Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
File:                     EweT4kpnIB99UrZWaG9D2t46E5I.mft (raw, json)
Hash identifier:          AfOWFEY0O0u/bcqcpGsy2CQdk5dhqt7TNyyl8ZVCsk0=
Subject key identifier:   E6:6F:E6:69:C0:2A:4C:B9:48:C0:50:71:FD:D3:0A:29:F8:31:DA:53
Authority key identifier: 13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
Certificate issuer:       /CN=130793e24a67201f7d52b656686f43dade3a1392
Certificate serial:       019D992B9C032C6F8150332174F58FA051BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 02:01:05 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:05 +0000
Manifest next update:     Sat 18 Apr 2026 02:01:05 +0000
Files and hashes:         1: DUh21kc3_st9zmx6FjCgEwY4O-g.roa (hash: 6N33Nz1wYaJrweY5UTdtSITSNvvX1UF/vvjIlm8O7gE=)
                          2: EweT4kpnIB99UrZWaG9D2t46E5I.crl (hash: UNdIOMgO1YCjFD0K0b/b7T1h009XPWCzla3Pc8ItDf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:9c:03:2c:6f:81:50:33:21:74:f5:8f:a0:51:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130793e24a67201f7d52b656686f43dade3a1392
        Validity
            Not Before: Apr 17 02:01:05 2026 GMT
            Not After : Apr 18 02:01:05 2026 GMT
        Subject: CN=e66fe669c02a4cb948c05071fdd30a29f831da53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1c:fa:e1:6e:fb:68:9c:9a:4a:d6:c4:73:36:
                    60:d2:f3:28:e4:15:87:f4:7b:d6:38:60:50:70:5b:
                    da:56:90:b6:90:53:78:68:81:63:47:36:c1:d7:93:
                    08:9a:5f:29:c0:1d:75:54:d1:b8:a7:14:9f:97:51:
                    e0:2d:20:9e:be:18:cc:67:04:8b:59:aa:55:f9:8c:
                    26:e2:18:16:b7:63:37:b0:5a:bb:b6:0c:b4:ba:30:
                    87:fd:3a:0e:14:ea:84:dc:4a:06:b3:09:d0:70:a6:
                    41:19:bc:1f:65:e8:02:7d:16:36:b6:07:36:41:ae:
                    4a:26:6e:f5:04:32:01:5f:04:53:b2:80:b6:82:2d:
                    74:13:43:05:73:b4:3f:c2:14:af:6e:8e:49:3c:b4:
                    63:0c:f8:c7:6f:5e:61:8b:c4:e7:92:82:b7:6e:31:
                    21:d1:17:1c:2a:a3:0f:bc:07:7a:b3:28:bf:30:0d:
                    14:bc:a0:fa:a0:54:7b:94:49:66:33:e3:ff:a7:9b:
                    31:a3:61:7e:f9:4a:55:14:a1:aa:db:cb:41:de:0d:
                    89:e1:b0:29:e7:27:7a:d3:3a:ae:08:40:c2:79:3b:
                    ed:10:17:7a:80:2e:c0:19:69:5c:86:24:a9:f3:c9:
                    cd:01:1c:a0:1c:c2:69:c5:ec:4d:f8:fe:f4:11:0d:
                    8f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6F:E6:69:C0:2A:4C:B9:48:C0:50:71:FD:D3:0A:29:F8:31:DA:53
            X509v3 Authority Key Identifier:
                keyid:13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:17:99:1e:6f:c6:a2:40:e5:6b:68:37:0a:c4:70:8a:06:6f:
         8a:5c:21:da:24:66:17:0e:d2:8d:3c:55:5a:b9:a2:32:b3:af:
         55:1d:75:e1:8c:ec:78:7a:c9:97:4d:02:dd:e9:86:96:ca:ce:
         4a:00:41:32:3d:51:23:b3:01:21:30:58:e7:f2:16:3d:17:6a:
         3f:c3:f6:dd:75:d4:88:77:74:39:12:a9:3c:7e:b1:ef:8f:6a:
         44:36:9c:00:7f:0c:48:70:3d:92:b6:6c:89:e2:a8:84:c8:c1:
         39:f6:29:e1:1c:a3:0d:bb:05:c0:f0:55:2d:a3:03:84:f9:40:
         52:4a:41:10:a9:32:98:44:82:a2:30:54:68:58:76:70:74:06:
         a0:d9:9d:28:99:c7:46:63:df:9d:7d:58:b0:f2:dd:6e:2c:6b:
         fa:c6:d1:49:e1:37:79:f0:ce:0f:0e:4f:86:e4:c6:a5:4b:fb:
         a3:bd:c6:f5:b7:54:d1:f0:b5:60:6a:29:02:ea:9c:27:3e:87:
         07:da:12:c0:69:67:6f:e4:c7:55:c7:bd:bb:ce:7a:07:87:fa:
         10:17:88:d9:31:7c:a1:49:0c:8b:7d:55:40:75:e4:75:f9:1f:
         5f:c5:7a:f0:83:3d:1d:2e:be:01:ca:ec:5e:36:7d:a1:bd:9e:
         bb:78:fa:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:09 2026 by rpki-client