Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft
File:                     gRVc2PIuywFPiq1xDAcMfofLCi8.mft (raw, json)
Hash identifier:          rB2UsjpT1hYfV4eabMxVaV71PwEziKCQ/WevF4F3TJY=
Subject key identifier:   FB:18:7A:EE:07:34:AE:34:14:91:66:D2:0D:75:94:56:BD:60:4B:91
Authority key identifier: 81:15:5C:D8:F2:2E:CB:01:4F:8A:AD:71:0C:07:0C:7E:87:CB:0A:2F
Certificate issuer:       /CN=81155cd8f22ecb014f8aad710c070c7e87cb0a2f
Certificate serial:       019D9C630AB23290D49C009AAF1785A3810E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gRVc2PIuywFPiq1xDAcMfofLCi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft
Manifest number:          18
Signing time:             Fri 17 Apr 2026 17:00:29 +0000
Manifest this update:     Fri 17 Apr 2026 17:00:29 +0000
Manifest next update:     Sat 18 Apr 2026 17:00:29 +0000
Files and hashes:         1: gRVc2PIuywFPiq1xDAcMfofLCi8.crl (hash: kEFecyQhKVsZJN9M0MA6ya85mcnMwbJbSvzqV9CP5Y4=)
                          2: uDc2pV6zqfjwI-4br5JK6tiGG5E.roa (hash: bNNvOAco8leAwP4SgeSGZ8jpQ0jHOezRglGnSiHe4TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gRVc2PIuywFPiq1xDAcMfofLCi8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:63:0a:b2:32:90:d4:9c:00:9a:af:17:85:a3:81:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81155cd8f22ecb014f8aad710c070c7e87cb0a2f
        Validity
            Not Before: Apr 17 17:00:29 2026 GMT
            Not After : Apr 18 17:00:29 2026 GMT
        Subject: CN=fb187aee0734ae34149166d20d759456bd604b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:62:17:1a:dd:c0:87:f0:8f:6b:de:94:73:5c:
                    ca:22:db:0e:ba:12:88:b9:4e:d1:dd:fe:9c:94:1b:
                    27:62:41:62:82:7e:89:c8:cd:7c:65:c7:59:64:4e:
                    0f:8d:8e:c3:9d:72:ea:88:4a:a6:f9:1a:be:07:0f:
                    6b:5b:89:28:a2:ed:73:06:53:d5:f2:eb:58:bb:05:
                    57:dd:65:82:4e:63:36:b2:dd:5f:f2:9b:3a:f2:29:
                    8f:dc:c9:ac:17:90:17:63:a7:d6:d1:2f:a8:3a:2b:
                    39:23:d2:d3:76:ea:0e:5f:8f:f9:2c:e9:8a:05:73:
                    58:a5:5b:78:b2:a5:1d:47:b7:58:45:f3:e0:19:cd:
                    45:48:2d:b0:bf:bc:b7:4a:69:b3:d9:df:2f:f4:8b:
                    4d:e6:e5:93:91:68:cb:10:19:ee:85:07:af:46:a3:
                    f8:aa:a8:ff:3e:b8:98:23:5d:11:d8:3f:2a:e6:db:
                    e8:24:9a:d6:08:d4:0b:34:dc:4e:36:3e:8a:a3:5a:
                    50:ca:f2:1e:f6:66:0e:5f:da:a8:ed:b7:c5:a0:b5:
                    46:65:2e:8a:0e:34:90:66:15:20:d1:1d:4a:93:60:
                    c5:b5:ad:63:d6:80:e0:27:16:b5:06:61:8e:70:9c:
                    25:07:64:3e:e8:92:dc:23:6e:31:9e:b0:6b:58:f6:
                    84:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:18:7A:EE:07:34:AE:34:14:91:66:D2:0D:75:94:56:BD:60:4B:91
            X509v3 Authority Key Identifier:
                keyid:81:15:5C:D8:F2:2E:CB:01:4F:8A:AD:71:0C:07:0C:7E:87:CB:0A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRVc2PIuywFPiq1xDAcMfofLCi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:b4:35:f0:ba:20:ac:2c:a3:96:81:e5:ef:45:bf:52:06:82:
         ea:23:db:07:14:98:94:b1:d1:aa:a3:62:d1:2a:e0:50:09:d4:
         e7:c3:1b:04:34:0d:40:33:67:ad:be:52:53:54:2f:ad:7c:92:
         b1:75:aa:b3:67:61:c5:a2:8d:c2:25:69:30:5a:f7:db:c7:e3:
         29:99:81:04:f9:74:c8:04:4d:29:80:7c:3a:d6:91:6a:72:39:
         33:8e:62:1a:1e:7c:2a:ee:a8:9c:33:90:90:18:28:ac:f7:a2:
         76:c0:e8:e6:63:91:7f:93:57:a6:48:2f:24:b4:39:40:a9:1a:
         48:84:ad:2d:a1:0a:c2:2f:72:d8:7b:fd:2f:52:08:9b:3c:5e:
         15:df:58:9f:93:ab:e3:ad:9d:ef:7d:5a:1d:27:b1:e7:c6:cc:
         7b:fc:13:98:36:fc:d9:f7:be:e6:92:aa:1c:43:bd:4d:c3:94:
         2a:98:a3:63:24:ff:26:0c:d1:6e:a9:00:d0:0f:b3:69:8f:b2:
         87:9d:51:85:4c:50:f3:81:b7:de:9c:21:f1:a3:49:49:b1:3c:
         ba:74:07:a3:04:3e:ca:e4:3a:b4:4f:c4:df:70:a3:54:a2:4e:
         91:f5:e2:eb:33:ff:9f:38:d9:aa:33:3e:7e:55:b1:a8:16:57:
         d0:cc:61:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:12:52 2026 by rpki-client