Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
File:                     C-d565C-fVvgwdxIps0j29Q7l8g.mft (raw, json)
Hash identifier:          2OBMiSz7tzrwJgdATsFRQaKC4MpBhq8XXkTBLOKxlug=
Subject key identifier:   01:C5:C5:39:63:39:70:0B:89:A2:DE:4E:C3:F1:91:AE:59:DC:6E:16
Authority key identifier: 0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8
Certificate issuer:       /CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
Certificate serial:       019D9B1996AE619E78F0FFD710F7DA61CC44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 11:00:38 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:38 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:38 +0000
Files and hashes:         1: C-d565C-fVvgwdxIps0j29Q7l8g.crl (hash: 9oH9WhHlJcJt+fkQnxtpCmPSR339dQQLL/jiivzOKNs=)
                          2: Pug_p9HITgpm7BJCSDWU0O14f6k.roa (hash: ZRQX3KG8bE/bbw5v9G0xJ8TDZlB8FFTvWWz9Ahu2Og0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:96:ae:61:9e:78:f0:ff:d7:10:f7:da:61:cc:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
        Validity
            Not Before: Apr 17 11:00:38 2026 GMT
            Not After : Apr 18 11:00:38 2026 GMT
        Subject: CN=01c5c5396339700b89a2de4ec3f191ae59dc6e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:fa:af:f2:50:a9:f9:dd:40:32:14:c2:34:
                    0f:38:b4:52:96:59:c6:f7:8a:ee:f1:ce:53:33:c0:
                    9a:62:7c:41:cc:4e:5f:7b:52:af:7d:45:f1:57:b3:
                    36:f5:b9:03:32:05:dd:e6:b2:97:f8:73:1e:53:92:
                    af:aa:77:10:0d:cc:6a:13:72:9b:32:ef:d5:fc:be:
                    bb:f5:91:ee:54:a3:1c:25:54:a2:46:08:fa:34:41:
                    3c:7e:16:bf:e4:d7:72:65:c8:f8:27:cc:ae:3d:ec:
                    07:ef:b4:42:78:3f:0e:83:4d:90:0f:4b:c7:cd:ab:
                    03:81:cc:c8:26:6b:b9:d8:49:a2:d7:e3:73:7f:b1:
                    2a:8b:67:0e:80:38:ed:3e:54:f5:7e:13:a7:38:b5:
                    bc:2f:e7:72:9c:aa:06:c7:66:14:37:b5:83:1b:51:
                    29:02:ec:0d:a3:da:57:33:a5:92:97:08:a3:2b:de:
                    cc:3c:11:b2:0d:f0:a9:4b:57:b4:a7:43:37:29:f3:
                    cc:3d:b9:b7:9d:99:26:14:41:5c:00:b3:52:c9:84:
                    7b:46:a2:df:59:53:e6:4e:77:e9:e0:50:36:5d:41:
                    98:b4:34:fa:32:06:75:86:ec:2c:ee:7f:56:63:56:
                    23:1d:b5:62:1c:bb:18:2f:c5:46:ad:ae:fe:af:b1:
                    76:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C5:C5:39:63:39:70:0B:89:A2:DE:4E:C3:F1:91:AE:59:DC:6E:16
            X509v3 Authority Key Identifier:
                keyid:0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:eb:a1:2a:8c:8b:e1:2f:d3:bc:87:3f:de:9f:02:8f:16:2d:
         de:73:55:1d:ef:84:5e:8b:8d:af:28:42:37:f6:14:7e:70:9d:
         51:80:9a:ad:e7:c0:55:62:01:ef:4d:00:47:56:6b:b6:6d:65:
         fd:5e:85:0a:d6:54:c3:eb:ee:1c:46:af:62:27:43:43:76:8e:
         f0:91:98:2f:41:db:53:90:e8:80:81:f7:ec:5f:1c:3a:b7:d2:
         42:19:a5:d8:ef:08:b7:45:58:5f:65:1e:20:04:6d:60:ea:c6:
         89:fd:0b:3b:80:bd:9c:6c:5e:c8:77:51:88:1c:36:74:4e:81:
         82:c8:88:fc:c7:f8:e9:73:7d:d4:91:9c:d4:2b:80:03:13:8a:
         b3:aa:70:50:4f:3e:a6:38:21:eb:0c:42:1e:c1:77:4b:78:c9:
         b9:bf:73:52:9e:83:e5:e8:79:62:59:5d:c9:e0:b6:7c:67:2d:
         86:55:8f:2a:55:6a:4b:08:fb:e3:e8:90:0a:5d:c8:d9:81:94:
         d6:a0:47:71:2d:99:9f:3f:00:00:2b:5c:58:c4:65:fc:32:34:
         64:1b:b1:61:9b:fb:32:af:6c:ac:bc:77:5b:84:60:11:12:42:
         a6:95:f2:91:23:9b:13:e1:3d:7d:12:0a:58:00:03:4a:b4:59:
         67:7e:0c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:18 2026 by rpki-client