Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
File:                     G9vEEUREgGUxPvC4LhzPeubqVyA.mft (raw, json)
Hash identifier:          VQkJ/ZME1Iw4vlOLP8q0ImpJc0bPvqYH+BF+G0OXxIU=
Subject key identifier:   39:7C:AD:19:BF:93:7B:65:03:5D:1D:55:1D:4E:55:10:94:17:4D:B4
Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
Certificate issuer:       /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Certificate serial:       019D9A3EBB997EDFB6B2D5E47AF383A6B6F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 07:01:35 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:35 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:35 +0000
Files and hashes:         1: G9vEEUREgGUxPvC4LhzPeubqVyA.crl (hash: nFMiLViqy/WDwp1PBvsY4GbIdTWmoT4+yracrC6ifqM=)
                          2: tXwPHcD7KOQpl4ubBwGZXMLcNGc.roa (hash: kHVmMcCLDSaK/L8IsfRUQoLqMYtr8aRP/Gpfi71r/IU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:bb:99:7e:df:b6:b2:d5:e4:7a:f3:83:a6:b6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
        Validity
            Not Before: Apr 17 07:01:35 2026 GMT
            Not After : Apr 18 07:01:35 2026 GMT
        Subject: CN=397cad19bf937b65035d1d551d4e551094174db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:15:10:7c:ed:4e:0d:2a:48:46:9a:41:88:
                    5c:55:cb:ea:53:2b:b5:f4:cb:ca:e9:77:35:7b:47:
                    94:2b:42:8b:63:94:3e:bb:32:95:55:a7:c6:80:2a:
                    79:e5:f9:69:90:48:dd:9a:41:74:3e:d4:36:17:ca:
                    47:f8:f6:e7:73:a5:e4:68:69:59:b9:e5:a5:cf:9b:
                    e4:04:4f:d5:6d:bc:c4:de:48:d5:b1:83:e0:ab:a7:
                    89:8c:62:41:da:45:72:65:0f:79:65:35:8c:73:b8:
                    f8:91:9a:6f:46:61:ce:1c:da:19:cd:82:0f:16:01:
                    55:42:16:48:71:44:9a:fd:83:0c:f4:a1:e1:f9:f9:
                    3c:47:14:e9:d0:fe:c3:13:2d:e3:1a:33:e0:6c:93:
                    36:fd:41:9c:42:ca:6c:44:d7:e5:b2:33:fe:78:3d:
                    1c:5f:3a:bb:de:27:f2:ce:36:ca:38:66:b3:d9:51:
                    50:a4:8a:46:7d:73:45:50:e3:9d:b9:79:cb:cf:e9:
                    45:f2:df:61:cc:3b:db:c2:6e:88:17:fa:05:5e:c8:
                    63:b6:4d:bf:6b:c1:86:d8:68:b1:69:de:26:c1:e5:
                    a0:5d:35:32:a3:b7:f3:4d:f4:dd:7b:b3:5c:16:75:
                    af:47:fe:25:6b:fc:49:58:04:dc:6f:4d:88:28:e6:
                    fa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7C:AD:19:BF:93:7B:65:03:5D:1D:55:1D:4E:55:10:94:17:4D:B4
            X509v3 Authority Key Identifier:
                keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:19:b8:d9:a5:18:c3:53:8f:6f:18:e9:4e:a8:91:98:a0:4d:
         60:23:3a:36:82:1f:a9:b5:28:ae:1e:30:69:07:93:26:40:a6:
         21:3f:f0:38:b7:e5:01:34:62:12:7a:b2:f9:74:04:9c:c1:e0:
         b4:8e:78:9f:56:1f:c1:43:c4:e1:9a:68:43:75:06:52:c9:0f:
         7e:62:71:60:2c:a5:04:68:4b:01:78:70:79:ed:ed:15:da:d2:
         d2:b1:47:1c:d4:9e:14:e5:48:65:6d:e9:8b:5f:47:ac:20:01:
         fa:8c:3c:c4:d8:e7:b7:a8:4c:ad:61:59:4c:c1:c4:66:35:b3:
         d0:79:f8:cc:7b:bc:07:51:66:a5:7f:c3:ef:82:4d:91:eb:f1:
         b0:13:c0:42:3e:f6:9d:ac:56:54:e3:2b:f0:21:bf:18:4f:fe:
         97:7e:26:00:52:fe:64:96:fa:de:a4:56:73:d3:9c:88:af:b9:
         61:50:5a:aa:7c:45:8d:18:45:1f:05:23:9d:c2:d5:b5:d1:b8:
         75:99:10:4a:fe:6c:b3:37:43:52:6a:df:f2:d2:fe:77:e0:5f:
         31:a9:b4:42:e6:f0:54:74:d4:43:54:31:ce:0b:8c:25:e6:59:
         a9:d3:75:61:c1:77:f8:df:56:c4:f8:bc:ee:22:49:57:89:d6:
         93:e0:84:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:15:00 2026 by rpki-client