Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
File:                     V2VnM04DVjndfMtJdqmycPcmMh0.mft (raw, json)
Hash identifier:          msMVKqMjF0dEtdGD4P0WwkjT70enftw22aSgmdx52XU=
Subject key identifier:   5B:73:21:D3:C3:7F:93:DD:E4:E3:C0:F2:9D:9A:99:27:96:C2:B4:62
Authority key identifier: 57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
Certificate issuer:       /CN=576567334e035639dd7ccb4976a9b270f726321d
Certificate serial:       019DA4F8C11310CC623DCD355868BC5DE0CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
Manifest number:          18C4
Signing time:             Sun 19 Apr 2026 09:00:58 +0000
Manifest this update:     Sun 19 Apr 2026 09:00:58 +0000
Manifest next update:     Mon 20 Apr 2026 09:00:58 +0000
Files and hashes:         1: Kz6MRzZAbf0P2fKRSo9EK3LhnNg.roa (hash: FunMB/X94eHRJVpgjb/DKK3OKKV8NdcYckDgjUBxDNs=)
                          2: V2VnM04DVjndfMtJdqmycPcmMh0.crl (hash: HNdX7wei7hnWcAm/KcGzRLIQb7O9fzCvvlRx1+GxytM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:f8:c1:13:10:cc:62:3d:cd:35:58:68:bc:5d:e0:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576567334e035639dd7ccb4976a9b270f726321d
        Validity
            Not Before: Apr 19 09:00:58 2026 GMT
            Not After : Apr 20 09:00:58 2026 GMT
        Subject: CN=5b7321d3c37f93dde4e3c0f29d9a992796c2b462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4b:5c:1d:08:fe:e5:35:d2:4a:d3:55:c1:95:
                    34:a3:12:25:ac:90:2b:f0:2a:d9:1d:1d:2d:04:72:
                    39:d2:dd:fd:9d:82:ec:f4:d7:66:fd:14:87:9a:88:
                    6d:d8:4b:7e:03:4c:2e:67:4f:46:03:6f:13:42:9b:
                    21:df:e3:82:f9:ec:c9:a5:a7:4d:da:0a:23:e6:a5:
                    26:6a:b0:fe:b7:88:ac:b3:54:2a:48:39:2b:c8:e2:
                    3b:6c:0e:47:0a:73:18:99:e5:e0:96:d8:3f:19:30:
                    da:3b:1c:ab:f5:a8:40:76:aa:93:89:02:9a:3f:19:
                    ce:68:97:21:ab:5c:aa:f6:e3:e1:42:4f:ca:28:24:
                    bd:d3:78:3e:78:93:12:76:c6:43:2e:4f:e9:f6:fc:
                    28:54:da:36:0f:6b:1d:dd:43:b6:ab:50:c9:ad:8a:
                    06:c5:b0:b3:98:b3:2b:a2:3f:78:3f:6c:bb:3c:18:
                    cd:63:ff:46:94:ea:a1:85:93:57:79:a6:fa:d6:95:
                    44:f0:9d:a5:72:bc:f9:28:bd:17:a3:a9:87:dd:8a:
                    aa:01:24:c9:7a:45:ec:06:32:38:35:e3:cd:06:21:
                    3e:b8:77:05:56:8b:f8:82:e0:da:2e:41:ab:ca:ba:
                    f3:af:48:67:6e:c5:f3:dc:d2:34:03:d7:7c:be:6b:
                    aa:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:73:21:D3:C3:7F:93:DD:E4:E3:C0:F2:9D:9A:99:27:96:C2:B4:62
            X509v3 Authority Key Identifier:
                keyid:57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:93:c7:24:7b:95:03:9d:47:01:5b:dd:13:36:a1:3c:37:b6:
         f5:cf:87:e5:a1:a7:52:f6:7f:f2:7a:2d:c0:f8:64:96:08:4c:
         cb:17:50:c2:91:7e:a9:4a:be:2b:dc:31:64:59:0c:8d:56:d6:
         81:89:af:3b:e9:67:55:11:a0:a6:e4:e8:93:3a:f4:4d:de:7a:
         da:75:ea:a3:57:c9:81:d4:0b:59:b2:58:14:66:ca:ad:c6:35:
         25:ab:e0:cb:7f:7f:e7:86:4b:54:22:56:f7:28:f2:19:03:2b:
         2c:b5:7b:21:25:aa:5e:56:a7:3b:10:10:68:4b:4e:d1:e2:e8:
         de:a2:d3:de:19:9f:c1:1f:03:39:e6:99:2e:8a:c3:7f:4a:c2:
         f0:55:2f:2f:15:09:0b:01:24:db:50:74:55:97:8d:4a:64:07:
         c7:eb:fe:83:6e:0c:fa:03:34:2a:50:72:4a:24:6d:bb:06:73:
         06:8d:73:0d:1a:4e:74:27:4b:ac:31:e7:6a:73:cd:65:c3:d5:
         76:b2:c2:c8:30:b2:cd:15:81:73:cc:74:87:74:0f:b2:dd:f9:
         cf:ec:4a:5a:a0:bf:68:72:7a:be:a4:1b:2e:5f:41:ec:22:51:
         30:f1:d1:90:e9:e2:f7:26:e6:4c:8a:32:26:15:98:3b:2c:24:
         39:46:0c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:22:57 2026 by rpki-client