Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
File:                     Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft (raw, json)
Hash identifier:          lj6gtNHPX6z5yYEI4yxHSF87chWHa+SuiT9/zyLxtQc=
Subject key identifier:   F7:C2:3B:FD:00:C4:D2:6F:BA:1D:AD:7A:8B:04:BD:FE:D9:78:AE:30
Authority key identifier: 1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97
Certificate issuer:       /CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
Certificate serial:       019D9BBE2C91FA778CA8E0F3210D1A059AD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 14:00:24 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:24 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:24 +0000
Files and hashes:         1: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl (hash: UUACB+kqo1VJDW2YqhrEMdI+zTnewD/TL4V5MyY+YL4=)
                          2: v6RAhIiCFXOeaQhgsmzoWgMNfAk.roa (hash: QMYJkrHaL3LBI/CVAcdwz2saxueqHf/IvlmxIHaRqm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:2c:91:fa:77:8c:a8:e0:f3:21:0d:1a:05:9a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
        Validity
            Not Before: Apr 17 14:00:24 2026 GMT
            Not After : Apr 18 14:00:24 2026 GMT
        Subject: CN=f7c23bfd00c4d26fba1dad7a8b04bdfed978ae30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5a:58:90:bc:f0:d5:03:4a:91:d1:29:92:e1:
                    cf:5d:52:86:82:b9:f5:1e:c0:ac:6b:94:11:e0:8e:
                    02:aa:73:ea:7c:89:83:9a:e3:90:26:3c:84:09:18:
                    89:89:fb:61:c3:8a:c1:b7:0f:bb:34:98:45:2f:d6:
                    d5:5a:25:26:35:a0:17:11:fa:dd:8c:07:76:76:ce:
                    af:ca:5d:22:9b:6c:74:a8:a5:94:f8:03:e3:07:90:
                    f6:17:87:43:6a:05:d1:ef:39:31:b6:a6:71:9c:5c:
                    dd:29:cb:ba:20:1d:6f:b7:55:ed:06:f8:d3:bc:06:
                    38:e7:ba:e6:87:91:f3:11:80:8b:57:11:c1:69:a0:
                    c5:aa:7d:ac:62:25:3b:88:6b:d5:b9:a8:1b:04:4f:
                    11:a6:7a:4d:da:ed:42:ef:a7:e0:8e:4e:9c:8f:77:
                    90:8b:b8:ec:d3:ca:20:3f:0c:7e:cf:02:a8:04:3c:
                    1b:a7:92:cd:eb:51:7e:ba:af:4e:d5:8c:78:5b:ef:
                    6d:80:38:9b:04:4f:0d:d5:7e:1e:d5:f2:b5:19:a1:
                    a6:e0:e0:cc:0c:0f:48:43:e2:a4:0c:5a:5f:9b:d0:
                    06:22:d3:7c:ac:46:2b:de:d9:13:08:b8:e7:32:0c:
                    78:cc:e1:76:e3:38:b7:6b:a9:05:66:0c:7f:87:15:
                    8a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C2:3B:FD:00:C4:D2:6F:BA:1D:AD:7A:8B:04:BD:FE:D9:78:AE:30
            X509v3 Authority Key Identifier:
                keyid:1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:37:50:a8:21:06:11:6f:3f:e8:71:7e:9a:f6:a3:04:b7:34:
         bf:ea:a8:04:3b:f4:66:1d:27:50:b1:a5:ed:b0:f5:fd:b7:61:
         f9:3c:60:5f:14:75:f6:29:08:68:98:91:96:fa:7d:2c:9e:6b:
         fa:96:35:4f:cc:68:a6:c0:7e:8c:51:e6:b5:13:23:be:9f:dd:
         5d:81:56:73:da:a7:2e:d9:97:84:27:42:df:0d:8d:1d:a3:60:
         49:46:3b:60:1f:e9:53:10:a5:03:29:37:25:6f:31:22:53:b4:
         d6:e5:2e:7b:d4:bc:7f:10:5b:19:86:e4:5c:77:80:53:00:6a:
         18:a5:aa:68:0f:0a:13:eb:ca:23:4d:63:db:03:f7:b7:a6:7d:
         98:2b:3b:f8:2a:73:ba:8d:52:22:6c:e6:09:c3:1a:20:a2:83:
         14:3b:4a:45:f3:ad:d2:f3:f1:2d:aa:f9:4a:5a:c6:66:2b:a6:
         9d:1d:0e:78:fe:d2:10:a3:b7:a5:4c:27:93:41:b5:c7:1d:96:
         e8:24:c9:2b:85:52:c1:ec:a4:d8:36:10:75:ac:7d:1b:a2:4c:
         04:d0:28:e5:b2:64:eb:38:ae:38:8c:c6:fe:47:d3:14:69:3b:
         0b:fa:79:08:8e:05:ab:ef:fb:04:09:60:db:10:4e:8d:9b:f9:
         eb:b9:63:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:32 2026 by rpki-client