Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft
File:                     M_vbsgwtlwc8Dei3yqdewe6xkbg.mft (raw, json)
Hash identifier:          uoYIVov5SILqCQKJtHAy2z7RcJA1YLY3LxaY6U2/IjI=
Subject key identifier:   D7:A6:9E:02:E7:CF:07:29:1E:CE:C2:AE:E0:A9:B5:7C:08:E6:84:E6
Authority key identifier: 33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8
Certificate issuer:       /CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8
Certificate serial:       019DA37803ADD7F2FEC6CADBAABA30D2E466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft
Manifest number:          18C8
Signing time:             Sun 19 Apr 2026 02:00:44 +0000
Manifest this update:     Sun 19 Apr 2026 02:00:44 +0000
Manifest next update:     Mon 20 Apr 2026 02:00:44 +0000
Files and hashes:         1: 0e4GauzDmn8kMomw7oCsTJu7m8Q.roa (hash: vhyIGyttSh6EEj+o9giIX+19O/xI+MdDj+HOEVvUjJ4=)
                          2: EjDCWHUKfrhUltEAV8v-8i4JB8k.roa (hash: a/WblqLT7o9KNQHx3jn/JOaerbJckzUgXEVjku2zPOM=)
                          3: M_vbsgwtlwc8Dei3yqdewe6xkbg.crl (hash: Lx8FjzHkhjlc5lxFkesMtmIAmFWTPnL+W/BvPuyHqNc=)
                          4: oPq-9EL4LSrMa5GUN6LfdW-Ub6w.roa (hash: CR2p7P7nO1sdjW2WzjuqaopSJj2SPQzuG2+UV273Kok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:03:ad:d7:f2:fe:c6:ca:db:aa:ba:30:d2:e4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8
        Validity
            Not Before: Apr 19 02:00:44 2026 GMT
            Not After : Apr 20 02:00:44 2026 GMT
        Subject: CN=d7a69e02e7cf07291ecec2aee0a9b57c08e684e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:58:cf:c8:9f:52:13:e9:74:fb:b7:a6:1c:
                    ab:04:fb:34:5a:03:a9:85:91:54:fa:5e:55:8f:ad:
                    0c:0e:88:a2:b2:5d:84:7e:38:73:c5:ed:3a:df:77:
                    9c:cc:82:0b:68:7d:5b:ec:0e:60:a5:3e:c8:51:6c:
                    18:2d:df:c5:1d:29:da:ea:de:28:88:45:0c:57:2d:
                    23:fb:53:18:51:27:74:7b:cf:d6:3d:e0:b5:60:de:
                    b4:46:e3:3d:ce:f4:02:d8:11:73:d6:e2:8e:a4:76:
                    2d:33:20:30:5d:e4:2e:ab:da:f9:b4:6d:bb:d7:50:
                    24:7f:c1:44:85:fa:86:ea:89:10:8b:99:6c:39:08:
                    c7:02:90:10:fe:c2:09:66:84:0e:0e:2a:90:76:c8:
                    61:21:cd:aa:af:26:ab:69:f0:7c:41:97:15:08:65:
                    5e:07:fb:23:9c:f0:22:86:54:95:c3:1d:80:23:21:
                    09:f2:eb:76:61:0c:18:9b:f5:91:90:5b:9e:ba:09:
                    d9:18:9a:32:71:3e:46:1b:17:e1:22:57:24:6f:1c:
                    46:6a:42:88:b1:50:91:19:2c:e6:1a:2d:9e:69:5c:
                    4d:a5:4f:af:aa:07:81:03:a9:93:dd:29:81:69:71:
                    43:ea:57:dd:7e:35:e2:b9:04:8e:e5:0c:10:0c:2b:
                    83:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A6:9E:02:E7:CF:07:29:1E:CE:C2:AE:E0:A9:B5:7C:08:E6:84:E6
            X509v3 Authority Key Identifier:
                keyid:33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:42:1f:f3:05:1b:96:f4:9a:43:51:93:c8:d7:b6:72:87:99:
         9e:3b:c2:25:ca:e4:83:2c:69:45:a6:e7:f0:0b:dd:8e:73:71:
         4e:9a:5e:58:4a:57:5a:1e:37:c0:8f:16:f2:04:e0:89:b5:8b:
         7c:7e:28:31:e4:e6:d1:0e:cb:5a:44:4f:1e:24:70:7f:15:73:
         c5:82:3f:39:c5:84:af:8d:1f:11:93:34:20:ae:44:4a:7e:17:
         9c:be:c8:7e:0b:fd:03:5f:a2:c6:21:35:a7:8b:e7:e0:8a:e2:
         e4:97:da:c4:27:3d:05:58:52:0b:88:b5:89:69:9c:2c:a0:ba:
         02:ed:42:78:17:d9:07:01:01:25:f5:e5:b7:68:2f:31:b0:37:
         67:38:da:04:05:1f:b2:a2:c7:ae:a6:61:6b:15:85:65:89:45:
         76:8c:43:9d:58:43:b3:c4:4b:a7:3c:fd:1c:ae:01:b9:8d:3a:
         24:15:c1:1b:67:ec:26:36:2d:21:73:7f:f0:8b:75:e8:89:56:
         d9:71:af:1f:73:75:6e:51:0f:17:66:e9:d4:3f:3b:80:ed:61:
         0f:88:f0:56:c0:66:3f:5c:2c:2a:20:5f:c0:67:5f:3e:83:c6:
         26:1e:74:d7:45:c5:7a:99:cf:fd:d8:6a:6f:6c:63:18:ba:24:
         6b:62:6d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:09 2026 by rpki-client