Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File:                     INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier:          SPsE/m2rey3TEBlMQL2JLQXcUt3w2d144zb4+5smSGc=
Subject key identifier:   E4:12:79:CB:AD:4E:13:4F:E9:59:28:4C:D2:54:8B:51:02:27:67:87
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer:       /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial:       019D98500E339550ACA47580CFFD20D02FA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number:          18BD
Signing time:             Thu 16 Apr 2026 22:01:16 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:16 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:16 +0000
Files and hashes:         1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: /eVYHz24tJxJFq7IYOUelXBdv9r5Zy5naBa+QRsfOu8=)
                          2: V8NlnKjUgS7bj4rUkCz5LctnTTY.roa (hash: 2V4IKo8nS+06Kfv+fwmatbojuyWYf1XN4kaAl/BcTuo=)
                          3: oEH5CL4Krryfh-iShKBtkq07VfQ.asa (hash: GkycII0/qjAz0UiuBL6s5szZ1IchdfI3Luf3s69wkYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:0e:33:95:50:ac:a4:75:80:cf:fd:20:d0:2f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
        Validity
            Not Before: Apr 16 22:01:16 2026 GMT
            Not After : Apr 17 22:01:16 2026 GMT
        Subject: CN=e41279cbad4e134fe959284cd2548b5102276787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:81:e4:64:79:fb:b0:d3:78:e0:39:05:d3:b2:
                    dd:4f:18:2d:5b:44:a3:03:a9:19:a9:1c:db:5a:13:
                    05:6f:f3:2e:dc:78:8a:c0:10:93:c6:8e:ad:97:cd:
                    c0:ce:46:39:d1:41:96:20:63:29:ca:7a:5e:a3:80:
                    ef:3e:a8:2a:a8:88:6b:ec:0a:a9:c6:cc:b3:50:63:
                    73:ba:34:7c:8b:cf:b9:a6:c1:3e:8f:10:4e:25:d2:
                    40:28:e5:7f:c3:57:c1:04:98:57:ab:90:31:47:b5:
                    3c:67:23:91:68:69:2b:8f:4c:75:f1:fc:3f:9e:d4:
                    9a:18:f8:0f:89:27:57:af:d2:ba:e7:f4:5f:28:7c:
                    a9:14:e1:c7:d9:63:4c:4e:b0:cf:03:df:96:15:5d:
                    1b:c2:b9:c9:e6:f5:d3:8d:f7:21:55:96:fb:fa:ac:
                    83:22:23:f3:24:89:e5:25:74:3f:59:68:be:33:81:
                    9b:4b:2d:37:5d:e0:99:fe:98:e7:84:d4:48:61:8b:
                    31:38:61:0e:79:9e:c9:c1:0b:c2:87:4b:16:ce:20:
                    fe:39:76:b8:80:e2:48:5f:ce:d5:18:1d:89:32:0d:
                    40:15:5f:f6:04:2f:90:b3:6e:e1:f6:49:d6:cd:65:
                    63:e0:1e:50:aa:45:ac:1d:df:04:c2:ae:51:ff:2d:
                    75:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:12:79:CB:AD:4E:13:4F:E9:59:28:4C:D2:54:8B:51:02:27:67:87
            X509v3 Authority Key Identifier:
                keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:61:5b:6c:c7:fb:6c:b7:d4:76:03:a4:d1:85:10:2e:ff:62:
         24:d0:9a:84:ae:b1:4a:42:c5:d5:74:71:95:76:58:4a:3d:56:
         93:d3:b5:42:46:fb:62:d3:49:bb:09:56:da:09:9f:c1:7c:20:
         1c:06:ec:ed:c8:8c:34:fd:cd:30:75:23:6d:ed:16:4e:9e:ca:
         6c:a3:c5:98:db:0d:47:fd:54:ac:d4:2c:53:97:fa:c9:95:d1:
         77:c0:eb:7a:b2:76:23:57:d0:68:d8:f7:ee:79:be:d9:a6:e2:
         e8:f8:1b:de:b0:24:46:75:fd:b4:b4:1f:23:7a:66:95:24:d4:
         85:d9:05:5d:35:6c:32:3f:62:9c:e1:b8:75:a7:1e:7c:ee:fe:
         9f:aa:b0:69:88:22:c9:6f:6e:6c:84:98:4b:39:9f:b0:04:1f:
         57:6e:c9:78:77:14:32:d0:66:81:d8:8b:c2:b6:00:cf:5b:a9:
         9c:1b:8f:d8:ad:91:f5:cc:c6:70:e9:62:46:5a:12:48:21:7f:
         98:08:b6:70:05:51:9a:c5:64:79:cd:2d:43:92:da:ca:a7:51:
         7a:2b:3a:ab:29:42:93:8f:d7:25:b4:1e:a2:1f:ff:02:0c:37:
         15:2f:79:65:6b:84:36:4d:e3:74:dd:3d:eb:76:d3:f8:a3:b4:
         cb:f7:fa:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:44:10 2026 by rpki-client