Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
File:                     V0U31U828UIjG8gXA4hyy2B7Iec.mft (raw, json)
Hash identifier:          GasCbRsqpb7yITUqE6JjVFdMF+TxeiEEw9VAYGKjBkY=
Subject key identifier:   6E:DF:BF:07:44:30:4E:E8:44:0C:BB:4C:9D:FE:EF:A0:E5:B7:45:21
Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Certificate issuer:       /CN=574537d54f36f142231bc817038872cb607b21e7
Certificate serial:       019D9A74B47E0DADE340FC5B9B9C78B82FF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
Manifest number:          18C7
Signing time:             Fri 17 Apr 2026 08:00:32 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:32 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:32 +0000
Files and hashes:         1: EN3L4pyXEtd8agpR0WCbncdFo08.roa (hash: NJ7X+GYc10QZ6IeNjYC/5Bh9ragVjwZPuZ02BIahBWE=)
                          2: V0U31U828UIjG8gXA4hyy2B7Iec.crl (hash: HPyCLKMUFbTXTRztAKWG0onprE4J03AaXUU3Ra8MMK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:b4:7e:0d:ad:e3:40:fc:5b:9b:9c:78:b8:2f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574537d54f36f142231bc817038872cb607b21e7
        Validity
            Not Before: Apr 17 08:00:32 2026 GMT
            Not After : Apr 18 08:00:32 2026 GMT
        Subject: CN=6edfbf0744304ee8440cbb4c9dfeefa0e5b74521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e8:39:e5:74:9b:6f:68:b6:dc:18:f6:23:06:
                    06:ad:5e:9b:42:3a:12:a9:d3:29:0a:cf:e9:b2:80:
                    84:2c:b5:fe:3f:57:ed:a7:57:48:d3:c7:3c:cb:29:
                    89:26:dd:e7:43:69:54:88:4d:fa:f9:14:ef:cb:56:
                    98:38:ad:5f:89:8c:ad:24:ec:19:33:4a:41:21:27:
                    f5:1e:4a:a2:f3:bd:3a:2f:d7:e6:27:dd:b5:f9:0c:
                    4e:51:96:69:8c:2f:27:4a:41:95:fb:bb:de:80:58:
                    94:2a:98:88:23:43:19:83:b7:b1:50:00:91:4c:5c:
                    b2:18:e5:95:d0:b8:da:55:b2:10:24:17:3d:b1:f4:
                    a1:21:8e:a0:ff:2a:bd:e7:47:a5:4d:b5:28:b8:80:
                    74:47:cf:ec:e1:6b:05:c1:d1:84:d8:2b:ce:b4:9b:
                    91:19:be:82:92:d2:90:a0:33:ed:6e:e6:2c:03:aa:
                    0a:23:21:95:db:e2:75:75:7b:be:78:8e:74:eb:cc:
                    1c:41:87:18:27:87:b0:93:aa:82:06:e7:0c:1c:c3:
                    67:6c:89:0e:5d:0d:3e:50:33:3b:78:c6:f5:8f:7a:
                    ca:35:82:95:e2:11:2a:ca:3d:63:db:8a:9a:6d:af:
                    ff:70:c3:31:07:d7:c0:4a:1a:7a:a9:11:59:2d:f3:
                    d5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DF:BF:07:44:30:4E:E8:44:0C:BB:4C:9D:FE:EF:A0:E5:B7:45:21
            X509v3 Authority Key Identifier:
                keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:cc:f6:48:6a:3d:9a:41:37:70:e9:69:83:13:98:a0:e1:68:
         a8:9f:ab:66:a7:51:27:5a:aa:bd:dc:31:6d:3d:98:9f:e7:7d:
         06:87:fc:ff:40:b1:de:3a:ab:94:88:ab:4c:f2:f4:be:96:54:
         7b:f0:be:34:6a:0b:05:dd:cc:fa:35:89:10:6c:02:41:d9:07:
         72:6b:2d:20:be:1c:cd:de:2d:d4:5a:20:9e:ea:88:19:e2:12:
         26:3c:c1:82:b9:ce:b7:60:7d:cc:b7:b8:01:88:0d:d6:3b:a9:
         84:3a:f9:fb:63:e5:be:a8:bb:a0:ca:13:aa:cf:6a:b3:73:32:
         14:86:13:f0:f2:b0:db:0e:30:57:32:a0:12:ee:02:aa:76:f7:
         d5:8e:fb:7f:6f:e2:08:3d:04:78:d7:2d:30:17:c8:b0:19:dc:
         55:34:6f:4c:23:c4:5c:99:34:4a:2a:50:df:13:5d:f3:de:0d:
         6c:f4:e5:a1:87:b2:9b:eb:1f:1b:ca:7a:e6:f3:61:fb:02:47:
         8d:83:2c:ee:09:25:95:56:a9:9e:a7:ad:fd:03:e4:f0:a1:6f:
         ec:6e:b3:75:59:72:e8:16:e8:c9:78:4e:6b:14:da:d8:fd:5a:
         ca:5a:b6:45:56:6a:b1:f9:24:d8:87:77:3a:20:1e:22:58:11:
         b9:a0:d4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:01 2026 by rpki-client