Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
File:                     eJULoZtPF6NHMSf9B3qaIALr6jY.mft (raw, json)
Hash identifier:          PVvllTI3M5PISIpPdC4Pd//v182ZdVyyVfjkWNaza+k=
Subject key identifier:   AD:63:74:FE:26:58:BF:B9:D1:70:56:82:C4:2A:BC:5F:11:E1:47:8B
Authority key identifier: 78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36
Certificate issuer:       /CN=78950ba19b4f17a3473127fd077a9a2002ebea36
Certificate serial:       019DA52F39D002EA2AB264569D57443E4822
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
Manifest number:          18C7
Signing time:             Sun 19 Apr 2026 10:00:28 +0000
Manifest this update:     Sun 19 Apr 2026 10:00:28 +0000
Manifest next update:     Mon 20 Apr 2026 10:00:28 +0000
Files and hashes:         1: eJULoZtPF6NHMSf9B3qaIALr6jY.crl (hash: iCySLP6oYbNJkvavYEQ3VJjOim30qP7M1FNu/6yT23w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:2f:39:d0:02:ea:2a:b2:64:56:9d:57:44:3e:48:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78950ba19b4f17a3473127fd077a9a2002ebea36
        Validity
            Not Before: Apr 19 10:00:28 2026 GMT
            Not After : Apr 20 10:00:28 2026 GMT
        Subject: CN=ad6374fe2658bfb9d1705682c42abc5f11e1478b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:12:e4:a0:8b:c9:64:fb:b6:92:a2:93:c7:
                    15:5d:4c:49:7a:db:94:cc:19:b2:37:ac:3e:69:14:
                    04:86:ed:e8:39:71:0c:72:a9:1d:7d:c9:1a:7c:a1:
                    99:e8:15:6d:8d:08:c7:a6:2d:d2:1b:bb:ca:d6:23:
                    70:98:f1:6c:23:e1:51:53:0f:54:53:b8:64:d0:f1:
                    ed:c9:48:bb:5f:85:16:0a:97:da:a7:d3:24:a0:aa:
                    e8:2b:2e:91:03:5c:2e:ea:66:11:4b:c9:dd:60:4a:
                    7f:7a:cb:76:85:25:b2:cd:20:6b:54:e2:03:e4:25:
                    4d:6f:9b:42:89:f8:f2:63:bc:cb:dd:0e:92:5c:8a:
                    c6:55:94:57:2f:40:97:04:7a:8f:d9:5d:32:15:0a:
                    da:07:13:c7:cc:83:da:31:d6:b9:c4:31:c0:34:3e:
                    f7:d1:6c:fd:15:dd:5f:95:a9:67:fa:83:f4:cb:4b:
                    7d:9f:c4:17:47:76:48:be:dc:f6:db:62:7c:c0:c5:
                    9c:4f:99:f8:fa:99:14:90:09:6a:28:d3:9b:09:e0:
                    cb:c4:6e:e8:02:9e:15:e0:a8:ac:69:de:41:30:45:
                    a3:a4:5f:a6:5e:db:04:af:81:00:57:f4:64:d0:a4:
                    31:28:83:f5:76:49:a0:a5:2d:b7:92:4f:10:45:97:
                    1f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:63:74:FE:26:58:BF:B9:D1:70:56:82:C4:2A:BC:5F:11:E1:47:8B
            X509v3 Authority Key Identifier:
                keyid:78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:09:23:71:9c:12:2f:40:00:7f:9a:50:6d:e5:0e:74:6f:2e:
         1e:d4:96:e2:2f:44:f3:af:4d:3d:de:0e:c3:22:70:b3:45:b1:
         1f:94:0a:25:9b:72:d6:6c:f8:ec:17:19:60:1d:a7:47:d7:a8:
         b3:8f:94:74:ba:fc:e8:02:c8:9b:d4:55:b2:37:bb:a4:29:a1:
         a4:3a:fe:2c:76:1c:35:8d:c6:48:5c:6d:c1:40:11:19:a2:a1:
         b7:30:10:d3:cd:8a:73:76:11:cf:33:04:e5:90:0f:2f:a9:11:
         c0:13:c2:45:24:5d:46:61:af:fd:8d:af:45:96:8e:ca:f6:d9:
         18:9a:27:10:86:db:ae:8b:9d:87:38:8c:7c:41:ee:b5:9c:52:
         bf:06:8b:3f:1e:76:47:c5:36:da:cc:11:74:55:ca:6d:a7:61:
         e1:01:74:59:ec:f5:21:ce:64:e6:2b:04:75:2b:7e:70:eb:43:
         c1:f0:1e:5c:70:6a:5c:0e:18:4c:fc:55:d0:26:6b:e1:75:62:
         b5:c6:29:88:e7:9a:73:6e:97:c5:d9:92:c4:23:a9:8f:fe:ed:
         84:55:99:09:67:18:43:7e:b5:18:42:8e:50:75:c4:ae:72:35:
         31:53:12:58:02:79:6e:ec:c6:56:2d:d3:4a:d9:2a:dd:9a:2f:
         57:95:17:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:18:12 2026 by rpki-client