Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
File:                     Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft (raw, json)
Hash identifier:          k+NGktcJKGuEmzujb+BZQdHG/kNDqqIG11/28YCrpUI=
Subject key identifier:   A2:A2:E2:4B:67:E4:0B:92:02:8C:54:FC:71:B8:80:1E:11:9F:FA:06
Authority key identifier: 3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F
Certificate issuer:       /CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
Certificate serial:       019D9AABFAA979E63BD5A4BD82AD93F9A66A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 09:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:55 +0000
Files and hashes:         1: Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl (hash: msaSE+Xv20CL0thgoll1Z99nYABXbbkVXwnMK/mkf0w=)
                          2: jTw_oq7LAYrSJ1yTG6NZs-qd_OQ.roa (hash: nLB/S+2oGFc9tQIVWN3vkSki+22/PC0HnQATmKLZOKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:fa:a9:79:e6:3b:d5:a4:bd:82:ad:93:f9:a6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
        Validity
            Not Before: Apr 17 09:00:55 2026 GMT
            Not After : Apr 18 09:00:55 2026 GMT
        Subject: CN=a2a2e24b67e40b92028c54fc71b8801e119ffa06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:79:df:8a:db:b1:78:a4:a0:6a:9d:f4:5c:
                    c4:11:c0:6d:c0:9d:15:12:0c:7d:43:f4:cc:c8:c4:
                    c1:68:3e:e4:7f:b8:7f:de:9c:d1:07:fa:fe:d0:95:
                    bb:47:03:64:6e:3a:f9:95:31:aa:c1:f1:9b:63:19:
                    e0:b0:74:ef:4d:28:e8:0c:b6:0d:ac:a7:e1:b4:8e:
                    67:a5:a4:86:eb:f8:54:9e:4c:79:c2:76:f0:47:bb:
                    8c:0f:86:1b:e0:d2:c1:4e:44:b0:68:67:81:46:e6:
                    12:f8:01:c1:0f:0f:d4:36:1a:af:8b:ce:a5:e3:0c:
                    fb:a1:1f:61:a4:a7:14:ef:98:dd:21:2b:d8:04:86:
                    16:bd:ca:46:53:23:a9:fc:f3:9f:81:c5:ed:1b:0c:
                    4b:ae:a8:e8:10:db:70:c7:e8:f8:eb:92:31:ef:19:
                    74:63:ac:64:76:5a:7a:26:7c:08:34:c3:11:e2:68:
                    38:58:39:3b:b4:e9:0d:28:a6:85:04:c9:ae:1f:71:
                    cf:46:56:63:16:b1:33:1b:8e:25:db:6d:ef:15:bb:
                    81:bc:84:13:42:5c:53:f4:76:41:a5:ce:9a:6c:b1:
                    ff:46:5e:60:78:49:9a:82:94:17:ac:d3:95:d9:ba:
                    4f:f2:90:53:c1:16:a7:2a:2b:e7:aa:4f:e6:b8:8e:
                    4b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A2:E2:4B:67:E4:0B:92:02:8C:54:FC:71:B8:80:1E:11:9F:FA:06
            X509v3 Authority Key Identifier:
                keyid:3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:6e:25:b8:6e:91:66:20:40:3d:39:71:dc:30:13:54:d7:d2:
         95:fa:c9:32:06:2b:de:6c:e1:cd:4e:e1:3b:2c:ba:16:06:7a:
         69:9c:cc:e4:77:df:47:2f:6b:4d:c1:7c:c7:5a:a6:c3:ea:9d:
         40:d6:18:d4:fc:ab:25:5b:3e:45:ab:47:a8:16:dd:cc:b4:2b:
         7d:2b:14:6f:f0:cf:21:7a:24:23:6a:01:c9:62:e6:fe:d3:11:
         1b:f9:a3:65:95:c9:18:57:0f:95:3c:49:d6:05:7b:27:83:4c:
         5f:9e:ea:d3:63:16:82:20:6e:23:6c:b3:83:8c:e0:45:88:87:
         87:94:f0:ea:cb:02:9b:3b:a4:31:1c:5e:53:e9:58:d9:d6:1d:
         21:90:f8:82:ee:4c:3a:03:be:9c:b3:20:d6:a1:55:ce:62:86:
         42:6d:32:8a:2e:31:f4:60:9a:45:20:aa:e2:33:84:02:ae:c5:
         45:dd:3b:e1:2d:1b:2e:14:c3:42:33:90:27:e8:a6:07:7d:11:
         6e:2a:d9:1c:46:3a:27:de:d2:e0:a4:83:6f:ec:83:c5:87:37:
         cb:8e:67:a0:d6:94:85:cf:32:ab:22:80:66:4a:ed:31:82:af:
         c3:2f:72:f7:fd:70:4d:f3:c5:6f:81:af:ec:e6:09:ef:d5:75:
         be:a1:08:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:25:28 2026 by rpki-client