Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft
File:                     gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft (raw, json)
Hash identifier:          oJX9A1vv1w1HtW7jaL3TuzTXrf/BK4ohvByoDiOs0jY=
Subject key identifier:   D9:94:0A:59:A2:E0:BB:00:B9:2C:B6:91:7F:E1:C4:80:97:09:F0:FA
Authority key identifier: 82:73:13:24:7C:48:6F:E4:34:83:3C:09:08:7A:00:A9:00:30:18:40
Certificate issuer:       /CN=827313247c486fe434833c09087a00a900301840
Certificate serial:       019D9B50C3FC591AAFA8E63810D60E47EE29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 12:00:54 +0000
Manifest this update:     Fri 17 Apr 2026 12:00:54 +0000
Manifest next update:     Sat 18 Apr 2026 12:00:54 +0000
Files and hashes:         1: gnMTJHxIb-Q0gzwJCHoAqQAwGEA.crl (hash: oASfro7A1Fx1oyUEg8VcuVOpU8sn18V+RhEYzacOaIY=)
                          2: tfKI27h4y6Yqd_bp6Jq3Mvuha5U.roa (hash: nvsIEu3C8vbMw8Dq30qS8gfgwYf/q4CpFRCeTjasyyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:c3:fc:59:1a:af:a8:e6:38:10:d6:0e:47:ee:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827313247c486fe434833c09087a00a900301840
        Validity
            Not Before: Apr 17 12:00:54 2026 GMT
            Not After : Apr 18 12:00:54 2026 GMT
        Subject: CN=d9940a59a2e0bb00b92cb6917fe1c4809709f0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ef:32:5d:df:e7:23:61:78:42:a6:fc:6a:1d:
                    e4:50:ae:24:97:1c:f8:46:45:94:76:8a:2c:0b:ab:
                    a1:bc:e1:d3:03:87:4c:90:f6:bf:c1:14:7e:c9:47:
                    c6:c7:db:6c:8c:d1:ba:10:9b:05:94:34:1b:28:63:
                    fe:de:f2:d7:58:e8:84:f9:50:6b:fd:ef:63:3a:c0:
                    20:a3:50:4c:00:df:9a:35:e4:e6:16:b8:29:1b:9d:
                    1f:0a:f0:94:fa:a1:5e:19:35:5e:91:cb:08:de:b7:
                    89:3c:68:61:1a:7c:a2:6e:c5:ed:9b:24:0b:54:5a:
                    fe:44:19:de:9e:70:45:42:39:7b:72:0e:de:e3:39:
                    8a:9c:e1:3e:7c:ca:bf:55:ac:ac:a8:7c:1e:d9:6a:
                    61:1a:80:d6:c1:2e:a6:07:6c:bc:c0:56:74:1d:f1:
                    b1:8e:3f:8f:51:79:0e:0b:d9:f0:fb:46:e7:73:71:
                    d2:ce:41:77:75:1d:ad:09:3b:b2:44:26:0a:c9:62:
                    a3:d5:06:51:a1:90:50:7a:49:60:8e:21:69:63:76:
                    9b:3e:40:91:c6:3e:34:6f:8c:d4:0e:02:c2:51:6e:
                    b2:ed:d7:6a:f2:28:c3:f3:37:75:3f:38:a5:68:45:
                    11:ec:4a:75:57:4f:ea:e0:27:4b:2f:b4:ca:f3:f4:
                    d2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:94:0A:59:A2:E0:BB:00:B9:2C:B6:91:7F:E1:C4:80:97:09:F0:FA
            X509v3 Authority Key Identifier:
                keyid:82:73:13:24:7C:48:6F:E4:34:83:3C:09:08:7A:00:A9:00:30:18:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d1:6a:e3:8d:6a:c8:1b:61:a4:03:af:cd:52:50:bd:11:5a:
         33:09:3f:b1:67:18:6f:d0:b5:ed:73:34:88:a1:49:a2:a0:7b:
         8f:bd:48:ff:d1:d2:a1:52:95:92:6e:f0:ca:8d:87:96:88:fa:
         5b:55:d4:f5:28:6f:fa:79:c5:a5:d4:e5:3a:75:22:52:70:a2:
         0d:e8:c1:b9:a1:77:06:35:87:fd:ed:b7:6e:df:a8:f8:05:ca:
         45:86:4d:53:ad:10:7e:80:b0:b6:e2:63:79:9a:85:d1:2e:0f:
         b1:c6:bb:c5:17:86:59:a0:b8:47:2b:62:23:70:ba:1e:ca:4f:
         2a:83:d2:9e:d1:70:cf:0e:32:c2:ce:66:c8:a9:de:bc:ec:58:
         d9:e4:57:c6:19:9d:bb:97:f8:91:09:fa:45:d3:67:87:08:db:
         15:80:da:18:65:98:71:e4:64:73:de:bb:6c:d2:69:56:90:57:
         19:70:55:8f:85:71:d0:f4:74:7c:e0:ca:46:09:e7:bd:8f:0f:
         9e:7b:67:8e:2c:c6:83:7e:40:35:de:3b:57:1e:25:04:ea:6d:
         e7:25:f1:d7:19:a8:9c:d8:1e:10:4f:0d:af:50:58:c6:ac:8e:
         35:80:03:3a:84:04:5a:39:7e:37:66:58:79:75:1a:95:d1:33:
         9f:1d:cc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:16:31 2026 by rpki-client