Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft
File:                     XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft (raw, json)
Hash identifier:          KLWas1E6uCA+5cPDIv+HGnA2HnvtCin96jNO/A8KEfc=
Subject key identifier:   5F:1A:15:A6:AD:D1:C4:A1:3D:9B:77:C0:35:B5:58:96:6C:C4:EF:96
Authority key identifier: 5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA
Certificate issuer:       /CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea
Certificate serial:       019DA41D057535A4BEF319EF75668474E0BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft
Manifest number:          18C7
Signing time:             Sun 19 Apr 2026 05:00:58 +0000
Manifest this update:     Sun 19 Apr 2026 05:00:58 +0000
Manifest next update:     Mon 20 Apr 2026 05:00:58 +0000
Files and hashes:         1: XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl (hash: nyCF7JLV+e118rJY6uk8UgTkPUAzSmBgOYH9xmqQItE=)
                          2: wl8tu_weubNfXZ1raiwB59IrcEQ.roa (hash: /fuDNkfWdHCDDOTyXjSm0MpspTRxJW6ZGeRcO5DS8Io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:1d:05:75:35:a4:be:f3:19:ef:75:66:84:74:e0:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea
        Validity
            Not Before: Apr 19 05:00:58 2026 GMT
            Not After : Apr 20 05:00:58 2026 GMT
        Subject: CN=5f1a15a6add1c4a13d9b77c035b558966cc4ef96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:92:34:58:7e:cb:10:dc:b1:f3:cf:a5:1f:ae:
                    0d:2f:10:5f:6d:4f:88:31:0f:9c:99:16:92:42:d0:
                    e9:e4:d8:0c:43:de:6c:1c:13:23:3e:dc:00:79:b2:
                    dc:4b:67:19:4a:6d:fe:1f:d3:0d:a0:60:51:82:34:
                    93:51:93:cd:5d:bb:a2:6d:f8:89:52:02:9c:92:68:
                    40:20:13:82:cb:64:d2:ab:3b:2c:26:7d:14:84:99:
                    15:04:71:e4:16:f3:2a:b6:9c:88:b4:a8:0a:d3:1b:
                    e4:d3:ea:14:04:57:97:33:e5:2b:0b:da:f6:eb:9a:
                    bb:66:0b:e5:f9:6e:e8:0d:d0:a3:a1:11:28:c2:9e:
                    b2:ec:8b:3c:2b:07:6e:78:28:e8:e8:b0:45:01:98:
                    47:2c:e3:ce:28:36:8e:a1:63:3e:a5:d9:11:b4:48:
                    29:e6:34:fc:46:7d:31:64:ce:86:52:3b:21:5c:f9:
                    71:bb:b6:65:a3:6d:2d:a8:2b:9e:c0:fe:c6:e5:26:
                    5d:9e:3f:e9:7b:91:46:ee:0a:a4:90:f7:98:e4:a1:
                    1a:37:68:23:4c:55:71:2e:45:9d:76:04:4a:17:dc:
                    8f:bb:97:bc:e1:52:ea:3c:a6:9a:2e:1d:67:39:7e:
                    d2:33:98:f7:39:5d:46:69:5d:b3:be:16:6e:70:c9:
                    45:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1A:15:A6:AD:D1:C4:A1:3D:9B:77:C0:35:B5:58:96:6C:C4:EF:96
            X509v3 Authority Key Identifier:
                keyid:5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ed:ac:99:30:0c:c7:3b:82:9a:e4:02:31:ef:a9:32:91:f2:
         99:83:17:64:02:08:86:da:fd:ff:99:8a:6d:27:57:6e:d5:5e:
         b5:ce:04:b6:d2:f3:cf:9c:a5:7c:bb:69:48:e6:39:ad:bb:89:
         6f:84:02:3a:b9:7c:20:97:d0:8f:fe:1f:cb:ba:72:ec:a5:5e:
         6e:e2:63:88:d8:2e:a6:fb:4b:26:2d:98:a7:79:c8:8f:fa:fb:
         4d:46:48:58:2c:2d:07:2d:49:86:d4:02:31:df:b3:0a:7e:92:
         7d:48:9b:7b:17:3a:a4:ee:30:c1:f3:43:19:fe:34:bf:93:fd:
         80:5e:4b:a4:87:51:06:59:17:08:3d:62:5b:92:ba:4b:9a:56:
         e3:51:82:9f:d3:51:ce:03:1c:d0:25:6c:15:a1:9f:8b:c4:1e:
         76:37:a1:19:39:4d:2b:19:9c:0a:aa:67:4c:8a:c5:a1:c3:28:
         1a:b7:ef:6f:d3:1a:fb:2d:8b:4a:1f:08:56:5a:cf:c5:60:c7:
         49:02:9e:ec:2f:ef:19:a7:59:50:75:c9:45:22:4e:c7:01:3f:
         a1:3e:86:c1:22:32:2c:61:45:13:37:db:f0:5f:1b:46:aa:80:
         29:93:4b:09:26:5c:5b:93:42:06:ec:bf:28:16:53:63:05:bd:
         a4:2f:6b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:33 2026 by rpki-client