Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
File:                     0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft (raw, json)
Hash identifier:          M/xinAVO9d/Xr2c+Uxnwobw4s7FeEQDvXz8wwl3rzgw=
Subject key identifier:   21:10:94:11:AC:B3:84:87:90:97:97:B7:C9:7B:8F:20:68:1F:26:02
Authority key identifier: D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
Certificate issuer:       /CN=d03046d16cfc391b028b88743773ce005cf97b1d
Certificate serial:       019D9998DB3E4B365400D778B80B9BBFAD57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 04:00:24 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:24 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:24 +0000
Files and hashes:         1: 0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl (hash: GxCWiUTremLBprawNo3yew8YHV4Knl+7+lpCE2dm148=)
                          2: 6sIpurMyf7U7cVjfDtGf65yWDwA.roa (hash: cZnmgrrB6eUg5rHF2CdbgLHSyI5RnOe61koYU+5dDnA=)
                          3: NZSg7hN5dj36ijrS0iZ916AKsoM.roa (hash: VS2r3z5DpXErRLlghndtWldrsOM22Uv0cqCOqDvPp5M=)
                          4: _EXzGZ6mIohQTkOQklm2HctGpf0.roa (hash: d5WVsZmAqKJyYsnjGKZS29R+h6TCBV39mM8GYttnuxM=)
                          5: aTt1lDOQ__4_BOzrJWRmWq2_g_I.roa (hash: v57HfwpPj2JAqIcZD1AamnQQx8/Wn9ebUoCosyKqGs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:db:3e:4b:36:54:00:d7:78:b8:0b:9b:bf:ad:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03046d16cfc391b028b88743773ce005cf97b1d
        Validity
            Not Before: Apr 17 04:00:24 2026 GMT
            Not After : Apr 18 04:00:24 2026 GMT
        Subject: CN=21109411acb38487909797b7c97b8f20681f2602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ad:2d:bc:36:6f:fd:76:6e:ce:cf:54:4a:6c:
                    9e:2b:ed:83:9f:23:ca:dd:f2:e5:ea:d5:3d:56:dc:
                    21:56:6f:a1:7e:9c:d0:50:cf:49:d4:e6:c8:22:9f:
                    1b:ab:ad:9d:17:e7:d3:6e:c2:fb:de:7e:69:67:02:
                    38:7e:99:6a:3b:77:83:d2:4a:e5:fc:b1:25:63:a6:
                    f7:1a:56:7b:e9:e2:8a:13:37:24:8b:80:07:fd:f4:
                    10:33:0e:e9:44:b5:70:37:a9:0b:ac:fa:14:22:0d:
                    45:c0:37:09:7d:52:53:b4:62:ab:22:c9:79:9c:bc:
                    fb:5c:c4:69:13:c3:3e:70:98:c2:d0:39:25:b4:7d:
                    93:82:26:3e:a2:bf:29:f6:ef:e6:09:a7:11:69:5f:
                    c9:dc:e6:35:2e:6c:c3:2f:3a:1f:f8:8c:05:56:33:
                    a1:ee:c0:3a:f4:15:26:52:3b:ff:08:11:55:aa:ad:
                    7a:98:b5:56:1d:55:a7:b6:bf:c8:03:39:c9:d4:e1:
                    6b:6b:76:d8:fb:c8:20:25:37:31:4f:a8:97:cb:df:
                    60:61:bf:57:e1:65:e4:da:1d:6b:4f:ce:3b:97:6d:
                    7a:48:37:30:aa:4f:a5:6f:60:f3:b3:96:00:fb:19:
                    41:c5:ff:22:56:2d:6a:87:8b:bd:23:d5:72:b2:db:
                    03:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:10:94:11:AC:B3:84:87:90:97:97:B7:C9:7B:8F:20:68:1F:26:02
            X509v3 Authority Key Identifier:
                keyid:D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:43:64:f2:29:8e:68:4e:57:d5:2f:4b:ef:e3:1d:99:eb:bb:
         63:fd:09:42:2d:c3:b3:62:7f:2f:63:ba:30:5b:ea:3d:29:84:
         fb:f0:8a:5e:41:70:58:bf:b3:ad:13:74:2d:83:4f:98:63:ff:
         0f:38:49:db:c6:cd:ea:e4:cc:08:23:14:07:c2:8b:02:85:c0:
         74:d6:e0:bc:e3:96:8e:fa:c1:98:a1:9d:c1:96:e4:4d:87:e6:
         17:55:9c:c9:68:ad:2d:36:ab:6b:08:eb:d3:3c:cd:b4:2b:36:
         06:3d:c0:27:4f:96:3b:b4:31:09:c1:62:ae:56:8d:71:38:3b:
         9b:52:e6:45:36:7f:a6:2d:2b:36:34:7b:d3:74:10:24:93:7b:
         00:e3:2b:3e:31:23:30:8f:f2:e5:ae:6b:8a:b9:79:68:5f:31:
         34:1c:6c:aa:24:a6:c4:5e:e8:7b:92:77:ed:ec:c8:c5:71:6c:
         6d:7e:23:cc:4e:2c:5e:8a:df:fd:21:b6:53:2f:dd:27:01:f8:
         09:0c:8f:f3:41:32:09:d9:78:35:9e:e2:2a:52:4e:40:51:ab:
         e9:f4:73:f2:d3:de:39:59:22:3f:12:0c:be:63:a3:f9:ec:18:
         7c:a0:93:fd:58:21:69:34:c2:ce:73:8a:9e:eb:19:2a:b1:d0:
         16:d0:3f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:30:03 2026 by rpki-client