Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
File:                     g0eVFJWTl8Xj-nbh6klejh9sMZs.mft (raw, json)
Hash identifier:          RCiaVM9PB8CAGi7sl9iLBbk0TitkIRnEQRLCEA7zPxQ=
Subject key identifier:   02:E0:6B:66:0D:0F:15:ED:63:DB:D7:CA:16:F8:33:A7:74:55:88:9E
Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
Certificate issuer:       /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Certificate serial:       019D9B19D2806FC9733A3B09D9F255283FBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
Manifest number:          18CC
Signing time:             Fri 17 Apr 2026 11:00:53 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:53 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:53 +0000
Files and hashes:         1: Cn6kGq46LF9Oikb9XnL1lRq0D6U.roa (hash: 01J0VB2/sc7Wjg5UC4eC51E7MgriDtGuK8sC7s32gVc=)
                          2: eaURa3uTlyiZsAXJzkPz_x5Muw0.roa (hash: c+Yhm7pE68b9qJ0hObSRz8BZLxOQWu5iU9oFtQINp5c=)
                          3: epQedJVwRBT94oycCSPj2YdU8Tw.roa (hash: zh7Uj6j3oKDWZJe0YH4R9IHGVwdwn+U1F6Ti2AwnjzM=)
                          4: g0eVFJWTl8Xj-nbh6klejh9sMZs.crl (hash: Axcg3a9R3w5K9/UYiiuC65OYYDBD6GmNbFUKvo6vdUw=)
                          5: ohKELa4D7u4-F5h5znUYEfXBTrQ.roa (hash: fMVIcUvcrWF7H5I6/6miPXqqmQnLYpDWZI9AaMxyhp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:d2:80:6f:c9:73:3a:3b:09:d9:f2:55:28:3f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
        Validity
            Not Before: Apr 17 11:00:53 2026 GMT
            Not After : Apr 18 11:00:53 2026 GMT
        Subject: CN=02e06b660d0f15ed63dbd7ca16f833a77455889e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:64:54:10:ab:ef:46:ce:1c:4e:dd:40:5f:1c:
                    85:42:6d:78:ab:68:1d:60:c9:5a:6f:10:0e:64:25:
                    ae:23:54:73:a9:86:82:e3:ce:eb:96:81:84:8c:44:
                    4e:4e:31:a7:87:bf:8b:27:75:2e:02:e0:52:ab:e3:
                    20:eb:07:cf:e4:fd:34:40:51:37:19:bc:47:c7:f4:
                    8c:7d:d3:b7:b7:7f:65:c3:78:5a:b8:41:c8:e6:38:
                    35:8f:a2:0a:17:e1:8f:51:5b:12:b0:07:14:ca:f1:
                    0e:ba:a7:f5:37:39:22:74:c3:50:86:a3:83:4d:0c:
                    c9:fa:ac:da:fd:b5:ec:d1:35:2e:98:16:d7:ac:b5:
                    cc:8f:f9:de:10:f7:a0:90:13:d1:b2:38:a4:d6:ca:
                    b3:ce:fd:8d:a7:e0:81:88:a8:65:1f:c0:9d:27:c0:
                    bd:e3:41:7d:05:7d:ae:db:49:d9:e0:32:6e:52:4f:
                    e2:e0:6b:58:56:44:9a:07:25:c6:89:d2:b1:23:22:
                    46:65:5a:eb:66:19:ea:42:87:0b:47:94:48:44:d8:
                    23:65:9b:c4:1f:d2:71:f7:fd:59:ce:b5:fb:9a:be:
                    2d:d8:52:d2:53:ed:4c:bb:93:09:5e:8d:ba:33:ac:
                    c0:03:a3:2c:e0:fe:92:61:fc:5e:9d:7b:0f:b1:03:
                    56:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E0:6B:66:0D:0F:15:ED:63:DB:D7:CA:16:F8:33:A7:74:55:88:9E
            X509v3 Authority Key Identifier:
                keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:94:67:5e:aa:03:44:e1:fc:7b:35:3f:09:c6:bc:39:f4:47:
         66:83:ac:ea:be:7d:20:54:e5:5a:03:09:08:20:42:42:05:bd:
         9c:6b:e1:6d:85:ca:44:42:53:fd:ca:cc:9a:10:d6:81:74:d3:
         fb:2d:75:39:bf:54:84:48:17:3b:c5:ca:4e:75:38:89:f6:de:
         09:37:70:f8:d6:28:c4:e6:3a:4d:d7:fd:93:96:7c:0b:5b:b0:
         c4:ec:a0:48:e9:d9:9d:b5:ad:52:f4:5d:c1:d7:b7:72:1c:9c:
         eb:48:4b:2a:c0:58:f2:2e:9b:df:e4:af:25:34:ba:6e:c1:f8:
         06:0f:88:19:93:ff:60:33:9f:14:c7:16:13:30:1e:09:6a:d7:
         16:42:a8:37:70:08:45:f8:95:ac:c5:15:1a:b4:1f:5d:df:ba:
         57:bc:f7:b5:58:4f:bc:c7:3b:00:84:39:eb:7d:10:c7:9c:50:
         c9:37:30:d4:1d:ed:8c:60:e1:a7:2a:1b:b8:eb:20:ec:ac:7b:
         67:ab:92:33:f7:be:2d:e3:7c:f9:e7:a9:12:00:98:66:01:3b:
         77:4b:53:37:d6:8d:75:a3:17:ef:07:7f:23:da:27:89:ea:c3:
         f2:40:fd:3f:08:d8:7a:ad:4c:1d:33:e5:11:9e:97:62:bf:c7:
         73:44:d4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:00:45 2026 by rpki-client