Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
File:                     1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft (raw, json)
Hash identifier:          EehGheSTFWcTN4hGomdq1GmIJxLmodusNe1yoHHyfD4=
Subject key identifier:   0F:70:32:3B:6C:01:DF:27:D2:5A:B4:A7:6B:8F:06:74:32:5A:66:2B
Authority key identifier: D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41
Certificate issuer:       /CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341
Certificate serial:       019DA4C1F3B34D95EDA113B7A76F8C5175C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
Manifest number:          18CC
Signing time:             Sun 19 Apr 2026 08:01:07 +0000
Manifest this update:     Sun 19 Apr 2026 08:01:07 +0000
Manifest next update:     Mon 20 Apr 2026 08:01:07 +0000
Files and hashes:         1: 1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl (hash: 0fDPBrtaETimIh+PBxRgwVH+kgIr1uEDBT1SYPLmY2Q=)
                          2: WqEnKFzBfeJzGRg3q0xQA818br8.roa (hash: p62OMTqeflTKBBGHK0BkC6wtW0ZeWTlpmF+DHVQ50XM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:c1:f3:b3:4d:95:ed:a1:13:b7:a7:6f:8c:51:75:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341
        Validity
            Not Before: Apr 19 08:01:07 2026 GMT
            Not After : Apr 20 08:01:07 2026 GMT
        Subject: CN=0f70323b6c01df27d25ab4a76b8f0674325a662b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:96:64:fb:6a:fa:3e:60:70:aa:e7:9a:d5:b1:
                    da:bf:7f:85:e1:f3:67:64:45:13:a7:d4:44:1c:d9:
                    85:a8:75:51:96:11:48:ef:35:02:a5:b6:b8:12:35:
                    48:ca:bd:7b:e2:6c:cc:69:cd:6d:d0:ec:48:c0:3c:
                    87:1b:b2:18:fd:69:d7:95:19:21:9e:2e:f0:2e:6b:
                    e4:91:64:14:1b:72:bf:ed:d1:74:76:e7:91:98:0a:
                    98:54:63:07:96:88:f6:ce:2e:82:1a:08:38:3f:5c:
                    56:de:2d:8d:24:6c:ec:7e:a6:26:0f:fa:1f:4f:1b:
                    0c:95:be:a5:4b:b2:61:07:b1:e8:f1:f8:75:5a:b1:
                    36:04:1e:69:46:82:82:6b:c5:99:25:b8:d5:23:ab:
                    00:ea:37:8e:0a:22:62:ee:15:a6:07:bc:8b:53:37:
                    e3:1f:e7:fb:07:5c:65:a2:8d:f7:96:84:70:d3:a6:
                    68:e8:30:30:2f:95:3c:12:8f:8e:e6:93:e4:c0:76:
                    be:e7:1c:ad:1c:46:61:f1:5c:d5:9a:d3:69:08:61:
                    da:95:48:57:0b:16:49:1c:ef:46:4a:e9:55:ff:54:
                    22:70:2e:d9:e7:1e:36:53:73:34:9c:0c:4e:19:53:
                    9d:34:c2:97:c5:7c:43:0c:c2:6d:66:67:ff:ea:99:
                    84:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:70:32:3B:6C:01:DF:27:D2:5A:B4:A7:6B:8F:06:74:32:5A:66:2B
            X509v3 Authority Key Identifier:
                keyid:D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:c2:d5:7e:4f:af:74:be:a4:6b:4e:df:3d:80:70:db:0b:94:
         2f:27:c3:03:45:99:00:35:56:36:f7:7c:6f:7c:b4:99:79:2c:
         49:17:82:96:4a:c1:28:63:9f:94:f0:8b:61:12:be:cc:74:19:
         38:39:69:92:6e:66:5d:cd:b3:4e:36:e6:d1:ff:35:dd:4e:62:
         27:14:5d:b6:a5:a3:3d:68:37:fd:66:82:e2:0f:e8:8c:1f:b0:
         e2:d9:c4:89:2b:43:fd:75:d0:eb:5d:97:69:bf:c4:24:60:02:
         57:01:1d:9b:f1:18:51:5b:42:8e:7a:bc:c2:81:28:0e:0f:de:
         6f:e1:41:49:75:31:57:fd:20:2d:8a:82:17:0b:24:9a:3f:50:
         2d:a9:44:ca:a5:75:fa:60:06:1e:17:c6:9d:75:e1:27:c7:ef:
         ca:9b:46:41:ab:81:2b:4a:43:f5:c5:5b:16:a3:1a:cb:dc:aa:
         d5:d4:bf:16:d5:6b:59:9d:1e:cb:28:8c:c1:a1:5b:b3:40:dc:
         26:13:ac:9c:3c:dd:5d:2c:3e:88:83:d0:9b:ef:b0:91:91:4e:
         39:30:02:7b:ea:5e:0b:63:33:32:3c:11:e5:9a:aa:83:21:e6:
         98:31:91:af:93:43:6b:b7:9a:c4:e6:ee:8c:8d:96:7f:5f:a0:
         a4:cd:92:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:54:25 2026 by rpki-client