Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
File:                     JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft (raw, json)
Hash identifier:          OrF2BJJeuTLvE6AFh68pzxcrzLKCmrfB4RBfO8hMvXU=
Subject key identifier:   7E:7C:05:B8:53:51:54:3F:78:2A:57:6D:7C:6C:F4:89:5D:9E:D0:ED
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Certificate issuer:       /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial:       019D999965A61EA6CAED5EBE325C9401B9BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
Manifest number:          18CA
Signing time:             Fri 17 Apr 2026 04:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:00 +0000
Files and hashes:         1: 15RDhqpZZkgsTOPSNsBqQRpBKw0.roa (hash: y1ueTNG9EINspskOLQGA36UFgKcaoRxo8MZbGAJPhNA=)
                          2: JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl (hash: lXQ6F6eZpYBLXCwUeChOnPXu9z1GQUOlEm3rOkDO1tI=)
                          3: eTMwYXEU18649L8hIZfY5-esqZ4.roa (hash: k/4i/a9Iw12pbxtRFEJ28+gA1SHnDyMvm6bPTt/tfsk=)
                          4: rBXpLoVrhiXy-JREV2NzjR2UY38.asa (hash: GsaRbQpDhXgltgozlo4qGNxDK4tm/0jB1zECh/53A7w=)
                          5: rbQZJjA5NxBcvnbRVnLr19kupbk.roa (hash: MpMdA4O/V52TqIWtfCvgUSyD9KDODyS4mOwO1kUKbg0=)
                          6: vxmucN7MwfwY4O7KULCcco-LMOo.roa (hash: LM+EAvwg71ia09ADFWQH++Rcqy8ftQKjbv/gLajVj5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:65:a6:1e:a6:ca:ed:5e:be:32:5c:94:01:b9:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
        Validity
            Not Before: Apr 17 04:01:00 2026 GMT
            Not After : Apr 18 04:01:00 2026 GMT
        Subject: CN=7e7c05b85351543f782a576d7c6cf4895d9ed0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:5c:db:3c:36:d2:19:ed:01:a1:f5:0a:06:
                    d2:68:92:1f:f1:31:99:3d:fd:6f:ae:82:14:45:30:
                    08:72:f9:c3:cb:bc:50:ec:3b:79:28:dd:fb:1e:04:
                    ef:1d:e8:b8:6a:57:f8:35:d2:fb:56:0f:26:17:83:
                    e7:6f:f5:a0:d4:e1:89:37:f5:a5:bd:91:c9:2d:1f:
                    15:ca:8a:bb:dd:c6:28:9f:6f:7d:15:8a:6c:0b:ac:
                    c6:02:67:73:75:92:eb:1f:53:4a:0d:5b:3e:66:67:
                    2e:6e:95:27:0c:e6:31:42:5c:dd:80:f8:80:0b:c7:
                    7d:12:b4:e1:63:f5:61:8d:a2:66:6d:08:58:f2:c7:
                    bf:b2:4e:90:51:43:d1:ee:0f:82:58:d0:06:fa:71:
                    96:fa:7b:63:9b:8b:9d:41:2f:c0:24:ce:c6:7e:5e:
                    76:4c:7b:fd:f9:56:f2:6c:d4:99:7a:81:c0:d6:b6:
                    62:2e:a5:40:11:cc:00:5e:fa:37:89:41:ae:97:ed:
                    d5:98:01:62:e7:87:58:26:3f:e2:ce:50:fa:7c:0b:
                    43:a1:9a:1b:f4:ce:34:31:03:df:54:92:ad:59:b3:
                    1e:0d:96:4b:24:48:ef:21:55:94:87:5d:3f:43:4a:
                    73:72:e6:6a:49:b8:75:0c:f6:d8:69:bb:91:05:49:
                    9d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7C:05:B8:53:51:54:3F:78:2A:57:6D:7C:6C:F4:89:5D:9E:D0:ED
            X509v3 Authority Key Identifier:
                keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a7:79:93:25:fd:89:49:96:aa:f5:d5:91:71:70:f9:f4:ff:
         35:38:71:20:23:f3:82:c0:08:14:96:53:6f:63:a0:c3:19:93:
         1f:d0:a2:75:20:29:0b:70:77:a8:0f:3a:c3:60:77:46:28:24:
         b2:01:3d:a1:87:d1:19:68:28:2d:78:01:29:31:42:d8:a5:99:
         d5:81:b6:65:59:9b:4f:1e:65:80:2f:aa:3b:94:e4:c1:9d:52:
         fa:d6:41:dc:f7:75:c4:20:4f:6d:8f:5a:f6:70:28:9a:21:4b:
         b7:b4:7a:8a:86:34:6d:ab:73:f3:07:16:5b:30:03:0f:6d:7c:
         65:a6:26:cd:5f:88:6a:22:2e:42:e1:23:17:76:4a:e2:cd:ad:
         d1:33:85:9e:75:b8:57:3e:cb:c6:76:77:23:84:97:56:c3:13:
         66:f3:90:17:24:e6:ea:e5:cb:51:c4:75:23:9c:22:13:65:af:
         87:89:bb:de:bf:66:23:db:04:30:07:ce:03:8e:a5:cd:fa:ad:
         2d:11:e9:5f:f0:f5:b1:5e:de:fa:a0:6a:27:b9:3a:d8:4b:0a:
         e8:8c:49:f6:9c:77:e5:55:7e:85:6a:fb:57:c0:70:56:3b:40:
         41:2b:2c:6d:cd:4c:88:fa:ef:83:46:a7:8c:27:d6:0b:50:ea:
         00:64:86:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:26 2026 by rpki-client