Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
File:                     7jcJhfg_QTMBEcNQzWseHurVJqo.mft (raw, json)
Hash identifier:          f2yUBSD3uvgmNFh3QOywAuCbNnsloe00Vgyg9VsW1oY=
Subject key identifier:   4A:E0:10:B7:2D:AB:13:E6:F2:D3:3F:11:CE:0C:7D:9C:07:6D:F5:01
Authority key identifier: EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA
Certificate issuer:       /CN=ee370985f83f41330111c350cd6b1e1eead526aa
Certificate serial:       019D9CD193C90BB4CBE6ECA22CE73005291E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
Manifest number:          18D3
Signing time:             Fri 17 Apr 2026 19:01:13 +0000
Manifest this update:     Fri 17 Apr 2026 19:01:13 +0000
Manifest next update:     Sat 18 Apr 2026 19:01:13 +0000
Files and hashes:         1: 7jcJhfg_QTMBEcNQzWseHurVJqo.crl (hash: 2w2ta3RnzYv+TBrYhh0L+jG5AwXkBAx/N3U9GhV/ZC0=)
                          2: HSs3385xu_H8dl3TDXVzpblWf5M.asa (hash: IZbMJ1rjxkHDkmxCMcoFUQYnapNH2BcTBtWX5Xdi8q0=)
                          3: MhU4CNeO4fgXq9_1vtRyy7zbhQI.roa (hash: 35d8hKQp5xyI2igMbZOkqF53rvhGzfdA1qxc+ja6Q8c=)
                          4: NE6F34chlE5AGGjbfBzSGKkprsw.asa (hash: 0Vz/xLWp4kZquxsYZecsrhHJInzdvDG4CDhO9vYduPQ=)
                          5: j2TcQ7FFpXzz-tgwxe38uLXQdgk.roa (hash: MMiIwVbQ8aiheyhBeB/trgDx55b/UG6AYdCk4oAMvxI=)
                          6: rCtt8sK2GOYKG94Svu_2uR5ddhQ.asa (hash: Q+nYBQ+gQsTBmSCinQLhjNQ/n5eKHzDbFRDbYdwd7Mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:d1:93:c9:0b:b4:cb:e6:ec:a2:2c:e7:30:05:29:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee370985f83f41330111c350cd6b1e1eead526aa
        Validity
            Not Before: Apr 17 19:01:13 2026 GMT
            Not After : Apr 18 19:01:13 2026 GMT
        Subject: CN=4ae010b72dab13e6f2d33f11ce0c7d9c076df501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0c:ff:a4:b3:58:c6:37:09:8a:31:20:9a:bc:
                    6f:2b:28:69:f3:7f:95:58:3d:da:0d:79:57:a8:b8:
                    a4:bd:0b:81:c2:44:d6:f9:a6:41:7e:72:02:63:c1:
                    ba:5f:a8:a9:c8:69:a9:77:b0:81:b4:ae:df:d9:0d:
                    02:4b:f6:8a:22:90:f4:a0:49:81:6a:60:eb:7c:fe:
                    18:0e:f1:d0:be:2d:d2:f4:26:85:05:c0:c7:eb:0f:
                    fa:f6:e7:51:2d:e9:19:78:6f:88:81:b5:3f:3b:68:
                    99:31:9d:e9:d3:e3:1a:a3:07:37:4b:06:30:1d:30:
                    5c:f9:4b:f0:1e:90:bc:8b:65:55:f7:cd:09:6e:73:
                    c4:83:1e:32:bb:c5:b7:18:54:0d:09:27:1a:b9:ff:
                    57:48:44:72:2a:f9:e9:98:f0:26:be:9e:8d:08:1b:
                    fa:9b:8f:ba:cf:9c:8f:2b:09:fe:ce:65:57:a6:12:
                    39:a3:76:57:87:4c:af:38:c4:78:7f:cb:2a:7e:72:
                    0a:f8:6e:c6:21:92:50:ad:ab:9d:2a:32:e9:d7:9d:
                    cc:c5:1b:5b:e1:e5:a1:47:7b:0f:cd:80:e1:78:04:
                    eb:6a:1e:25:75:04:1e:62:09:4c:99:22:87:d7:3f:
                    2d:9b:e7:c7:24:70:46:b4:92:00:ae:87:47:70:2d:
                    70:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E0:10:B7:2D:AB:13:E6:F2:D3:3F:11:CE:0C:7D:9C:07:6D:F5:01
            X509v3 Authority Key Identifier:
                keyid:EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:06:74:01:31:c2:50:6e:b8:ee:cb:64:72:ea:25:47:18:61:
         c8:de:c3:ce:22:33:c8:72:1f:17:1f:54:ff:ac:ef:1b:79:7e:
         30:bb:22:71:96:4f:2b:e2:6e:a6:e8:b0:c8:29:8a:4f:2d:34:
         10:57:cc:3c:9d:e3:6d:d8:de:bd:f3:ed:5b:61:0e:2f:63:cb:
         c3:fd:5b:50:71:bf:34:5c:a0:dd:ad:84:6a:40:6c:12:0d:eb:
         28:f9:7c:25:5d:04:25:b3:00:70:be:04:76:99:f1:37:6e:58:
         0f:0d:89:f9:fd:47:2f:24:3c:77:72:9b:d6:a0:09:21:c5:76:
         20:b6:03:41:b3:8c:2e:8b:3f:45:96:c6:81:1e:71:c0:f5:fc:
         b8:0b:e2:06:5e:4a:ea:9c:9c:c8:55:a4:69:58:63:17:cd:7e:
         61:da:91:f3:8d:3c:32:ff:a1:e5:a4:da:cf:ac:44:c0:14:5b:
         e5:75:ad:24:89:a4:e5:85:03:f4:e7:26:4e:5f:97:be:cb:9a:
         a4:6a:03:5b:e3:c1:87:f5:bb:3f:f6:26:a6:72:a9:23:27:f4:
         8c:60:10:c1:32:ac:8c:15:bb:b0:f8:63:36:b1:a2:52:4d:a8:
         6d:e5:29:30:31:3b:b3:23:01:66:59:86:e2:23:7f:eb:db:53:
         71:33:f0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:51:20 2026 by rpki-client