Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
File:                     p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft (raw, json)
Hash identifier:          WmKODvwRvaXn2UdEctLKuxjLBu3lYnd93sNApcRuu2g=
Subject key identifier:   3D:6E:CB:FB:0B:F5:28:DC:FB:AD:FC:3B:F2:BD:67:E1:BB:B5:1A:5D
Authority key identifier: A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64
Certificate issuer:       /CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
Certificate serial:       019D9850317B13542F96D76CC381D75933DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
Manifest number:          18C0
Signing time:             Thu 16 Apr 2026 22:01:25 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:25 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:25 +0000
Files and hashes:         1: hMyApwMrzeADs4JM-qIwJsPE4j4.roa (hash: N+rY5dKbfdkSmOrM2ag355sQkPNPr9/XUkupxhQWn1w=)
                          2: p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl (hash: yEV7mrVpR3A3DrQne0CStSzN3FCR/XJNaqgI7d9TOJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:31:7b:13:54:2f:96:d7:6c:c3:81:d7:59:33:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
        Validity
            Not Before: Apr 16 22:01:25 2026 GMT
            Not After : Apr 17 22:01:25 2026 GMT
        Subject: CN=3d6ecbfb0bf528dcfbadfc3bf2bd67e1bbb51a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:09:1d:5c:31:0d:23:96:5b:e4:e0:2e:30:20:
                    55:b9:5a:2b:74:c8:50:20:51:e5:bb:75:e4:12:ad:
                    08:f2:e6:7e:22:0c:3a:53:be:48:3d:3d:92:ad:24:
                    b2:70:89:cc:8f:7e:fc:4f:c3:f4:53:18:9e:25:01:
                    22:bb:f5:0a:fe:dd:1c:e2:18:dd:39:36:60:1b:c6:
                    ba:fe:d6:e3:67:88:5b:30:44:cd:50:ec:b3:38:e0:
                    c3:4c:d6:75:f3:4f:07:55:8d:17:50:43:f7:ba:e0:
                    af:45:de:1d:fc:3e:2c:e4:69:d0:22:38:78:cf:a5:
                    e2:cd:2d:cd:d1:68:7c:40:11:f9:fe:d3:71:de:66:
                    95:4b:c2:91:cf:30:0f:a6:6a:85:f2:f0:ad:ec:45:
                    c7:7f:ce:b4:f6:20:2f:ed:14:8d:cb:7e:3e:d2:f1:
                    a2:e4:f9:fe:6d:7f:3d:32:15:6e:ca:76:dc:32:55:
                    ac:fb:bc:04:eb:9c:41:ef:08:95:69:32:51:f8:7c:
                    2e:8d:4a:fb:e8:b3:a3:49:9e:c3:27:51:f9:03:58:
                    12:c8:13:44:9c:b4:73:7b:5c:3c:63:ea:26:65:42:
                    ed:e8:d5:90:1b:bc:ad:b2:52:6a:b9:37:6a:9b:38:
                    b5:6a:f0:d0:53:50:b5:c5:23:16:b6:11:41:bf:87:
                    55:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6E:CB:FB:0B:F5:28:DC:FB:AD:FC:3B:F2:BD:67:E1:BB:B5:1A:5D
            X509v3 Authority Key Identifier:
                keyid:A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:55:59:ff:4a:32:4d:67:28:37:96:6f:0f:bd:96:2b:dd:bc:
         24:c0:5f:08:7a:d5:f6:ba:a5:5d:01:42:5e:fc:34:14:59:b3:
         3f:01:42:f2:d3:31:b3:d5:f3:a4:5c:db:f1:90:5d:53:f7:e2:
         f2:86:11:13:30:a8:16:26:d8:04:e6:08:89:87:65:72:fc:a6:
         a2:71:5b:d5:eb:b5:61:04:0c:6a:d9:4b:d0:10:28:34:80:01:
         63:e1:9e:89:24:db:f7:df:8c:db:86:1f:a2:8d:19:83:56:23:
         0a:54:c2:59:d1:05:f5:bd:59:33:9c:47:79:d5:59:e5:ec:55:
         55:8b:46:77:3e:74:a1:ed:f6:69:2d:8a:a8:45:81:75:cd:ec:
         c3:ec:04:7c:4c:77:76:b9:e0:60:5c:d6:11:85:ef:15:ea:52:
         5c:86:92:4f:c4:f7:08:3e:cd:1c:3f:15:f1:b6:52:a9:13:20:
         89:38:e6:3e:81:6c:96:56:f2:eb:1f:d9:ab:fe:e4:3e:e1:64:
         4d:b1:f9:54:0a:86:ab:a1:c7:fd:cc:2f:28:0a:10:18:88:e0:
         91:64:5e:c1:69:be:99:e9:42:2d:58:f7:7a:96:03:da:98:90:
         16:24:4c:9d:c2:9f:e8:75:1f:9f:46:59:55:ca:86:7a:4c:b1:
         a7:e7:d8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:26:18 2026 by rpki-client