Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
File:                     Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft (raw, json)
Hash identifier:          GRdLvSamsVatOHSgE4a7T+cF3ReMrSgLm7KlM8mVvqY=
Subject key identifier:   03:05:B8:A6:0F:A0:EB:C0:C5:32:B4:B0:9A:C5:40:05:1E:E3:E1:55
Authority key identifier: 66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C
Certificate issuer:       /CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
Certificate serial:       019D992B0940CD061FD1F8218ED2E941A796
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 02:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:27 +0000
Files and hashes:         1: 1yqrC5cFVqno3yUjEb2JEevt8hU.roa (hash: ALDcP7GRoyghMSXeDYW2VCy+XpgGkyrbpJ7hv982jsc=)
                          2: Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl (hash: vC07BD0eGY1VBfWjOYTpJ8YrGYIBoPIrQflL6hVhq9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:09:40:cd:06:1f:d1:f8:21:8e:d2:e9:41:a7:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
        Validity
            Not Before: Apr 17 02:00:27 2026 GMT
            Not After : Apr 18 02:00:27 2026 GMT
        Subject: CN=0305b8a60fa0ebc0c532b4b09ac540051ee3e155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:71:aa:5a:b8:da:8e:06:bb:56:41:9f:69:6d:
                    75:fa:b4:14:f3:46:68:f7:05:06:48:ab:81:21:aa:
                    e1:f8:46:01:dc:30:20:57:03:4d:b3:5b:be:aa:1e:
                    85:f7:64:41:29:b0:8d:a3:3b:fe:c2:b1:2e:7e:63:
                    e7:9c:de:b4:26:00:c1:94:02:f7:b4:f9:e4:bd:73:
                    b6:e8:c3:4c:86:ef:bd:59:12:ef:5e:8c:2f:41:9a:
                    30:59:92:a6:82:6b:4f:fa:e0:74:ff:f2:c3:53:6f:
                    44:c6:61:ce:7f:5d:01:8d:24:11:bc:79:3a:ab:d6:
                    0f:84:ab:31:4f:19:f4:c7:3a:0f:d0:12:cb:7b:71:
                    a1:72:32:3c:1a:39:af:1a:4d:a6:68:9d:71:1c:d5:
                    49:ff:58:e2:ef:b2:66:4a:68:7d:88:bc:67:ca:26:
                    0a:23:f4:60:b9:8e:d7:5c:a0:06:c2:36:30:9a:81:
                    e0:99:7b:49:c0:48:87:94:0c:89:ac:bd:7f:6d:49:
                    49:f4:58:58:8b:92:75:83:b8:14:7a:53:62:9d:13:
                    6f:fa:33:28:82:f0:b6:74:bd:ba:c0:a3:3d:14:38:
                    1c:38:11:19:5f:da:86:6e:b9:48:15:a4:be:c3:93:
                    84:94:3e:46:4e:02:10:7f:57:8f:d3:12:4c:eb:a1:
                    ad:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:05:B8:A6:0F:A0:EB:C0:C5:32:B4:B0:9A:C5:40:05:1E:E3:E1:55
            X509v3 Authority Key Identifier:
                keyid:66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9a:66:41:a0:2f:4c:de:f5:27:82:3a:85:29:fe:a3:12:e6:
         ee:8d:74:a8:44:1e:48:81:4e:2e:6b:d0:c5:3d:f3:c2:17:58:
         52:73:6a:c4:af:96:e6:a8:6c:fa:ae:54:87:4a:dc:6d:9a:d7:
         e0:76:ba:e2:d5:fb:a1:cb:b2:9d:c6:93:50:95:af:06:e2:38:
         4d:04:29:fb:1c:52:97:0d:2f:26:1e:bc:50:42:bf:f5:20:de:
         01:ae:80:b3:fc:74:10:e9:6f:6d:84:45:13:52:6d:6b:cb:cf:
         0f:aa:ba:18:21:63:3a:17:07:c6:9f:aa:85:d4:9e:c0:59:b6:
         32:61:58:ab:87:cc:30:71:ad:ce:7f:82:d4:f9:82:be:69:25:
         f9:01:63:7e:dc:bb:08:a0:61:69:d7:a5:41:10:6c:6d:4e:de:
         3c:ed:d2:a2:93:0e:3d:5f:ef:3b:ab:2c:f6:40:6b:a0:10:be:
         ff:e2:94:73:a8:c0:aa:6b:e8:c8:30:10:5a:22:86:3d:07:bb:
         06:e0:cc:2e:eb:1c:72:cf:ca:e9:20:a9:75:b1:a6:07:61:93:
         06:34:3c:39:87:9e:8d:f9:fa:34:5d:cc:e4:e3:43:b8:1b:1d:
         b0:dd:26:ff:bb:51:17:d0:28:53:97:9e:4e:d8:23:93:83:e4:
         99:77:24:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:30 2026 by rpki-client