Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
File:                     eU9VHpehMlQuOwVukF3o89uiTJw.mft (raw, json)
Hash identifier:          Kc13+iCJwAk+ENeYED5UywNlLGZ0W3SgdM7YdV56IQU=
Subject key identifier:   54:0C:8E:45:84:BE:D2:AC:25:B6:4D:C0:67:2B:AB:37:2B:0B:37:13
Authority key identifier: 79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
Certificate issuer:       /CN=794f551e97a132542e3b056e905de8f3dba24c9c
Certificate serial:       019D9961EA709CB3BA0AA9A220DF57E2002D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 03:00:24 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:24 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:24 +0000
Files and hashes:         1: eU9VHpehMlQuOwVukF3o89uiTJw.crl (hash: 8i89EHiudSLp0gW+Aptotva1zhcEPosHSSHRkJO6XKc=)
                          2: k6X22bQfluylqHARD-L5Ikhx1sQ.roa (hash: dFpw1lhqCaKbzT3oHGvLx20tpk89gIoCNO+pACDK98E=)
                          3: sqIqbG5-nG1e9zfCeQu_o5Cvh6g.asa (hash: zJTKqjeO7h7C95S8GlHsLV4A/G2qaaF0osBDhe62kaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:61:ea:70:9c:b3:ba:0a:a9:a2:20:df:57:e2:00:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794f551e97a132542e3b056e905de8f3dba24c9c
        Validity
            Not Before: Apr 17 03:00:24 2026 GMT
            Not After : Apr 18 03:00:24 2026 GMT
        Subject: CN=540c8e4584bed2ac25b64dc0672bab372b0b3713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:88:35:ba:49:1e:1e:b7:6e:35:5b:b6:99:70:
                    cf:00:fb:f4:d4:06:09:c6:8e:8a:d4:17:61:6a:70:
                    0a:f2:30:f0:47:c5:67:da:86:88:ff:86:68:c3:32:
                    1f:0d:1e:07:ab:14:29:45:4f:dc:df:f6:e7:99:28:
                    af:3b:5b:6a:5d:77:ba:ff:aa:6f:2c:06:91:bf:8b:
                    2b:a7:4c:29:7a:f4:05:44:8a:3a:9e:0a:a7:8d:b0:
                    2c:c3:fc:1e:78:a2:83:0d:4e:cf:3e:f9:07:5e:99:
                    6a:8e:c0:f7:bf:f2:fa:09:da:15:ab:d0:fa:08:eb:
                    aa:29:24:04:ab:0d:e8:68:15:b6:57:56:0f:2c:77:
                    a2:f5:91:b2:be:83:b4:dc:3c:d9:ac:59:fb:5c:61:
                    05:92:67:1c:d5:ed:02:e6:5a:82:8f:31:d6:0e:33:
                    21:af:e7:51:4b:fa:a6:ea:8c:26:68:28:b4:bb:54:
                    05:49:16:7b:e4:7a:67:bc:65:97:99:cd:e6:e1:7e:
                    f8:46:d0:8e:80:9e:6d:43:0e:42:98:d5:25:73:59:
                    f3:8d:9e:2e:ee:5f:11:8a:6c:26:5f:ff:95:92:3f:
                    ae:8c:eb:87:33:1d:c0:14:66:a5:3a:38:cc:6e:5c:
                    af:01:d5:eb:55:13:86:e2:32:53:1e:ec:23:b3:49:
                    c6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0C:8E:45:84:BE:D2:AC:25:B6:4D:C0:67:2B:AB:37:2B:0B:37:13
            X509v3 Authority Key Identifier:
                keyid:79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:40:a4:5c:10:a2:e7:2e:76:3b:22:bd:2d:02:81:03:ea:fd:
         40:8a:4b:c8:2e:e9:78:42:8a:1e:24:dc:5e:7e:2b:d7:dd:f4:
         99:a4:b0:9b:31:43:6c:d3:9d:0f:51:71:17:cb:17:ed:7a:78:
         33:3e:90:ac:ac:b9:81:02:0b:a4:3f:86:39:45:c6:1b:25:5e:
         8c:ab:3a:ca:09:1d:c1:dd:d6:37:d0:a1:ed:0f:c8:89:d3:e9:
         37:36:53:50:90:f0:07:6d:e1:ea:9a:6a:5e:eb:bd:2d:17:a8:
         d1:2d:ed:13:80:9d:b9:b2:03:a7:bb:59:42:84:62:39:40:1f:
         0c:ca:1b:2e:76:1a:78:e1:6c:31:1c:26:b2:fa:11:c8:28:03:
         af:a6:a2:38:a9:9c:16:d7:bf:8f:20:87:c9:dd:e2:57:f5:b3:
         83:a0:c3:66:31:a6:9f:be:d9:bc:0c:f3:d9:4c:9e:94:e9:ca:
         ed:8c:17:c5:5d:21:d1:32:7e:73:7e:8e:f6:97:2f:64:0c:9f:
         cf:83:38:bf:8e:78:a4:2d:d0:52:d1:85:da:2f:ec:01:30:65:
         d5:f9:74:dd:98:2e:48:55:cb:3b:c3:00:f8:e9:7e:e8:ec:d7:
         6b:34:dd:e3:79:c0:f0:26:76:b0:85:30:7c:25:a3:31:38:b9:
         b1:ca:12:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:49:48 2026 by rpki-client