:a9:56:e8:41:60:2a:
         7b:ab:de:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:04 2026 by rpki-client