Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
File:                     DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft (raw, json)
Hash identifier:          lp/Ufcmzo1giVNoRvXfowA+KBCULbPXo36lpnNJkV9A=
Subject key identifier:   C8:10:D8:0E:5D:D2:CE:5C:50:B9:FD:D4:27:FB:C6:39:FA:AE:38:02
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Certificate issuer:       /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial:       019D9773C8CDE6C7134D5C4962A13FAEDFF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
Manifest number:          18C3
Signing time:             Thu 16 Apr 2026 18:00:40 +0000
Manifest this update:     Thu 16 Apr 2026 18:00:40 +0000
Manifest next update:     Fri 17 Apr 2026 18:00:40 +0000
Files and hashes:         1: D32i6_dCWTSsyvln6Op_fVc7ifQ.roa (hash: Al7b3A0tyoRmZ6j5Fdgg5aD1e2Ddf8niF7ufLQSci6A=)
                          2: DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl (hash: eamc5mc/FZTeAfhqnvUTpIbcnxuMaVjpEn4O/RKQ6DI=)
                          3: cRdmmZiNILryID4MaoZH-egP0Pc.roa (hash: Tc3P5pw52D848VbuoEwG61qEEaFgbEGdqefrzUmOWZA=)
                          4: dO_oeTKff3dNZT_GL6N0iMSDLeA.roa (hash: U9kjCpU+QQfnTA2jCeD/iAdC4QIXldj/AsRqVA98Jco=)
                          5: hKslTlGWTrYnNFRq7nm02w7iSks.roa (hash: hx/Lg8Qct01wevwfLicpLCIZWwNva1xX/icDKHDKOOo=)
                          6: qsPJeU-C_65tmjEWpGQYQUIEajo.roa (hash: 1cn7hAG7OagxW4P/nzGgq4cV1HKNDko3iBj1s+1Q88U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:73:c8:cd:e6:c7:13:4d:5c:49:62:a1:3f:ae:df:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
        Validity
            Not Before: Apr 16 18:00:40 2026 GMT
            Not After : Apr 17 18:00:40 2026 GMT
        Subject: CN=c810d80e5dd2ce5c50b9fdd427fbc639faae3802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e5:34:87:26:18:c8:69:45:28:bc:bb:84:87:
                    13:7a:ee:d4:85:6b:67:ee:37:2c:c3:c1:c2:05:2b:
                    42:e1:c1:a2:35:56:c6:43:84:76:cc:b5:6c:07:d2:
                    65:5b:98:3b:f2:da:1c:51:0b:8c:7c:d9:88:26:bc:
                    fd:61:f4:76:ae:75:05:e5:81:37:e1:aa:26:34:dc:
                    3d:fe:37:1a:26:9a:f8:c6:f7:53:7d:86:8a:80:2b:
                    19:d0:07:39:f0:e9:90:7e:6b:e7:66:ed:1e:24:e6:
                    a3:42:bf:be:bc:ff:6e:86:6f:80:b5:38:3e:35:f3:
                    c7:91:25:b7:b4:97:ec:cc:f9:16:1a:97:7a:d1:85:
                    f6:0b:0a:f8:ed:88:2e:be:12:ec:f2:e9:a0:3d:19:
                    e0:03:c6:61:65:3c:dc:37:ab:8a:2d:6f:ec:01:6a:
                    15:8b:75:c3:97:95:f2:ac:bf:57:3c:20:e2:ee:24:
                    20:87:45:47:bb:99:14:4c:82:fa:41:a7:fc:05:7c:
                    cf:cc:c8:46:59:af:65:e0:ca:8a:04:38:5d:4e:82:
                    f2:9c:47:96:19:d7:b6:d8:50:2f:7e:b4:51:74:03:
                    39:3e:7d:ed:5a:2f:9c:b6:30:b1:37:26:57:84:fa:
                    14:a8:e1:c1:77:8c:86:17:a9:c4:fe:1a:06:1f:77:
                    b3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:10:D8:0E:5D:D2:CE:5C:50:B9:FD:D4:27:FB:C6:39:FA:AE:38:02
            X509v3 Authority Key Identifier:
                keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:38:77:c1:90:08:e0:70:15:43:dc:fa:9c:dc:e7:11:e5:c4:
         45:5f:f3:03:51:0d:28:14:27:a7:f3:c1:8d:61:95:ae:84:74:
         85:0d:23:aa:ab:31:80:dc:06:d0:be:cf:29:0f:04:79:cd:80:
         15:fc:e5:89:d4:8a:9d:a8:b2:f5:39:c6:7b:a9:3f:d9:eb:a5:
         40:3a:94:70:a2:b0:54:51:b2:10:df:91:d4:00:ce:8d:3d:ef:
         e6:2b:0f:b0:d3:2f:17:9c:99:ec:e9:64:d6:b0:f1:f7:98:33:
         10:10:42:53:3d:0f:85:63:48:a0:22:e9:30:39:60:17:a1:4c:
         68:f9:20:4d:48:07:ad:34:d0:0f:83:83:c8:aa:00:06:b4:1a:
         5d:85:01:68:ee:f1:20:00:3c:d1:bf:ea:2c:0c:f3:fe:57:13:
         96:d6:d9:ec:f4:63:70:64:2e:bc:bd:c3:d0:9b:5b:d4:b7:de:
         e7:93:3a:86:e3:5a:75:b3:b0:33:cd:95:3b:52:f6:85:ae:85:
         3e:b0:1e:a3:06:3a:78:11:f4:50:42:3c:5c:0c:f1:b6:e0:a6:
         b1:24:35:4e:ea:3d:ef:5e:73:2f:67:a3:80:c6:c0:71:ee:46:
         f4:37:82:db:2e:f0:4b:30:8a:dd:5b:e3:1a:24:37:19:9e:da:
         f4:34:ff:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:45:07 2026 by rpki-client