Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
File:                     GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft (raw, json)
Hash identifier:          i3VfU5y2VkQya0Bm18ibvtb+jstAYaPAv6q9adFj4uE=
Subject key identifier:   5B:3D:B9:03:1F:46:19:91:F4:BA:FE:34:CA:2F:38:19:A2:14:66:5B
Authority key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
Certificate issuer:       /CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Certificate serial:       019D992B0AB407F2A7719A0E9F2D1780AAB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 02:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:28 +0000
Files and hashes:         1: BW_NoLK8bvq98NW3uQCVBILUjdc.roa (hash: Yv7HzXY6brkJdNWi4vkWfsAkacdbGVR0g6RZPDb2Wbo=)
                          2: GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl (hash: IqO4RbeJHB7pDzm2xhqFDtrt+4PiFj2mHyc/ySgWdWo=)
                          3: UvhzMGyTfEF1hpgc3K2nc1IVHoI.roa (hash: cbsC5/gFhJ1QzmTO5tqc9Od4dJZpIwpWSVpRJbM9KoY=)
                          4: vQDrdsVKUyg3AdinxsQg6qe1Fs8.roa (hash: FsUD/qILrBqWkPuIKdZisJEsoMgHswVeHLUrDTTRgbo=)
                          5: wIewyVcuV4glOwAciJdc6xtEcA0.roa (hash: P+orYhZY32r0vN37BZW90hJsNwEYMuvTdq9aVkdcNxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:0a:b4:07:f2:a7:71:9a:0e:9f:2d:17:80:aa:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
        Validity
            Not Before: Apr 17 02:00:28 2026 GMT
            Not After : Apr 18 02:00:28 2026 GMT
        Subject: CN=5b3db9031f461991f4bafe34ca2f3819a214665b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dd:23:df:e5:bb:ce:cf:4c:e5:dd:2a:5e:5f:
                    bb:d9:6b:ae:33:80:67:97:c8:24:f3:eb:81:a1:38:
                    65:ee:b0:aa:c7:ec:64:68:d3:62:27:6b:e6:0f:25:
                    3a:7a:32:10:a9:0c:77:11:90:34:93:2a:87:e6:ab:
                    39:aa:fb:7a:08:a7:7e:9e:32:28:9d:84:67:47:f2:
                    9f:3e:12:c5:73:78:4d:05:bf:6f:74:d6:ec:60:c7:
                    f3:61:eb:db:4d:9c:02:5a:30:5b:e8:f8:5d:e6:cc:
                    50:6c:df:07:04:74:6d:1c:38:da:96:4a:3a:70:a5:
                    6c:b0:17:04:4e:3f:79:09:00:41:8c:c5:65:06:e3:
                    61:0c:62:0b:14:ef:0d:8e:a0:21:59:05:57:d8:30:
                    4b:5f:21:8b:b8:4d:46:68:94:a2:c3:4b:41:c6:c4:
                    ee:e7:ee:f4:23:63:0b:02:59:e2:9f:cf:25:48:23:
                    59:60:97:18:ab:4d:af:ee:b8:fc:b7:8a:76:92:66:
                    bf:6a:8c:c0:e4:7f:19:db:dc:61:c4:09:a1:89:7a:
                    43:82:d0:92:65:17:06:62:f6:85:86:0b:d6:55:1c:
                    68:3c:20:d0:ca:42:b5:01:f8:bd:5e:58:45:75:ef:
                    5c:21:86:9d:be:12:b5:3c:34:28:8e:f6:8c:05:1b:
                    c8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3D:B9:03:1F:46:19:91:F4:BA:FE:34:CA:2F:38:19:A2:14:66:5B
            X509v3 Authority Key Identifier:
                keyid:18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:65:e0:7f:13:ac:c2:da:8b:d8:fd:03:a9:03:c7:33:96:b0:
         e6:e9:c2:fe:ed:93:58:3f:50:00:75:48:04:84:9e:bf:38:d9:
         dc:1b:af:3f:d6:3f:1d:1e:aa:1e:c9:c7:d6:6d:e1:2b:62:22:
         ce:f3:11:f9:0c:12:18:01:ee:49:e2:58:83:89:9e:20:3e:45:
         a7:a7:eb:ce:b5:7f:03:13:f1:61:bd:10:14:e0:b0:7c:dd:91:
         79:2d:e7:32:f6:56:09:5e:c3:05:71:11:8b:00:03:a2:ac:c7:
         fc:00:8c:9f:ae:3e:8f:58:ea:09:ef:70:4a:a8:fd:5a:63:f9:
         91:7b:0f:d6:13:5a:a8:c6:d3:37:24:da:56:c3:ff:3e:e4:6d:
         89:d0:e8:31:b2:9c:75:16:64:e6:c1:95:89:ed:5a:1e:83:e8:
         76:ef:53:8d:b3:34:a7:ac:52:d3:f0:1a:a8:f7:fc:e7:e5:8e:
         5c:31:6b:35:cb:b5:c3:3a:ef:53:51:e8:15:b1:5d:b5:ed:46:
         2e:96:90:1d:15:ef:a2:d5:b7:16:48:0f:13:f4:1e:39:a4:b1:
         26:ae:a3:c6:0e:b5:80:22:53:b0:e7:61:d6:12:c6:5f:2b:11:
         f2:b9:d3:08:66:f3:0d:24:97:93:a3:6a:90:43:75:0f:c8:9f:
         c1:9e:42:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:58:14 2026 by rpki-client