Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
File:                     4SOGDiDNss_fLO-zdToVuCKCkmY.mft (raw, json)
Hash identifier:          cTPavia9gexIXmf9CXUNNbhJakFkBURF5rkE1mx6C1I=
Subject key identifier:   EB:DD:FA:A1:7A:A9:5F:05:00:28:85:D8:47:D7:7C:FF:19:62:DF:31
Authority key identifier: E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
Certificate issuer:       /CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Certificate serial:       019DA453BD80C152B3B42A4924A979C53E8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
Manifest number:          18D9
Signing time:             Sun 19 Apr 2026 06:00:44 +0000
Manifest this update:     Sun 19 Apr 2026 06:00:44 +0000
Manifest next update:     Mon 20 Apr 2026 06:00:44 +0000
Files and hashes:         1: 4SOGDiDNss_fLO-zdToVuCKCkmY.crl (hash: 7jrVkv9/DbWHgAbN7NtJsM8Qz50sbzOeV1fHtbLggW0=)
                          2: S7Uz_I8IzeD7hTGoQXYS9N__GC0.roa (hash: FP7SIZ/7iLDFogtQKcQOvCQlmpm4Vmx1iE/C1QcnQWM=)
                          3: _0nCseq1FCkVbzbEBFv3dRP0CRo.roa (hash: OhfKgZoueIF3fYUkheqntTclHjDepm3uHFhyWV7IKyI=)
                          4: tEWXmnOT8-tMqoRFm6EyOLojzhA.roa (hash: Qf0eR7/hJrKNYOJsvae06sHOvRAjRyYfjiFaNgfMGTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:53:bd:80:c1:52:b3:b4:2a:49:24:a9:79:c5:3e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e123860e20cdb2cfdf2cefb3753a15b822829266
        Validity
            Not Before: Apr 19 06:00:44 2026 GMT
            Not After : Apr 20 06:00:44 2026 GMT
        Subject: CN=ebddfaa17aa95f05002885d847d77cff1962df31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:66:6d:cb:7c:f8:69:c2:03:cf:a2:b7:1b:b0:
                    35:44:b3:29:f4:45:00:10:7d:ff:d3:01:c3:01:9e:
                    7f:2e:f2:93:12:20:c9:bd:f9:9c:ea:45:1b:d7:50:
                    c2:02:ba:f9:c5:ad:23:7c:9e:2b:3a:76:a0:3d:f1:
                    17:a9:90:ad:fc:3e:f8:a3:1a:e8:7a:be:ad:19:b7:
                    41:f4:eb:eb:ed:ea:05:00:8c:08:a7:a3:82:3f:22:
                    ee:c4:f3:30:a3:ea:17:07:bf:90:dc:5e:59:3b:dd:
                    5c:bc:28:d6:96:54:ab:7b:b8:9b:ce:e1:dd:18:87:
                    50:2b:a3:bd:38:9d:92:1c:6d:18:8a:50:e9:6e:e7:
                    fa:00:d4:ef:ef:09:61:55:86:33:87:cc:8b:bb:d5:
                    06:ee:6c:75:3b:90:79:86:ba:bd:22:e0:dd:46:f6:
                    93:50:ba:10:ec:b3:a7:a9:2e:9e:71:45:ed:c4:b4:
                    a1:83:87:2a:f6:3f:8e:6c:23:dd:e0:8b:4e:65:f0:
                    d7:fe:7f:8e:c1:31:ac:4c:57:5c:d5:8d:25:1c:26:
                    6f:6b:5f:f0:f3:ba:81:2a:f5:2e:cf:06:ab:34:27:
                    11:1b:d6:97:d8:05:e8:72:b1:2c:c2:9d:3f:da:bd:
                    fd:d6:8d:a5:8a:14:87:12:46:99:f3:ab:86:0c:06:
                    9e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DD:FA:A1:7A:A9:5F:05:00:28:85:D8:47:D7:7C:FF:19:62:DF:31
            X509v3 Authority Key Identifier:
                keyid:E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:49:0c:88:07:8f:b8:2f:21:65:f5:4e:6a:97:d6:bc:c3:6f:
         3a:32:8b:ac:d6:cc:7c:17:10:4e:b2:c0:dc:07:24:c7:ca:80:
         6f:10:4a:1f:41:dd:b2:d5:a3:df:f0:78:5f:d2:f3:17:41:8d:
         3c:ed:58:30:79:5d:7f:66:72:fa:db:da:3d:9f:24:ec:20:67:
         2d:f0:c8:63:da:17:1d:22:3f:24:18:e8:08:b5:ed:11:46:7f:
         f5:aa:44:08:14:a0:57:76:00:8b:28:a3:66:8c:10:ac:ad:07:
         f3:cd:13:3c:35:4c:30:8f:d8:2c:c0:6e:35:98:d4:f5:22:9a:
         f1:b9:c8:2a:f2:90:a8:49:5b:15:82:6f:2e:bd:12:84:3c:82:
         7f:22:2a:3b:17:87:37:9b:5d:31:2f:88:f1:55:11:38:ea:67:
         79:8f:65:cb:19:0f:34:05:ec:44:f0:2d:83:95:cf:bf:ee:39:
         9c:60:6d:d1:d3:2f:ec:13:d2:4a:ce:2d:20:64:03:8b:6d:46:
         9c:2c:5b:c6:d0:80:f5:d8:5e:ed:7a:b2:27:78:c4:08:bd:b1:
         f0:91:4e:7e:45:42:10:38:16:7e:c4:7a:41:e6:52:c0:bf:9c:
         aa:bf:3f:de:54:31:8b:02:51:43:32:7f:e1:cf:27:6c:fc:cd:
         32:0f:4a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:25 2026 by rpki-client