Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
File:                     x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json)
Hash identifier:          7ZBbxrht7PaWBh4L3TNb3vQU3OZwrD3YvKlVJ5wHqNU=
Subject key identifier:   88:44:7E:88:66:49:44:73:7A:DA:9A:68:5B:65:33:0B:BE:3D:BA:80
Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
Certificate issuer:       /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Certificate serial:       019D9998E8462DA3E6F415DA6D570B09C916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 04:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:28 +0000
Files and hashes:         1: O7DvE_j0yVa8Neokc-i_HaDtXmM.roa (hash: 3lAq1Q6ERq8LruEXX9XUeCK19VsJiVKMmGnOXIPs3os=)
                          2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: 8cCKL4f82wJQlbXO8FzIyOJgTnyRYxg9fXfmkXHYOXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:e8:46:2d:a3:e6:f4:15:da:6d:57:0b:09:c9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
        Validity
            Not Before: Apr 17 04:00:28 2026 GMT
            Not After : Apr 18 04:00:28 2026 GMT
        Subject: CN=88447e88664944737ada9a685b65330bbe3dba80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f8:ac:c2:19:cd:50:26:1d:fe:88:fd:61:12:
                    50:f7:20:36:5c:1a:d5:8f:4e:7a:52:9d:7d:52:50:
                    bc:4f:5e:2e:1a:a2:f3:2d:dc:ce:ee:d9:e5:3f:08:
                    5a:5a:49:6a:49:42:41:2d:46:d4:4b:f0:1c:74:ea:
                    c0:a3:cf:ed:a8:e3:df:c5:06:09:9f:b0:0a:b4:2b:
                    90:2b:d8:52:b7:bb:fe:18:87:88:6f:14:51:32:9f:
                    e0:12:4a:09:5c:c0:ba:86:ec:79:7d:d6:f9:52:d9:
                    0e:eb:b7:b5:08:be:47:78:82:3d:62:59:7f:08:eb:
                    57:8f:aa:63:a2:c9:ae:45:03:d2:37:d4:f3:17:f2:
                    81:90:92:01:12:73:6f:25:28:aa:a4:69:86:a0:61:
                    cb:88:d4:29:1c:e4:43:ed:e3:24:4c:b4:1a:fc:f4:
                    a1:f0:5a:a3:ac:e7:3d:4f:23:7c:bb:a2:30:4a:31:
                    a2:65:e5:a1:03:f0:e5:c1:e9:05:d4:9a:f5:12:db:
                    51:b3:6b:6f:ce:d0:14:84:f7:e4:69:0a:04:b7:13:
                    d9:06:61:7c:91:93:17:ea:ec:e3:af:c2:3e:03:f5:
                    b7:22:ba:6b:ae:7f:30:2b:0d:c3:93:0d:0b:c5:3b:
                    75:37:1f:a6:9c:fd:6b:fb:71:3b:29:0d:67:50:0a:
                    fa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:44:7E:88:66:49:44:73:7A:DA:9A:68:5B:65:33:0B:BE:3D:BA:80
            X509v3 Authority Key Identifier:
                keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ef:fc:03:6a:8d:58:c6:99:4f:34:4a:eb:2d:a8:0c:20:1e:
         13:bf:54:d7:b5:72:b7:1a:59:12:fb:06:74:ea:5c:28:2a:e3:
         d8:d0:5a:e1:08:d8:3c:0f:e5:9a:2c:ba:d8:f6:01:db:32:ec:
         c0:5a:da:f7:f0:0e:7d:ee:5a:59:e9:62:55:c9:7d:42:1c:de:
         15:e6:cf:22:04:d6:55:4b:1b:e5:11:c7:be:da:81:f1:4a:dc:
         ae:51:32:83:64:51:d4:d0:e2:02:04:80:13:bb:61:c5:2e:8a:
         3f:49:6e:ae:9a:4a:65:72:b7:98:a2:f6:6a:fc:36:7a:13:d0:
         1a:95:8b:2e:59:07:c5:85:72:32:d3:af:0c:d4:6f:10:67:0e:
         05:8e:d6:9e:23:0e:80:b1:5a:66:88:47:0f:dd:97:17:a6:bb:
         61:b3:69:e3:55:0f:59:94:af:6c:52:6c:3e:31:cc:51:5a:a4:
         67:20:79:2c:ca:b2:49:9d:15:a5:dc:28:ea:fd:36:3e:8a:a1:
         1b:70:40:ba:0a:b4:7e:96:04:8d:72:4d:fc:04:3d:36:7f:de:
         4c:32:51:37:4b:17:f7:94:c4:74:f8:19:b2:de:c4:bd:10:af:
         57:5e:df:6c:0f:3a:1c:43:ac:c6:f3:11:f0:70:1f:73:2d:59:
         56:81:c6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:09 2026 by rpki-client