Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
File:                     0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json)
Hash identifier:          oz9wnO/IntxlgQbZcPjiCNMl18ofcyFFAE9ODoAnN70=
Subject key identifier:   3C:8D:70:3C:51:58:C2:C9:57:4B:A4:BC:A5:5E:DB:E4:71:DE:D1:C8
Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
Certificate issuer:       /CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Certificate serial:       019DA566BD9842E85CC312A8942F28E7A0F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
Manifest number:          18C8
Signing time:             Sun 19 Apr 2026 11:01:06 +0000
Manifest this update:     Sun 19 Apr 2026 11:01:06 +0000
Manifest next update:     Mon 20 Apr 2026 11:01:06 +0000
Files and hashes:         1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: rBghRKzrLE8JWDN3rOkt167a6XmkrimIN+35GJGz7kw=)
                          2: qyL4pyAcBGjJOHJM0EvmdF4KW0w.roa (hash: 27Zjq50aqFTh0F3x/N5hr5Co5n5KTC4C5HqzL3GDGGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:66:bd:98:42:e8:5c:c3:12:a8:94:2f:28:e7:a0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d
        Validity
            Not Before: Apr 19 11:01:06 2026 GMT
            Not After : Apr 20 11:01:06 2026 GMT
        Subject: CN=3c8d703c5158c2c9574ba4bca55edbe471ded1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c5:63:0d:3c:87:8d:2f:be:cc:09:a0:26:a4:
                    56:0f:a7:50:c6:8f:79:8a:83:89:a9:fa:3a:8e:55:
                    15:6a:1b:f9:86:1a:cb:07:f1:d1:50:e9:32:0d:6a:
                    43:1e:b7:f8:c5:e1:3f:79:95:13:35:8e:f5:53:5e:
                    37:19:ad:83:d7:6e:54:15:ee:6e:05:50:d5:0f:58:
                    af:25:e2:41:3f:a6:c7:26:f8:be:25:cd:53:03:2b:
                    c1:21:51:61:20:6f:d3:be:56:a5:ef:4e:0e:cb:b9:
                    38:d2:74:11:92:b3:d7:6e:5b:cf:80:d4:c1:81:56:
                    c9:bf:bd:00:9f:6a:90:91:f1:00:d8:94:ec:f8:44:
                    62:de:a7:89:4e:56:2a:e7:84:01:9a:ae:e8:b1:7a:
                    0e:4a:7f:e3:c6:8e:bd:33:d5:8f:ed:84:10:a3:de:
                    3c:d4:ed:5f:f5:2b:5d:4b:2e:78:0b:07:dc:9a:89:
                    c2:57:98:c3:c7:51:81:9e:67:7a:9f:d4:e5:12:82:
                    3b:2b:3d:9b:a1:36:37:2d:fd:2f:44:7b:2a:07:34:
                    59:c9:b0:7c:f0:95:01:1c:86:b5:0e:0f:eb:f6:5f:
                    ee:a8:d0:84:46:f0:94:ac:75:7e:7b:7c:d9:83:ed:
                    5f:77:eb:13:20:04:2a:19:4b:bd:f3:4f:34:b0:86:
                    31:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8D:70:3C:51:58:C2:C9:57:4B:A4:BC:A5:5E:DB:E4:71:DE:D1:C8
            X509v3 Authority Key Identifier:
                keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:14:a9:9b:e9:6c:d2:4b:26:f9:33:f6:6c:2d:1b:03:61:3e:
         1a:64:ee:92:b2:bb:79:2b:9b:73:2c:b1:9e:6d:4a:6e:a8:77:
         42:77:36:fe:ab:6c:a3:16:1c:24:c5:e0:0f:ad:49:f2:a4:8c:
         82:cf:e0:35:38:5c:85:2a:1d:93:71:0c:50:8f:51:1a:ed:66:
         aa:ec:e2:54:3e:6f:8a:1c:4a:73:93:91:43:5c:a4:ed:35:cb:
         52:83:92:04:11:2f:d4:79:a5:91:7b:14:d6:14:eb:db:eb:6b:
         db:fc:34:5f:66:97:c4:49:df:d3:3c:c1:10:d0:51:c0:97:7a:
         2e:c8:0c:7d:74:a6:f2:6e:25:2b:41:fc:1b:af:5c:33:d0:b9:
         8b:73:46:cd:35:29:bf:75:d5:1c:a8:fe:3e:5f:80:09:e2:47:
         35:16:93:db:e6:d8:fc:0e:66:75:7b:4f:f1:08:cb:70:ea:4c:
         f0:1f:36:c5:af:f3:27:3b:92:32:b4:ed:7b:85:a4:01:d2:e3:
         fd:a9:55:3e:09:1d:d4:7d:8a:cc:5f:7f:55:76:ce:25:a0:f7:
         8f:32:03:fa:ad:11:5a:d9:e8:ef:b4:b7:58:00:43:3b:ac:52:
         39:4c:59:bb:87:86:ce:e1:cc:18:5f:04:4b:4d:5e:c1:fb:31:
         01:1f:e1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:45:29 2026 by rpki-client