Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File:                     3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier:          5Lzy4dvaCyfZv0qczvJ7GSPgcvAoY44bGSclQI2sSSQ=
Subject key identifier:   19:07:06:EB:1F:F1:C7:38:3D:64:EA:F9:17:24:4B:22:43:F9:77:9C
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer:       /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial:       019D9B8776E6C340C74A61C75326EFCAE298
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number:          18CB
Signing time:             Fri 17 Apr 2026 13:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:39 +0000
Files and hashes:         1: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: YMgla+0HrmrVWgWL+3GoBsj7u5axvP/x6hNvly/BwoE=)
                          2: M4QUOFTfojfe9Puztb3G-E5hYsQ.roa (hash: nVwzsK/0G0L0DeqaFuH81eDkbF0VoyZV22ct2zx5OnU=)
                          3: dyDacYG9aeiRlaiQgtNvE4ErVUI.roa (hash: PdpYlK5IJJ0ruhbi5o/udgWox1/LLP1tGzCkyDFpfcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:76:e6:c3:40:c7:4a:61:c7:53:26:ef:ca:e2:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
        Validity
            Not Before: Apr 17 13:00:39 2026 GMT
            Not After : Apr 18 13:00:39 2026 GMT
        Subject: CN=190706eb1ff1c7383d64eaf917244b2243f9779c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7d:a6:fd:af:21:10:23:45:03:52:dc:96:2f:
                    67:2f:1d:5e:b6:f1:83:7c:6f:d9:e9:07:74:7d:86:
                    da:59:c5:ed:9f:29:7d:3f:ab:9b:bf:16:e4:14:d4:
                    ef:0a:e6:dd:d1:0b:e2:57:8e:0e:da:6e:9b:a1:2d:
                    45:f9:8c:11:a3:d5:35:d2:13:52:d9:d1:61:9a:0f:
                    57:b2:d4:c9:6e:22:18:22:b3:1e:8d:05:7e:ee:70:
                    14:36:56:9d:b8:d6:2b:c6:ba:ba:ee:60:e3:90:29:
                    02:4d:30:a9:6f:9d:eb:be:6b:7a:57:f4:f4:e7:22:
                    27:34:0a:34:42:73:c3:2a:84:97:c9:51:5b:15:c8:
                    24:9f:a4:0b:f3:20:0a:46:0c:21:9e:55:94:c8:e1:
                    34:f9:5d:e4:9d:d0:bf:14:00:fb:1e:26:cc:fb:f0:
                    f5:76:20:23:fd:50:e0:1d:6e:6f:6b:44:8f:90:15:
                    77:54:c3:ee:bd:d2:80:01:50:9c:e4:20:cb:15:09:
                    c4:62:94:97:69:2b:16:8a:17:c4:ac:f9:e4:c6:90:
                    86:30:78:a0:e3:34:2e:46:be:5b:e0:eb:56:3c:0d:
                    ff:ee:b6:b0:a9:91:73:b9:8c:f7:25:51:c8:d6:85:
                    ca:60:4f:9f:a2:8c:14:2d:19:4f:30:d1:d4:3d:2d:
                    01:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:07:06:EB:1F:F1:C7:38:3D:64:EA:F9:17:24:4B:22:43:F9:77:9C
            X509v3 Authority Key Identifier:
                keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:da:f2:31:71:93:1d:73:04:96:f5:f7:53:c9:c6:c9:1e:27:
         a4:e7:60:87:6d:8d:12:00:b9:78:0e:de:56:47:0d:de:d1:ff:
         44:fc:93:f4:9b:d6:68:da:d1:94:9e:06:b5:01:4f:86:4f:18:
         6e:75:08:4a:c8:0a:45:ca:02:b9:e7:0d:06:8a:46:d6:73:23:
         dd:fe:72:b6:89:54:5a:80:d9:7f:38:3c:d2:d9:85:b9:6b:2b:
         18:20:62:0a:e5:24:82:e5:49:ea:85:83:8a:56:45:a5:7e:4a:
         5d:6f:50:5e:a6:fd:bf:8f:6d:7a:6c:e1:dd:c8:16:7d:75:c3:
         1c:44:48:c2:6d:10:ba:37:7e:4c:a5:a5:c6:c2:dc:a1:56:22:
         f9:a7:de:ea:26:cc:77:49:ee:76:3d:c7:e5:b4:68:5b:28:50:
         7d:fe:54:bf:97:cd:9f:a7:27:e9:57:be:85:ce:a8:70:4d:3a:
         57:0b:57:e3:ca:96:4b:08:e9:b1:2a:3f:ad:94:7e:b0:8a:33:
         fa:66:d6:20:ec:f7:1d:6e:0a:30:e5:a0:cb:f3:45:d1:f2:7c:
         e7:8c:ce:fe:dc:4e:62:76:04:fa:f8:63:18:b5:ce:24:af:dc:
         7f:56:3a:40:33:26:b6:d4:49:39:a6:0b:79:33:16:bf:65:92:
         c6:e4:a7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:07:49 2026 by rpki-client