Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
File:                     cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft (raw, json)
Hash identifier:          xGhKHY5oP//GenzmN7gSeHvd0arahCclBagc8PC0nrY=
Subject key identifier:   CA:CE:4E:CA:E9:87:46:93:11:CE:46:15:04:D7:D0:1D:32:70:22:9F
Authority key identifier: 72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4
Certificate issuer:       /CN=720c6323cf730930a03b0e44607f6fedf527a8c4
Certificate serial:       019D9D0803685D3DA3F932E9EEEB29F9AA90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
Manifest number:          01E0
Signing time:             Fri 17 Apr 2026 20:00:41 +0000
Manifest this update:     Fri 17 Apr 2026 20:00:41 +0000
Manifest next update:     Sat 18 Apr 2026 20:00:41 +0000
Files and hashes:         1: cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl (hash: GMU3PtjUh3HEDkQoNMLayJxjkrGHgzouJCK8voceI4M=)
                          2: xEYU-K7wenXyYwuEUiZnmFrMZac.roa (hash: gWNLlP9RhlookRQsci7JBvafArIbz1TL4llsI2fvdA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:08:03:68:5d:3d:a3:f9:32:e9:ee:eb:29:f9:aa:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=720c6323cf730930a03b0e44607f6fedf527a8c4
        Validity
            Not Before: Apr 17 20:00:41 2026 GMT
            Not After : Apr 18 20:00:41 2026 GMT
        Subject: CN=cace4ecae987469311ce461504d7d01d3270229f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c4:35:c0:94:63:c2:90:66:52:65:9b:6d:94:
                    57:28:2b:b3:43:6a:80:ce:3e:c2:fa:88:f5:3f:1f:
                    3d:78:26:b6:22:d9:27:bd:ac:d6:54:2f:77:63:1d:
                    2e:e0:15:61:18:e6:cb:62:23:8e:5d:a6:f3:1c:ee:
                    32:58:1b:16:df:c3:84:d9:0f:16:17:8b:dc:e9:2e:
                    35:49:9a:07:d7:4e:41:03:20:1f:ad:6c:17:9c:af:
                    0a:81:1f:c9:4c:00:55:15:93:b8:17:4f:cb:ea:a1:
                    25:b1:f0:1b:62:b3:ba:9b:17:57:23:29:72:41:0f:
                    0b:ba:6d:7c:0b:d9:22:f3:42:c5:d1:6c:da:6f:6e:
                    88:57:c8:f2:77:71:31:2a:f4:bf:f2:73:b8:bc:f0:
                    80:46:18:d4:48:f3:b1:54:e8:a6:fc:81:2f:2e:e3:
                    3c:9e:2f:36:fd:bd:18:63:5b:bf:da:b3:45:43:5b:
                    b9:7f:83:f1:66:04:4c:99:48:c9:c1:23:8f:20:7c:
                    b8:2b:c1:37:ab:e7:b6:a3:bd:3b:7c:a4:e8:eb:5d:
                    22:ed:46:ce:a8:89:ca:88:37:33:de:c9:8d:71:97:
                    b1:80:7f:07:33:79:3a:b6:a0:83:a6:43:65:5f:43:
                    40:d8:6a:e9:1c:0a:30:98:d2:53:8e:d5:ab:d0:87:
                    d5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CE:4E:CA:E9:87:46:93:11:CE:46:15:04:D7:D0:1D:32:70:22:9F
            X509v3 Authority Key Identifier:
                keyid:72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c1:0d:b7:5f:d9:5b:06:dd:b2:6f:ee:e2:97:c2:2c:64:04:
         2e:e1:09:1e:30:12:f3:1e:a0:c8:2a:22:05:06:60:81:89:8c:
         13:46:bc:6c:a3:7c:97:cb:6e:6d:c9:2a:90:29:a7:8a:d8:20:
         8e:ab:e9:41:a1:7c:ba:7a:70:e7:8f:6f:2e:eb:e6:cb:98:92:
         e5:13:90:00:fa:c2:fb:2c:77:78:a3:b9:0b:24:d0:32:0c:8c:
         f8:f3:ab:88:0e:40:46:fb:4b:a7:e8:9f:fd:ec:09:33:dd:2a:
         ff:62:68:2c:a3:97:35:05:49:5f:b3:7c:5f:4b:61:18:3e:c8:
         36:8d:19:26:66:2a:d6:3f:b9:bb:cc:67:e5:65:9f:f1:40:cb:
         57:0d:56:9f:74:ee:66:40:16:4c:71:dd:ca:24:b6:a8:21:95:
         95:51:d0:7e:bb:b4:0b:5b:5b:c7:8e:18:09:86:eb:11:42:d8:
         e7:80:c9:26:87:0c:f5:42:16:51:d3:58:6e:0b:6d:ff:70:f4:
         b1:be:a0:eb:10:e6:6d:cd:66:90:e0:21:e0:ba:54:3f:71:39:
         19:46:c8:b6:2a:cf:56:1b:63:5e:86:8e:6f:bc:4b:10:11:f7:
         6e:54:d9:5b:c5:cd:b3:a1:39:14:c6:8a:3e:83:3f:4f:54:da:
         fe:e6:92:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:00:39 2026 by rpki-client