Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
File:                     _Nq63VYraOxeFY4easdvfalucyM.mft (raw, json)
Hash identifier:          VwabSNqDztMMIaL9j1mYk0e5hEf7kMFVdiyXtvLgiE8=
Subject key identifier:   E9:B5:29:49:3F:4F:0A:3D:C4:09:59:51:15:6C:D8:B8:FB:E7:A8:0F
Authority key identifier: FC:DA:BA:DD:56:2B:68:EC:5E:15:8E:1E:6A:C7:6F:7D:A9:6E:73:23
Certificate issuer:       /CN=fcdabadd562b68ec5e158e1e6ac76f7da96e7323
Certificate serial:       019DA30A261A40FCC578A69FE871AEFEA5A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
Manifest number:          18C4
Signing time:             Sun 19 Apr 2026 00:00:44 +0000
Manifest this update:     Sun 19 Apr 2026 00:00:44 +0000
Manifest next update:     Mon 20 Apr 2026 00:00:44 +0000
Files and hashes:         1: _Nq63VYraOxeFY4easdvfalucyM.crl (hash: nm2z9dRoQmaVC4DPXe0IegZp+mqp9w20EhVpclNjVQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 00:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:0a:26:1a:40:fc:c5:78:a6:9f:e8:71:ae:fe:a5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcdabadd562b68ec5e158e1e6ac76f7da96e7323
        Validity
            Not Before: Apr 19 00:00:44 2026 GMT
            Not After : Apr 20 00:00:44 2026 GMT
        Subject: CN=e9b529493f4f0a3dc4095951156cd8b8fbe7a80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:93:ef:55:11:03:35:26:0d:20:4b:e8:20:e7:
                    71:71:ce:49:c0:ca:d5:9f:32:eb:45:ad:69:18:0c:
                    28:0c:fd:18:68:76:7c:40:39:e6:55:4e:cb:9d:e6:
                    9e:54:28:18:ed:73:61:1f:7f:38:a3:9b:80:a3:f5:
                    c6:ac:39:e9:df:26:1b:a8:8d:c2:ef:6c:fa:fc:43:
                    68:a8:4f:96:34:34:3d:23:5f:17:33:5a:b8:68:bb:
                    88:05:ed:78:dd:12:66:d9:16:8a:3f:ed:01:bf:21:
                    02:37:3d:64:5e:7c:57:35:a7:f8:6d:a1:a1:74:67:
                    c4:41:eb:71:e0:ed:59:a2:d8:67:89:40:54:a3:6a:
                    00:42:35:f4:86:85:43:10:d4:08:15:c0:3c:76:c9:
                    3c:10:9b:24:cd:2f:59:24:df:96:75:57:85:5d:f0:
                    c5:11:36:59:32:c1:6f:04:8d:74:88:a5:ea:2a:80:
                    d3:d2:8e:6b:5c:6b:14:a6:f4:02:39:05:f5:35:3f:
                    de:37:7d:c6:34:77:07:29:a7:7b:43:e5:6f:99:6e:
                    58:32:22:34:00:6f:07:78:d8:c5:06:ba:7c:4c:5a:
                    8c:23:6c:ff:ba:1f:65:bd:b1:0c:6a:dc:84:7b:1c:
                    2c:31:af:af:0a:f5:a9:43:04:fb:56:0e:de:a6:6b:
                    54:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B5:29:49:3F:4F:0A:3D:C4:09:59:51:15:6C:D8:B8:FB:E7:A8:0F
            X509v3 Authority Key Identifier:
                keyid:FC:DA:BA:DD:56:2B:68:EC:5E:15:8E:1E:6A:C7:6F:7D:A9:6E:73:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e4:ca:e8:dc:3d:5b:b0:ba:70:e8:49:7d:fd:0a:08:f7:81:
         68:a9:0e:3f:58:98:42:ec:c5:d1:8a:9f:22:91:80:44:da:a5:
         a7:b1:a9:d8:48:82:67:0b:18:95:32:86:5a:72:83:83:cd:d3:
         7e:7f:21:d8:e0:64:cf:cf:42:c6:30:37:b1:5d:33:04:c7:90:
         a5:5c:aa:75:4f:fb:53:af:27:c1:5a:ce:6e:e0:70:ea:2f:41:
         36:68:1b:16:7b:b9:33:26:cb:6f:16:55:25:3b:e9:91:8b:62:
         75:0b:90:97:5b:ea:40:7c:30:ac:5f:ff:b7:c0:d2:04:50:03:
         c4:dc:fc:85:99:36:7d:b7:de:28:bf:75:9f:7f:a0:44:c8:f4:
         3c:3a:2e:78:77:2a:52:39:3e:cb:e6:84:e0:9d:dd:e2:ab:6f:
         fb:15:6d:b5:a1:ae:a2:a6:6e:5f:7c:ce:56:9e:b3:90:a5:76:
         25:db:45:46:82:ec:73:d1:eb:eb:7e:b7:d2:35:55:84:27:ed:
         5d:3e:4f:c5:bf:95:5d:9e:4d:d0:cd:0a:0a:53:fd:3b:46:93:
         8b:9d:65:94:cf:70:b7:58:04:ea:bf:85:7a:5b:0f:46:6b:4e:
         cf:38:ef:83:f8:ab:4c:81:6d:48:df:8a:f4:f9:58:80:5d:b8:
         5e:6c:0d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:43 2026 by rpki-client