Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
File:                     dixgr01zclhFzq8Le1hed1cGaWU.mft (raw, json)
Hash identifier:          anm9vN/hhW8fdDzQdgrw06m/ta1pk3BjkVK266ZtLpI=
Subject key identifier:   4A:19:44:66:55:F8:52:84:73:54:A3:19:F7:DD:3F:F4:74:6B:0C:3C
Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
Certificate issuer:       /CN=762c60af4d73725845ceaf0b7b585e7757066965
Certificate serial:       019D99620B9F194046178CC15F7E50B42CBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 03:00:32 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:32 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:32 +0000
Files and hashes:         1: 13ja1cIxS4cK0b0RY3CC1WL6GYs.roa (hash: c+J6Q65ZscwsVoYSvT1zs/WDV1dPfYCmK+qupBgYe50=)
                          2: 9OSGu-CL3eoRiBIUAPN11BJFt2o.roa (hash: jKTEcw4I25lyqC0/LKz20znUmkmfgUVEV6D5UsdJUAo=)
                          3: RtgqAojptg3yfsTJ-oga_8isRto.roa (hash: eyQYoF7t82yY3YtM/1jPPLvEjYoo8YlLinObPAQcXHA=)
                          4: X6IQ-q68Lu6Sm7ozgn09iKo2xDc.roa (hash: 1oM0JFaG4XNcO5zFMn1eRQw1lAJ0Or0fahaPut34poU=)
                          5: _1hB8H52OK9tZ7oTDVioeT82qgM.roa (hash: 7T2hoZDj4U/8s/AFME6VJZzf9NWdP3HcXbeV7H9Xusw=)
                          6: dixgr01zclhFzq8Le1hed1cGaWU.crl (hash: Jqon8aP2I9MLLx3LPrD//8PCov/6az9kBf9d/jORsg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:0b:9f:19:40:46:17:8c:c1:5f:7e:50:b4:2c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965
        Validity
            Not Before: Apr 17 03:00:32 2026 GMT
            Not After : Apr 18 03:00:32 2026 GMT
        Subject: CN=4a19446655f852847354a319f7dd3ff4746b0c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8c:7c:31:32:0c:90:a8:62:99:25:d8:bc:ee:
                    8a:4e:1b:29:62:a3:ce:04:de:15:eb:67:7c:a4:42:
                    f8:ea:1f:30:07:7b:cb:d4:57:26:49:97:0e:c6:9c:
                    6a:5b:97:b5:ba:f8:ce:18:78:8c:5d:3e:a7:bd:f8:
                    07:4c:16:83:06:12:17:e8:6c:f3:bd:ca:ea:54:97:
                    1b:e7:21:ca:18:36:7f:34:dd:3f:30:bc:c7:5c:50:
                    24:3e:9f:e3:4c:f3:a3:33:db:00:e5:c3:ed:1a:0f:
                    65:76:27:76:9d:9c:c7:80:0f:23:70:49:8d:75:3c:
                    77:58:45:c8:0a:b8:ae:dc:25:30:07:7c:e6:87:83:
                    e6:5a:45:86:18:d5:04:7d:18:45:e3:82:5f:2c:89:
                    08:6b:56:fb:6d:42:81:2b:cb:17:70:5c:0b:7c:ff:
                    86:03:5b:1d:3f:ed:7f:06:61:a4:30:41:5c:91:e4:
                    fa:c0:21:2e:3c:a1:41:17:db:c3:d3:52:1e:d4:71:
                    76:d8:9b:ea:17:7c:49:f8:fc:ff:d3:52:b0:84:d0:
                    d7:5e:9f:16:af:fb:b4:c1:6a:f9:52:47:1b:6a:6f:
                    d1:53:10:ed:4a:68:34:a2:02:c7:be:21:f7:0b:88:
                    74:8e:d6:bf:0d:a7:1d:a8:81:b7:3a:d0:1b:4b:f2:
                    7b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:19:44:66:55:F8:52:84:73:54:A3:19:F7:DD:3F:F4:74:6B:0C:3C
            X509v3 Authority Key Identifier:
                keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:eb:ce:0f:e2:aa:a1:d3:b5:ad:89:81:b1:75:75:99:9c:72:
         8e:5f:fc:bd:7e:05:a8:c5:d0:a9:d4:55:5f:94:60:cb:29:2f:
         af:a5:52:03:ab:ad:50:19:06:b1:cf:86:7f:14:06:89:5a:c2:
         c9:37:2d:8f:51:21:a4:00:06:40:ed:dd:57:69:5a:ad:31:2f:
         18:31:64:a9:95:c8:f3:2b:bc:4a:fc:5f:75:eb:87:c7:1a:bc:
         28:e4:a5:4f:2a:cd:26:bd:f0:6d:57:d2:22:a0:05:bd:98:4e:
         b5:1e:2d:4a:bb:6f:6d:4d:06:dc:0d:af:bc:6e:4a:3d:34:03:
         8e:0f:6c:76:47:38:89:21:ab:d9:d9:9d:35:cc:6b:fd:37:75:
         11:8f:b0:51:fc:08:a1:17:f3:19:43:d3:4d:e4:c2:0f:dc:af:
         b4:b6:7b:59:9e:48:84:a4:c3:e8:98:3b:8c:51:f8:fb:df:e9:
         ef:c3:b1:e4:67:e2:51:1d:97:80:69:b0:51:fa:81:da:ea:55:
         bf:44:40:64:cb:0e:9e:64:31:af:d7:d3:33:69:c0:7f:cc:0e:
         9c:5a:70:8b:6d:d4:dc:27:ad:10:fa:7f:10:84:6f:ef:cc:4e:
         ae:05:d4:a3:d3:bd:79:0f:2a:cb:6d:2a:31:9d:02:93:61:a5:
         0b:3e:7e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:07 2026 by rpki-client