Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
File:                     TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft (raw, json)
Hash identifier:          miOsS7QfO/NG1U8rdHTtttggjmhVc3i29PPTFUQG7zk=
Subject key identifier:   64:91:AB:F4:09:8B:85:5B:8D:A2:01:97:39:AA:52:39:61:CD:11:99
Authority key identifier: 4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
Certificate issuer:       /CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Certificate serial:       019DA52FB2C308230F79784AED90593A6E39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
Manifest number:          18C4
Signing time:             Sun 19 Apr 2026 10:00:59 +0000
Manifest this update:     Sun 19 Apr 2026 10:00:59 +0000
Manifest next update:     Mon 20 Apr 2026 10:00:59 +0000
Files and hashes:         1: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl (hash: EPYYt9CWzEIEG14l/HjzVjPSpGwnFZsH0GqJNnJzovY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:2f:b2:c3:08:23:0f:79:78:4a:ed:90:59:3a:6e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
        Validity
            Not Before: Apr 19 10:00:59 2026 GMT
            Not After : Apr 20 10:00:59 2026 GMT
        Subject: CN=6491abf4098b855b8da2019739aa523961cd1199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:60:d5:f1:03:74:30:38:a3:e5:7d:8b:4d:65:
                    19:9a:64:b2:d1:79:d2:90:0e:9d:a7:04:bf:6e:0d:
                    c2:6e:01:bd:f1:95:24:50:dc:26:a1:84:37:11:05:
                    71:7b:06:61:61:fb:68:ea:1b:d0:3e:6b:66:d4:a0:
                    07:3a:38:d3:86:1d:83:bb:84:d8:e9:ed:1a:e1:81:
                    11:87:6a:50:f5:c9:90:22:ab:ea:b3:18:b9:bb:50:
                    93:bd:8c:d0:be:59:0a:1d:97:c8:b1:25:8a:45:6b:
                    27:b7:ef:98:bf:f5:52:79:cc:c5:85:b7:00:bd:15:
                    f2:34:76:e5:0c:9c:55:cd:ed:f2:c2:d5:48:46:9a:
                    b8:ac:e0:9c:0e:a9:9f:23:23:d5:36:c2:32:2f:ec:
                    5f:4a:8d:d0:f9:a6:7f:d7:08:56:1d:8a:a6:d2:29:
                    c2:8c:1b:04:4b:b0:c0:75:81:b6:a0:3a:b9:e6:f5:
                    56:6f:7e:49:2b:e7:ce:a3:0d:6a:f1:18:3a:c2:6c:
                    72:70:d8:f6:b2:54:98:ae:3c:32:4f:66:84:83:de:
                    60:5d:7c:e8:e8:8e:88:1f:b7:83:d3:be:29:0d:3d:
                    cb:af:09:f1:5d:7c:01:a6:88:9e:43:f9:1e:be:f6:
                    e9:fb:0c:5f:51:33:eb:c4:1c:da:d4:bc:5d:82:47:
                    09:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:91:AB:F4:09:8B:85:5B:8D:A2:01:97:39:AA:52:39:61:CD:11:99
            X509v3 Authority Key Identifier:
                keyid:4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:78:03:7e:8b:27:7a:8a:fc:f9:97:e8:27:3a:0c:50:df:fb:
         4d:a4:ef:f2:e1:69:d4:b3:2a:f3:fe:8f:a0:49:33:2e:e2:b9:
         f5:aa:58:bb:a7:b8:7e:7c:61:2c:db:a0:05:87:73:4c:f0:3a:
         59:e4:26:6c:89:ed:8d:d1:ad:4c:59:f4:0d:59:bd:bd:b0:4e:
         3f:25:d1:48:a0:16:86:bd:bf:f7:77:76:0c:cc:48:38:48:e3:
         ff:f7:bf:7c:c3:76:65:1b:f4:54:e1:37:db:a1:f1:2f:90:50:
         9f:6f:4f:d8:08:b4:ef:69:80:ba:a0:0d:33:9e:fe:b3:12:05:
         20:9b:a7:73:35:17:57:ba:f5:24:27:8a:0e:0b:d5:4c:de:ed:
         ea:db:41:52:5b:73:12:b5:bf:af:17:17:d2:52:fa:ff:80:b3:
         df:61:2b:1c:13:9f:86:a0:96:47:e9:ca:2b:c6:1a:f8:48:d6:
         0c:db:cf:89:7e:32:b9:74:b7:1c:ac:f9:b7:49:29:1f:19:73:
         ad:c5:12:32:e3:6e:de:3f:27:48:8c:cb:9c:48:66:15:ed:be:
         60:5a:bd:62:0a:a9:bc:ea:2d:78:1e:31:b6:bb:f4:c3:2b:03:
         99:fd:3c:9f:dc:d4:03:ce:ec:4b:54:ba:72:5f:4f:c9:fb:59:
         34:d0:40:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:59:30 2026 by rpki-client