Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File:                     7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier:          eYwESsiM6i9EcS/xMQ5D0ge3wyAtqApLsCXIfCw/j7E=
Subject key identifier:   7D:CD:DD:66:46:22:3F:3D:59:FE:F6:AF:76:6B:B7:B5:9A:6F:67:37
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer:       /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial:       019D97E239688ADE5FD6779180A4AC04A9B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number:          18C1
Signing time:             Thu 16 Apr 2026 20:01:18 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:18 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:18 +0000
Files and hashes:         1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: o8iAJHWhem+BFfqMv+2BlkVT+t5EoTltVV9aAPspgJU=)
                          2: jI0W3FXepCGwUQYooUrSqFApgnI.roa (hash: ywNZ9Hr6Ek5jRSdgINiD2gJAFEBiWAjLS61c7FwJ6mA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e2:39:68:8a:de:5f:d6:77:91:80:a4:ac:04:a9:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
        Validity
            Not Before: Apr 16 20:01:18 2026 GMT
            Not After : Apr 17 20:01:18 2026 GMT
        Subject: CN=7dcddd6646223f3d59fef6af766bb7b59a6f6737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:aa:c0:96:28:43:d8:de:61:17:96:1c:da:7c:
                    e1:d4:b1:7d:f8:be:74:16:28:81:08:ee:5b:fb:4e:
                    63:3f:14:fa:4c:54:ca:e8:a3:ef:3c:41:a4:29:11:
                    ec:56:d5:66:2c:2b:bc:af:6d:af:f7:75:ec:70:bc:
                    16:7c:72:95:36:04:cc:61:7c:1d:df:5d:19:9c:52:
                    c8:79:0a:37:86:94:3e:e5:3a:8f:46:87:ad:d9:6a:
                    03:f1:de:6b:7b:11:5e:dc:b1:d3:3f:46:ba:63:14:
                    c4:bd:37:c8:7b:a6:ab:97:1f:89:28:8a:b8:12:b5:
                    c7:14:3e:19:9b:1b:12:51:45:4b:f8:bd:4a:a7:f4:
                    8f:f4:bf:25:20:43:5e:32:1c:ce:c6:b1:43:98:98:
                    e1:d1:1a:93:d4:7b:85:3c:48:b0:50:f8:f7:1c:26:
                    3e:fb:e0:f4:8d:2b:86:1f:aa:93:50:e1:81:5d:62:
                    3f:ce:92:83:04:e1:6f:c8:e7:f8:b5:20:6e:c5:17:
                    ca:46:f1:88:51:63:32:68:00:3e:36:bb:5c:d6:73:
                    fc:f2:56:e0:a3:41:3f:d7:d8:a4:29:b4:7f:54:53:
                    d5:ad:5d:64:e3:59:31:87:b0:db:f3:94:d0:4f:e4:
                    8c:56:d2:50:b8:d2:bd:01:87:23:79:1a:6f:79:90:
                    26:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CD:DD:66:46:22:3F:3D:59:FE:F6:AF:76:6B:B7:B5:9A:6F:67:37
            X509v3 Authority Key Identifier:
                keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:df:af:8e:a3:60:07:3f:64:b4:61:c2:11:aa:53:75:0c:30:
         bf:cd:6b:2f:32:21:c6:25:3a:5c:b1:d0:02:e2:95:3d:38:6a:
         bd:43:be:7c:9c:8b:66:1f:70:5f:ee:fe:ec:df:af:7c:cf:77:
         24:ed:4d:9a:b9:b9:5d:4a:dc:13:3b:87:ee:e4:ba:3a:80:f0:
         58:0f:cc:cd:94:04:dd:5c:4f:f1:ff:1c:f8:20:28:27:b0:ba:
         04:77:d7:b5:6e:ba:74:15:ec:dc:16:b7:b5:b7:94:f2:b5:3c:
         e6:29:91:f8:5c:c5:61:1f:58:07:dd:53:98:a3:aa:4d:bc:b8:
         97:30:cb:59:bc:19:7d:c0:a2:05:2d:65:30:ae:6c:36:71:0b:
         af:08:09:92:fc:e2:00:46:e4:3b:f4:4e:52:42:7b:97:61:a3:
         a9:a3:12:03:08:73:26:5c:7d:d8:cb:b5:18:aa:8b:28:1c:7e:
         4d:9b:05:38:47:f1:4f:88:f8:cb:45:c5:95:b7:f1:ec:28:5b:
         ac:a3:70:49:ab:68:d6:64:4e:14:12:23:34:24:1b:b3:90:43:
         91:c9:22:00:e2:61:3d:16:f5:02:58:10:1f:c5:c0:2a:e9:23:
         c0:9c:d4:25:b0:fa:17:05:d9:81:ec:92:cb:52:10:80:fd:9e:
         b2:0e:2e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:39 2026 by rpki-client