Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
File:                     ehuEnDQHAlATY6H5J-xCQJm5RyY.mft (raw, json)
Hash identifier:          YBl+VxsxPcuqwhRbPGfwYYPLGs/NoPJ1w5gS7OcLf34=
Subject key identifier:   17:76:67:C3:E2:D3:42:A7:24:19:B8:F1:16:4E:8A:24:22:FC:0A:CE
Authority key identifier: 7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26
Certificate issuer:       /CN=7a1b849c340702501363a1f927ec424099b94726
Certificate serial:       019D99D040DA909B6E30CD4F6DE354FD9447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 05:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:55 +0000
Files and hashes:         1: 7UaBbCaDn-KSS5fLxt56x8jizZs.roa (hash: GSd2jVlV8OoeGmAQ8ge5d6QxeXQZs/RSCSQ5Bh6rcq8=)
                          2: ehuEnDQHAlATY6H5J-xCQJm5RyY.crl (hash: ckf2laMzHK+f7WbuHezNbFSJNkvXfNsv6wF6Rsq6gSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:40:da:90:9b:6e:30:cd:4f:6d:e3:54:fd:94:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1b849c340702501363a1f927ec424099b94726
        Validity
            Not Before: Apr 17 05:00:55 2026 GMT
            Not After : Apr 18 05:00:55 2026 GMT
        Subject: CN=177667c3e2d342a72419b8f1164e8a2422fc0ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a6:54:43:08:0d:b5:52:df:fc:83:eb:16:c9:
                    e2:b6:a0:28:ce:2b:f3:31:80:4d:f8:f4:b3:14:40:
                    c9:c4:e9:14:ff:85:35:eb:69:c2:11:8b:4c:6a:1c:
                    fc:ca:ef:06:49:db:c5:b4:50:2f:c1:04:5c:ea:09:
                    0f:ad:ea:59:90:05:61:c8:04:04:b5:c3:32:40:c4:
                    53:b5:3c:64:0e:87:b2:46:c0:f8:94:98:53:39:ec:
                    05:72:ce:f1:5d:7f:91:8d:82:83:41:6e:23:f1:15:
                    13:d1:0c:e8:1c:87:98:a2:ee:a4:b9:b2:aa:21:dd:
                    7d:21:32:d9:1e:20:f7:04:95:8a:86:87:b9:e8:37:
                    df:3a:68:ea:e5:c5:1c:8f:c2:0a:d8:83:ad:a2:3a:
                    4d:99:1e:f6:6a:6a:c4:c7:3a:64:bc:4b:f4:fc:d0:
                    4c:c5:30:e4:99:fe:a3:77:3c:d2:af:81:04:36:7c:
                    87:64:c8:b0:c5:f2:b5:70:a4:4d:c9:16:44:3f:64:
                    cd:26:0f:5a:92:b3:20:28:79:08:16:72:00:6e:d3:
                    f9:c7:68:e7:9c:5c:34:70:4a:06:cb:2c:61:45:7e:
                    4d:e3:82:d6:d8:e0:9d:7a:14:dc:1b:0c:82:b9:d4:
                    06:fa:dd:70:74:fe:2d:f8:8a:27:22:cd:1e:0a:b4:
                    6f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:76:67:C3:E2:D3:42:A7:24:19:B8:F1:16:4E:8A:24:22:FC:0A:CE
            X509v3 Authority Key Identifier:
                keyid:7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:40:35:2a:83:aa:61:fa:4b:1e:e4:cd:bd:ed:48:05:b8:1f:
         62:01:0c:d4:24:a9:c9:b6:5d:53:ab:50:d4:a4:47:ef:d0:4f:
         ea:8c:82:1e:81:6f:9c:61:df:a3:9d:6a:f6:ab:f1:bf:59:c3:
         7f:4e:6d:e7:bd:4e:3d:09:64:7b:70:20:6d:f6:21:7f:ec:a4:
         e6:7e:69:6a:57:04:47:db:08:83:b5:74:c8:64:13:d3:2e:9b:
         31:66:a7:bd:9b:ca:f1:3b:91:54:70:ea:7b:5d:7b:cb:ef:cc:
         68:ee:f1:76:2c:9c:02:94:d8:a7:c2:57:c7:c1:27:62:c4:7f:
         14:aa:20:b6:2f:cd:f2:fc:f1:b2:d4:cf:42:07:fe:1a:c3:78:
         15:00:e4:e9:39:11:7e:5a:e3:90:1a:57:6f:d6:f8:96:d2:13:
         69:38:b4:13:2f:5b:fd:ce:45:a1:49:18:f2:cb:c0:73:f0:c4:
         18:79:7c:c8:38:a0:36:73:6e:4e:e7:db:ca:9d:ba:a1:58:f9:
         4d:27:48:ab:07:36:cc:c4:c9:48:8f:3e:01:3c:b1:ff:ad:77:
         4b:0a:b9:34:19:9c:d0:cb:1c:42:91:a8:05:ef:18:d6:2f:76:
         4c:93:7f:88:9b:7b:4a:34:75:1a:e8:75:c9:16:6a:e3:09:b2:
         24:5a:ff:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:30 2026 by rpki-client