Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
File:                     RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft (raw, json)
Hash identifier:          wwe/V8GQ+AVujY4spAXB6GRbv8cIEOvNN5gvDvVPf9c=
Subject key identifier:   A5:45:4A:70:34:08:2D:56:B2:B1:64:83:CD:D3:6C:5C:F2:89:9F:5C
Authority key identifier: 44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
Certificate issuer:       /CN=44f5c16795ed8825500baf57a7a705b51375a8be
Certificate serial:       019DA48A768F71C38FB73E8D1B83AA9D9EDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
Manifest number:          18C4
Signing time:             Sun 19 Apr 2026 07:00:30 +0000
Manifest this update:     Sun 19 Apr 2026 07:00:30 +0000
Manifest next update:     Mon 20 Apr 2026 07:00:30 +0000
Files and hashes:         1: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl (hash: hmGhnAXyAOLna2USh4az3iZy7sFqBzJ2OQ3/fJY90lM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8a:76:8f:71:c3:8f:b7:3e:8d:1b:83:aa:9d:9e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f5c16795ed8825500baf57a7a705b51375a8be
        Validity
            Not Before: Apr 19 07:00:30 2026 GMT
            Not After : Apr 20 07:00:30 2026 GMT
        Subject: CN=a5454a7034082d56b2b16483cdd36c5cf2899f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f8:67:0b:e9:ee:a0:c8:a1:5c:8f:32:72:ae:
                    6d:41:32:1d:25:6e:42:8c:63:f4:82:81:24:2f:96:
                    16:1a:d9:bc:42:85:0b:35:09:f4:6c:78:10:57:b4:
                    4a:cf:e0:02:d9:72:90:ec:c9:19:ff:6d:1a:cd:7d:
                    93:70:c2:b7:82:b2:94:da:8d:9a:45:28:a7:4f:dd:
                    05:e8:4d:e7:b2:0e:ee:c2:4c:1e:26:ff:33:ae:4d:
                    7c:63:ac:f7:c4:99:ae:f3:15:fc:ef:84:4d:07:95:
                    c0:7a:c3:45:a8:d8:92:7b:46:b8:6f:51:9f:0f:a2:
                    65:9d:fd:66:96:2c:7e:8e:57:9c:6b:43:e0:ad:4c:
                    4a:64:25:cd:99:63:0d:b2:09:6d:9f:77:f2:f1:10:
                    ab:aa:61:43:fd:43:b0:02:15:6f:db:8d:4a:49:1f:
                    81:fe:f7:3c:9f:a7:a5:f9:2d:06:c8:02:5b:2e:37:
                    1b:04:56:9f:85:0f:78:60:16:50:36:bf:97:e2:86:
                    35:26:e4:78:7f:ac:44:c9:d0:f2:52:8f:01:b2:34:
                    57:07:7e:5b:5b:52:70:25:b7:0f:5b:21:63:0c:9e:
                    4f:f0:08:b3:6b:11:c1:ed:a0:26:da:33:0f:89:28:
                    c3:04:4b:58:61:ee:91:89:f0:dc:05:64:9d:74:ee:
                    f5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:45:4A:70:34:08:2D:56:B2:B1:64:83:CD:D3:6C:5C:F2:89:9F:5C
            X509v3 Authority Key Identifier:
                keyid:44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:d5:7d:e4:76:1e:5c:e9:32:67:f0:55:7a:b5:38:ff:89:b8:
         c6:e6:87:1f:7a:5c:e8:d7:86:49:fb:0d:1a:3d:6b:d5:df:26:
         34:42:90:38:ab:1d:c1:e8:8c:0f:5f:85:4e:bd:21:df:74:c5:
         7d:7c:d8:eb:7e:86:e9:0c:ba:88:dc:0b:c9:7b:03:47:ed:43:
         b7:c7:ad:c7:c4:9d:2e:f5:4c:4d:a0:27:f6:2f:a6:9d:96:ac:
         00:ff:b0:16:91:c6:cf:c8:8f:5a:72:bd:64:0f:59:48:04:f2:
         34:6e:93:16:1e:a1:8d:49:bc:59:2f:fe:61:16:31:00:59:59:
         7b:5d:d4:39:67:0b:e4:77:b4:0c:5e:cc:34:b5:5b:44:c8:13:
         ac:7f:93:74:50:5c:4c:96:1a:07:38:33:58:c3:a0:ab:2f:5d:
         4f:53:e8:7d:1c:58:ab:d2:7d:ff:41:14:48:5f:79:b7:1f:79:
         cb:75:40:7f:f5:75:9a:66:65:a8:12:85:70:08:d0:42:b6:3b:
         77:59:6f:8a:6a:c6:00:77:cc:86:c2:8d:69:9a:4c:f6:03:e2:
         94:81:fb:d1:6b:b8:7e:43:27:5b:6a:3e:d6:8e:59:e5:dd:15:
         23:3e:37:ad:e4:06:e2:cf:0b:56:71:70:61:95:85:c6:af:c1:
         94:f4:49:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:44 2026 by rpki-client