Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
File:                     51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft (raw, json)
Hash identifier:          OB4GsrQ6CtLZOhWO8aQMyJuHKRS+bOa2fdcdvUBkQSw=
Subject key identifier:   CF:53:A3:88:52:F4:9D:23:92:04:EC:36:65:DD:00:94:5E:7F:89:82
Authority key identifier: E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88
Certificate issuer:       /CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
Certificate serial:       019D9BBE706F8E7E303F330B69A24943D09B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 14:00:42 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:42 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:42 +0000
Files and hashes:         1: 51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl (hash: 6vAbkfmzrBDlZ/4c2pQ5zMXeceMwjWDtxAn3rReqTIw=)
                          2: P39ugDcLvRSRgxyi-0KZpHQEqhs.roa (hash: hvw+iWajh4kVRMPbjAFg3SlmXwK5dhZKnwTAvA/Phbc=)
                          3: RutY2PEzNNQaSoLjnZ05mYIop5Q.roa (hash: XzQEjLEwEdF5fa58iJ8ASdj8lsvXpmYLt3uKDH2dqwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:70:6f:8e:7e:30:3f:33:0b:69:a2:49:43:d0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
        Validity
            Not Before: Apr 17 14:00:42 2026 GMT
            Not After : Apr 18 14:00:42 2026 GMT
        Subject: CN=cf53a38852f49d239204ec3665dd00945e7f8982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cd:46:69:41:50:98:75:e5:d4:43:83:e4:b9:
                    6c:91:c1:03:2b:25:4e:ae:00:17:ac:f1:e4:be:2a:
                    0f:5e:cb:df:9d:31:1b:f8:7e:7e:b4:14:e7:c9:6a:
                    c5:69:27:91:20:78:78:cc:3c:e8:87:73:e9:e8:2c:
                    bb:2a:d3:67:97:e9:70:94:d4:6d:1d:d3:90:e4:70:
                    67:66:89:d1:2e:af:d3:93:7b:40:c0:1b:d5:61:9e:
                    c3:33:91:fc:c4:02:b7:f0:88:36:b2:1b:15:4e:32:
                    e2:ef:c7:66:ce:12:63:aa:43:8d:e3:c9:ba:e0:97:
                    1b:45:f9:b8:da:a1:d2:16:8a:2c:53:33:80:39:93:
                    68:f9:6c:86:5d:a7:8a:f8:2d:ca:99:54:5d:49:1d:
                    a8:3f:a6:f3:01:36:55:0a:a8:42:ab:d0:54:7c:d7:
                    a5:83:fa:5e:36:b6:e3:c0:f4:75:32:5e:6b:7e:34:
                    1e:7f:c3:a8:58:c8:1f:c8:60:e8:02:6e:f9:a8:d1:
                    fe:ff:fe:1e:fb:10:d3:99:ec:18:31:ce:f9:52:5b:
                    72:5a:da:e9:96:5b:44:64:86:16:23:8f:9f:85:f1:
                    d5:5b:6c:16:11:66:4c:b3:0b:1f:a8:c7:40:52:81:
                    b2:1a:e9:34:19:f0:dd:0c:71:3b:8a:bb:c9:9c:6a:
                    93:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:53:A3:88:52:F4:9D:23:92:04:EC:36:65:DD:00:94:5E:7F:89:82
            X509v3 Authority Key Identifier:
                keyid:E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c2:2a:71:f1:26:8e:56:93:97:ef:fb:4d:3e:df:9e:3f:28:
         29:8f:9e:a5:22:4c:a7:02:48:cf:ce:76:88:3c:aa:4a:cc:22:
         b5:4c:9e:cd:6d:12:11:7d:7a:e5:bc:58:1f:f4:ee:33:32:04:
         a4:4a:6b:66:ac:12:81:58:07:d5:2b:3f:ba:d5:bb:f4:00:da:
         56:0b:2e:68:00:65:17:ae:d2:2a:1c:96:96:87:d3:6f:4c:36:
         60:f1:2f:13:73:2d:c4:ef:e7:13:2b:01:12:37:cb:d3:ef:b1:
         df:f5:8c:b7:65:4f:b9:f7:ca:74:a0:e6:56:5c:e2:f6:85:e6:
         b6:20:da:f9:57:dc:c4:9c:c9:01:e7:e6:15:ce:5e:3a:95:28:
         a8:4a:07:22:d5:47:96:c3:31:e0:7d:38:f5:35:75:09:d8:98:
         a8:c7:04:c2:ca:cd:c8:92:15:4a:7d:17:15:8a:60:7d:2e:cb:
         4d:b6:7b:f3:d3:d1:ed:c4:9e:a4:f0:15:3a:88:69:38:df:b2:
         62:3a:a8:e6:ea:b4:29:c9:a5:a4:b6:1c:f2:14:34:6d:76:18:
         e5:c3:7b:6d:22:cb:f2:f8:17:65:33:b8:18:f9:ea:c2:b1:9a:
         04:08:76:55:f8:44:b5:92:ea:68:43:45:82:07:10:f0:2f:4f:
         05:ff:3c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:09:51 2026 by rpki-client