Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
File:                     RgeLLcCGzllV5i25IvNUuC0TzVs.mft (raw, json)
Hash identifier:          75gIV33768R70I425uPtlwYQks9UNTMTrjkSQUKaLMQ=
Subject key identifier:   D5:49:13:4D:76:AA:71:D0:12:24:9B:C0:02:A8:40:0E:CB:4B:01:A2
Authority key identifier: 46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B
Certificate issuer:       /CN=46078b2dc086ce5955e62db922f354b82d13cd5b
Certificate serial:       019DA3E6A1FD1AE28A6333CC1137E66C1D9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
Manifest number:          18C7
Signing time:             Sun 19 Apr 2026 04:01:33 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:33 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:33 +0000
Files and hashes:         1: RgeLLcCGzllV5i25IvNUuC0TzVs.crl (hash: 59wC+4hdt7hVaxfurcsrVVewLR4xMgJS9XKmTcmJ1gA=)
                          2: w-HS7u9pOCeavi1t1p3yuKE0Dtk.roa (hash: vpKhQFUnBTckNnsA2ROYZZBHVXGsMz3MaClaBLJjb4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:a1:fd:1a:e2:8a:63:33:cc:11:37:e6:6c:1d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46078b2dc086ce5955e62db922f354b82d13cd5b
        Validity
            Not Before: Apr 19 04:01:33 2026 GMT
            Not After : Apr 20 04:01:33 2026 GMT
        Subject: CN=d549134d76aa71d012249bc002a8400ecb4b01a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d0:e8:74:d3:f0:fc:9b:97:e8:63:f4:55:6f:
                    0d:3b:ab:5e:dd:3f:6f:6f:26:94:07:4e:cb:08:95:
                    5e:1c:2e:e5:39:3a:89:68:ef:98:c2:bf:f7:85:c6:
                    34:64:64:0a:af:0f:9e:34:93:bc:68:25:80:f4:8c:
                    45:f5:0a:3f:59:ba:2b:c6:a5:ce:2c:62:b7:3a:dd:
                    66:62:56:3e:1e:0c:78:b4:fe:42:c9:32:d8:3e:ec:
                    35:3d:3a:bd:0b:ff:31:ad:b8:ca:74:b3:ab:c4:22:
                    d7:b3:eb:08:ef:cc:1e:2b:97:91:03:22:4e:b3:85:
                    bd:ad:f4:bd:ae:49:00:b7:1b:de:18:58:c8:c9:27:
                    2b:a1:3c:ae:b8:cd:19:2e:99:06:c2:67:10:de:1f:
                    2d:9c:8d:37:c0:2e:01:e4:7f:7f:68:00:d5:2d:57:
                    08:b4:c8:26:fd:cc:50:65:67:75:81:ab:11:b8:10:
                    49:d6:b3:b1:c6:aa:86:ee:5b:c6:72:7d:38:de:11:
                    2b:ae:7b:55:87:2d:37:7c:bb:c8:1c:48:b3:86:f8:
                    64:15:ef:b1:dd:37:08:48:b4:19:da:5a:8c:13:fe:
                    d3:90:75:70:b2:7e:4b:6c:75:a6:0f:fa:61:b9:70:
                    39:f4:3d:74:82:88:eb:d1:99:fc:06:5d:da:fa:3e:
                    a1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:49:13:4D:76:AA:71:D0:12:24:9B:C0:02:A8:40:0E:CB:4B:01:A2
            X509v3 Authority Key Identifier:
                keyid:46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ee:c3:3c:da:a4:cd:07:ec:17:dd:ec:ff:64:4e:5c:91:8d:
         a0:db:a8:23:89:76:84:4c:9f:4b:7f:ab:ab:54:f7:e8:9e:fd:
         6f:e7:70:c0:78:08:23:fb:af:30:34:84:61:d4:6e:c5:aa:fb:
         61:4a:9a:5c:b5:aa:0c:c5:58:56:a4:2e:ff:bc:d6:e6:20:82:
         fe:08:7f:fd:10:0c:a1:01:70:4c:14:b1:62:d4:d8:27:b6:4f:
         d9:86:f1:59:9f:c6:0c:c2:21:62:30:d0:ae:27:2f:72:a2:17:
         fc:5d:1f:20:6b:24:4a:61:d8:08:86:31:8d:69:74:fe:e8:4b:
         ed:1d:a7:1d:77:d7:97:4c:a5:18:7e:43:94:e5:be:bd:7c:cc:
         5a:d4:6c:19:57:00:3f:04:ec:ad:ac:b2:1a:ce:4c:45:6f:7b:
         07:fb:3e:aa:04:50:90:16:e0:39:10:60:f2:ce:d2:f1:54:15:
         07:29:d4:9f:02:72:22:ba:c3:db:77:e5:38:fb:23:78:5d:bc:
         3d:cb:56:88:71:bc:01:02:29:58:3e:27:7a:26:77:d9:f7:68:
         1d:f8:82:36:32:70:f1:36:73:3c:09:2f:b0:ec:05:84:be:c1:
         7c:71:84:71:ab:7f:9f:4c:07:5c:e7:c9:49:be:fe:93:0d:aa:
         98:f7:fc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:44:08 2026 by rpki-client