Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
File:                     ESCgzgE-LVKm_zVKJwiUu5mORUc.mft (raw, json)
Hash identifier:          FSUdoSGHkp3DEMko9t4+xBcNh+tOsiRg1GbqduhqoWQ=
Subject key identifier:   E4:50:9A:C8:47:63:51:FE:F8:B2:C3:26:1C:34:05:AA:5E:DF:A1:0B
Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
Certificate issuer:       /CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Certificate serial:       019D9D3F851335F5F66D4D9B04577A6DACA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
Manifest number:          18C8
Signing time:             Fri 17 Apr 2026 21:01:18 +0000
Manifest this update:     Fri 17 Apr 2026 21:01:18 +0000
Manifest next update:     Sat 18 Apr 2026 21:01:18 +0000
Files and hashes:         1: ESCgzgE-LVKm_zVKJwiUu5mORUc.crl (hash: y5tJmhvFHWO0obYyFv1KtrAFZi7oMtTM3k8SdAfn9Ns=)
                          2: Nj-fcrd8btYTmooIT07USGH4uhc.roa (hash: NGae1BAct6VWVRLG8OfFbqQcDMzJnoL00dhPvysFzMY=)
                          3: dV-H29alZEFLImGmyiY7hQJaEAY.roa (hash: Li61GxGOSJxUgraJk65DXVq0NLMB+4WQGr7Nxv/T31Q=)
                          4: e-tZ1DdZl0dxPJy0N9Yn-0Al0M8.roa (hash: QAdbievfGnFmg15O+j0D44UXxw3G9rYuADuFC3J6DdQ=)
                          5: kNeO88W6WiZjVCqS0huGRYDNIkU.roa (hash: lTC2ffNYxbrVzusWfHz2XumlwYx6P/xuLd8Z8WVhDpk=)
                          6: tqA8MnPED0zVZqFPU0EtU7Uh-p8.roa (hash: nbXmQvCUG27Q3g4mguFw6ecZllhpCxpa9WaI9lGnt70=)
                          7: uMoLLTIIp3goMEn7y4z_relYCj0.roa (hash: OkL4CzvIc+/+beHGUC2g9z5v1OG6NY0LtX6M7jVvI9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:3f:85:13:35:f5:f6:6d:4d:9b:04:57:7a:6d:ac:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547
        Validity
            Not Before: Apr 17 21:01:18 2026 GMT
            Not After : Apr 18 21:01:18 2026 GMT
        Subject: CN=e4509ac8476351fef8b2c3261c3405aa5edfa10b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cc:8e:28:62:4f:0d:35:49:11:d0:27:f7:c6:
                    22:b8:f5:1f:56:d0:6b:2c:2a:99:08:1a:52:7d:28:
                    17:2c:14:8d:fd:c3:5d:a2:67:9b:f6:de:32:b2:f9:
                    ac:83:1a:8b:6f:6c:0d:09:f5:f5:0c:57:ac:4e:48:
                    a8:16:16:3f:8a:96:14:ca:35:2e:eb:54:1f:ab:f3:
                    86:90:48:c1:ca:be:d4:96:85:a0:fb:8d:bc:69:62:
                    93:40:e2:9f:4f:5e:68:26:d1:49:43:cb:1d:83:05:
                    b5:57:9f:5b:24:85:f3:ab:76:1b:19:43:7d:fe:03:
                    9b:2b:49:80:18:e7:44:c8:1e:6c:98:c2:32:6d:a0:
                    7d:f9:56:6c:1f:50:fb:99:68:a8:d7:8e:86:32:ab:
                    e0:0f:3b:f7:3f:be:ee:a7:3a:1b:33:97:a2:39:5d:
                    2f:3a:4a:ac:84:b5:55:4c:15:17:1e:ae:10:46:67:
                    38:7d:bb:8d:5e:0e:bc:c1:63:76:b3:1e:ba:ed:53:
                    8b:8e:b6:23:ee:93:76:52:83:c9:8e:31:d2:57:00:
                    d8:b4:4b:7a:98:7b:83:69:48:25:d9:ca:e5:38:3f:
                    05:6e:85:7b:74:cb:2e:29:24:c2:7a:e5:71:44:38:
                    62:c1:aa:0d:3c:79:5e:35:44:e6:0a:39:df:a4:db:
                    c0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:50:9A:C8:47:63:51:FE:F8:B2:C3:26:1C:34:05:AA:5E:DF:A1:0B
            X509v3 Authority Key Identifier:
                keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:1f:6f:c4:32:9c:16:24:61:2e:14:58:c4:93:b9:38:10:0a:
         1e:ac:3e:ab:03:d4:2d:c7:71:8d:e0:4c:68:b1:ec:5a:43:99:
         7e:75:f9:c6:a1:75:0c:e8:83:dc:c9:8c:e3:b4:7c:44:a8:ad:
         64:27:d3:82:2d:02:83:3f:b8:58:ac:1d:fb:2e:8b:07:06:08:
         c2:97:43:e6:e8:dc:9f:01:f0:e5:c2:4b:c3:be:2f:c0:98:62:
         9e:7c:a3:e4:9f:da:ed:08:b6:cb:03:1f:23:06:e2:55:80:a0:
         e1:6a:4f:94:f1:c3:fb:78:ed:2d:53:b9:fb:b9:cc:1d:64:b3:
         6d:b4:44:3e:f8:d9:c3:d1:61:ce:5a:a8:da:b5:14:67:fa:bd:
         4e:c0:82:b6:c7:8f:c3:7a:1b:93:0f:dd:aa:30:ae:76:5c:7a:
         b5:da:9d:d8:c6:01:4b:0b:a3:b6:8e:fe:5e:f2:1b:17:4b:f6:
         39:f8:29:e9:46:2f:a8:77:4b:6a:5d:e0:a4:5d:ab:b1:d9:9a:
         b7:68:e2:16:11:2c:c6:b8:69:fd:3a:45:a9:38:da:f1:02:e1:
         f2:f4:f9:a8:5f:6a:6c:8e:fd:4a:66:99:10:ae:0e:13:cd:1b:
         68:80:24:c5:de:0c:87:e0:cd:0b:2f:d5:a9:ff:fd:60:71:ea:
         6f:6f:a3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:53:15 2026 by rpki-client