Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
File:                     1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft (raw, json)
Hash identifier:          8Uiq3qIEfJsjW+BWbEiNS+SBaSkro3xJex+Qf03bpKg=
Subject key identifier:   AE:D2:1F:75:2E:57:02:86:E2:06:81:42:50:3B:25:F9:AD:71:D5:5E
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Certificate issuer:       /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial:       019D9A3EE2359DA98DAF3F2470ACFFD305BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
Manifest number:          18CA
Signing time:             Fri 17 Apr 2026 07:01:45 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:45 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:45 +0000
Files and hashes:         1: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl (hash: ptgiOIiPAudufhG+OUVBHnsOxRWXFgjEAU6N1RTfVRk=)
                          2: 26QbXt6b5zHilNs1q7yDX1cYMsk.roa (hash: Tt6aUkRO9JUaW0NjcmeQVqAa3xnUCz7lJRJu/2xB7IE=)
                          3: Ezcrtmwo4iwn5JbCMNVESXorExE.asa (hash: QvhpQm5ictpOGI0Idhy4A39NC9Kpsm0fYAvwcjaUI04=)
                          4: ML7UkJFE6LlihRpTm5h-PoqRSVs.roa (hash: g+qfBPw45UpoVjFRiQZEbaH4MwvqddJi1qo+sHrhaFE=)
                          5: eU7ipBheHWkpemRqitvR9YpXrt4.asa (hash: jtdQZM+91cfrM18Rhgx+NL45kKIXn9gnr1VUiwGfKOM=)
                          6: lGdnHQ9JzbcCAf7aCdi2AtQWylc.roa (hash: /SsAkMvFx9VtM23+Xr14ddTXFb4dIacWZgb2bJ1bpX4=)
                          7: sk3Ng7M09_merP38zbn6ZinhfyY.asa (hash: Hg4VBYh1/4iAG5ztUnRTsrSfK7i/9u4qOnxuxq++vNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:e2:35:9d:a9:8d:af:3f:24:70:ac:ff:d3:05:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
        Validity
            Not Before: Apr 17 07:01:45 2026 GMT
            Not After : Apr 18 07:01:45 2026 GMT
        Subject: CN=aed21f752e570286e2068142503b25f9ad71d55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9a:5b:e1:74:8a:b4:91:e8:ba:de:fc:68:87:
                    63:60:09:8f:c3:86:d3:91:6b:7c:e6:f5:17:2b:23:
                    d6:0d:35:a9:7e:cf:21:05:1c:85:43:f0:8e:69:33:
                    50:fc:5b:80:c1:14:d4:bc:48:fb:1e:45:25:01:9d:
                    f9:81:29:bc:f5:c8:8c:11:78:e6:61:cf:5a:30:23:
                    19:bd:4a:86:bd:3e:6c:db:c8:54:04:e3:f0:11:b3:
                    f7:a8:99:fa:8d:9b:9b:9e:9b:be:1d:0d:c3:7f:3d:
                    6f:88:11:f7:9e:5b:2b:eb:86:d0:a5:6f:8c:4c:f6:
                    ac:af:8e:45:26:8a:8c:b1:b8:78:62:b2:01:15:68:
                    f0:77:59:8c:19:cf:eb:c8:8d:98:61:fd:9a:d2:3c:
                    59:54:69:df:0a:b9:3f:cf:34:32:bf:04:35:74:06:
                    b5:ef:78:eb:97:6c:6e:22:39:3d:e9:13:a0:80:67:
                    18:cf:a5:10:bc:eb:5d:34:3a:57:38:69:28:98:65:
                    3f:de:6f:9b:e8:54:fa:2a:3d:0c:d8:93:3d:c1:53:
                    98:52:8d:5d:de:93:b5:ec:2b:6c:32:78:2e:52:1f:
                    3e:1d:25:7d:ce:59:bc:50:11:a0:d2:1c:48:86:a8:
                    27:6a:9e:33:3e:6b:2f:1c:b9:f1:db:98:3f:f1:50:
                    85:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D2:1F:75:2E:57:02:86:E2:06:81:42:50:3B:25:F9:AD:71:D5:5E
            X509v3 Authority Key Identifier:
                keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:67:c0:ed:c8:84:1d:c2:93:0b:b0:ed:6c:17:f8:f5:82:f6:
         b6:5a:d6:18:1e:21:fa:35:2a:7c:59:c7:52:c9:1b:b1:84:50:
         7d:1e:d8:6f:c9:b5:89:ee:7a:b6:f4:e9:01:91:75:d7:68:34:
         c3:41:bc:6c:92:dc:75:61:70:57:e6:a7:f7:d9:ce:17:2e:93:
         8c:d8:4a:d2:ba:90:d8:27:cc:46:38:2e:72:6e:6a:74:5e:36:
         24:9a:db:7c:a5:cc:3d:84:f1:fc:a7:f7:ee:e7:11:c0:73:ad:
         86:bb:81:04:c9:f4:53:7e:6f:d1:c5:97:72:ca:8b:2e:e1:aa:
         a6:4d:36:a1:b3:b6:9c:d4:8b:29:02:17:2e:c3:9a:92:23:3c:
         ab:4d:e2:88:62:46:6b:ee:c0:d2:f4:fd:8b:92:c4:13:6d:e6:
         08:bd:65:10:9a:34:bc:19:28:7b:22:c3:31:ee:b4:cf:62:fc:
         0b:97:2e:60:b2:4e:2b:cd:eb:83:52:41:de:f4:c6:fc:11:4d:
         e8:6d:39:dc:4c:8d:9c:72:8f:f2:2d:f9:60:55:bf:f0:fa:05:
         7d:d7:bd:36:a7:c0:22:6f:54:06:5b:8c:dd:96:6f:6d:79:d0:
         fd:9c:56:57:4e:69:e6:4d:7b:ed:81:d7:65:26:61:e6:66:7a:
         3b:c9:f7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:15 2026 by rpki-client