Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File:                     x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier:          6CxJTvayQLqtmUJ2nCtWX3JmKLgzf6XvXpOrYjET4RE=
Subject key identifier:   E2:5D:9E:F2:0F:97:C3:D7:F1:F9:6E:68:25:78:96:09:86:62:37:12
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer:       /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial:       019DA52FA1A12D8BBA228D84BF696D659287
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number:          18C9
Signing time:             Sun 19 Apr 2026 10:00:55 +0000
Manifest this update:     Sun 19 Apr 2026 10:00:55 +0000
Manifest next update:     Mon 20 Apr 2026 10:00:55 +0000
Files and hashes:         1: fXCfZUIcS9FszTCvtMFRqyOwHUA.roa (hash: 6cg3gD/b2Eq0ozSudTsMLJ3h/kzYzkasW+awbVRHCw8=)
                          2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: FZN/1ptmahQglSHL+53xXw0ZU414LLm52ssfR8h9q+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:2f:a1:a1:2d:8b:ba:22:8d:84:bf:69:6d:65:92:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
        Validity
            Not Before: Apr 19 10:00:55 2026 GMT
            Not After : Apr 20 10:00:55 2026 GMT
        Subject: CN=e25d9ef20f97c3d7f1f96e682578960986623712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1c:d6:11:5c:fa:7c:6e:5b:3a:6f:be:ef:7b:
                    c9:7a:9f:d1:3b:fa:72:f1:d4:4e:c2:2d:49:bd:ec:
                    50:85:0d:08:f3:29:8f:a8:6e:17:53:e4:d3:97:8b:
                    eb:0d:e3:07:c1:ef:9a:16:a9:e7:a2:c3:c4:0a:50:
                    5b:f1:df:45:d4:61:18:46:ef:ba:d6:8e:3d:ce:33:
                    a9:e1:a7:e5:d0:1e:42:ec:fc:e9:da:ce:97:f2:8e:
                    08:b0:53:b9:ab:3b:70:e1:7a:cc:86:a0:59:96:58:
                    40:bb:b9:26:0d:2c:49:08:4d:f9:25:9a:80:b5:40:
                    76:75:4d:fd:ad:c1:76:5e:4e:b9:76:28:58:16:09:
                    ff:22:6c:ae:d5:6c:08:48:19:81:f9:96:84:bf:fa:
                    e2:bf:de:e0:32:f7:c7:8f:67:7c:af:f1:76:e1:c2:
                    7c:4e:32:aa:ba:42:48:66:b7:02:83:8f:35:0a:a0:
                    70:ef:a9:d9:29:4a:73:20:66:56:39:c6:9b:17:2c:
                    c6:a4:3f:0a:8d:18:5f:c0:ea:93:d7:78:97:d3:be:
                    53:fb:a6:26:35:fc:49:29:fd:44:60:86:1b:02:50:
                    65:30:b8:63:ab:b1:ab:e9:85:fa:af:cf:fb:fe:6d:
                    82:ce:ec:8e:a7:da:f5:0c:08:e5:6d:eb:7e:e9:71:
                    0f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5D:9E:F2:0F:97:C3:D7:F1:F9:6E:68:25:78:96:09:86:62:37:12
            X509v3 Authority Key Identifier:
                keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:2b:00:d0:77:17:60:95:4b:76:2c:23:53:b8:a7:3e:ec:a5:
         b9:d7:72:c3:b1:c2:c8:7c:94:30:05:95:3a:40:88:26:b2:fa:
         c7:db:da:60:b3:cd:ea:08:c0:b1:dc:03:21:50:19:05:20:9b:
         e1:8e:45:b2:f7:46:69:d4:a2:1a:66:f1:6c:68:80:e8:cc:11:
         ef:9d:4d:05:63:55:e1:b7:59:71:5c:59:6f:a6:ff:f5:82:66:
         83:1d:a3:4d:b6:4f:dd:95:e6:2d:9a:11:66:31:a2:bb:c0:5b:
         43:fa:7f:e4:c8:e6:23:fe:63:eb:0e:2e:54:b0:14:f0:29:da:
         c7:b8:e1:e2:66:09:9b:3b:d0:ac:23:34:97:37:08:2a:17:dc:
         16:ab:6f:17:b9:c6:5e:85:98:7d:c3:79:19:6f:18:25:e6:07:
         d6:ac:62:ad:2a:5b:41:03:7c:7d:b0:82:ef:38:7a:d1:b3:8b:
         6b:a5:26:3f:18:b5:32:bc:67:47:ef:d0:51:c3:db:cd:2b:eb:
         cf:b4:c2:15:cf:f7:b2:10:10:68:df:8b:60:a7:29:7d:e7:9e:
         dc:a4:30:28:ce:b7:37:c5:5f:06:ca:7a:42:b0:7c:5d:44:1f:
         9a:fc:6f:74:f1:41:fa:e3:3a:c2:cc:c1:e2:31:8d:c4:65:4e:
         f1:60:07:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:15:44 2026 by rpki-client