Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
File:                     fWReWE8e-aiB8fu8TSejQj3j3_E.mft (raw, json)
Hash identifier:          TyGjujL1iKFu/rNd3GxVk2ML7kQABPbewlf+/45hJ2I=
Subject key identifier:   0E:84:E8:00:21:82:55:CF:73:90:3A:C8:63:75:09:AB:6C:AB:1A:C4
Authority key identifier: 7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
Certificate issuer:       /CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Certificate serial:       019DA45393F8302BF0DCE36C1090D050BEDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
Manifest number:          18C9
Signing time:             Sun 19 Apr 2026 06:00:33 +0000
Manifest this update:     Sun 19 Apr 2026 06:00:33 +0000
Manifest next update:     Mon 20 Apr 2026 06:00:33 +0000
Files and hashes:         1: 5LuGzHTGNXh7ooCOYMthjUDSS6E.roa (hash: ueacTOAGFcsAA9jabTl3i8ESOHojLkJGvrFKPoo+SiA=)
                          2: Up6FPG2EmlxGGm-IJpPlY2eyxIw.roa (hash: vllY3zX6/fq+SiGXdC5fpCJcuaKw1ngd9//Sa26iQZc=)
                          3: fWReWE8e-aiB8fu8TSejQj3j3_E.crl (hash: e2L07uuyCcIs8zuHNf+sDaV1DPP8q66sRV7X8pve59s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:53:93:f8:30:2b:f0:dc:e3:6c:10:90:d0:50:be:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
        Validity
            Not Before: Apr 19 06:00:33 2026 GMT
            Not After : Apr 20 06:00:33 2026 GMT
        Subject: CN=0e84e800218255cf73903ac8637509ab6cab1ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:43:80:96:83:e1:90:1b:b8:e3:a1:30:84:82:
                    e1:a3:c6:1a:0d:4c:69:5d:43:dd:75:e8:07:a9:2a:
                    79:ab:54:82:1a:07:41:87:ad:db:47:93:36:64:dc:
                    3b:f7:69:0e:09:ac:a3:c1:41:be:ca:65:d8:d2:e9:
                    5d:31:7f:f3:e4:8f:8d:c5:55:3e:b1:69:3a:56:3c:
                    6b:cc:8d:cc:02:d6:44:58:20:42:8c:33:04:ba:09:
                    3b:8d:64:e8:c6:4a:7d:33:f0:b0:87:fc:c3:fc:87:
                    a0:28:d5:c3:53:33:13:43:b0:c5:c1:a2:47:67:10:
                    02:b8:86:1c:7a:57:ad:40:99:e8:28:fb:f5:62:60:
                    0d:5a:2e:b5:8b:9b:b8:df:3e:5c:cf:f0:b0:0f:dc:
                    f6:45:4f:18:a3:de:58:c4:d3:7c:95:94:d7:03:28:
                    71:2c:30:e6:b6:a0:3b:bb:90:67:ba:ed:16:e1:53:
                    0b:e5:1f:87:c0:c5:03:b9:e8:1c:10:44:2a:b1:60:
                    2a:2d:aa:f0:5f:9d:7b:f3:ed:bd:a8:b7:ff:d7:fd:
                    f9:cf:51:ad:40:0c:6c:6e:bb:1e:4d:21:77:45:3c:
                    3e:dc:ef:e4:ba:f6:88:18:39:95:a4:ec:0f:fd:2d:
                    74:cd:bf:25:c6:6b:81:20:3a:b2:19:ee:e3:a8:0d:
                    bc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:84:E8:00:21:82:55:CF:73:90:3A:C8:63:75:09:AB:6C:AB:1A:C4
            X509v3 Authority Key Identifier:
                keyid:7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a5:90:33:8d:34:dd:80:f0:d2:e2:e5:97:b1:25:f9:84:af:
         fc:ec:b9:b8:c0:48:46:97:28:bb:cb:6f:3f:2a:c4:67:03:25:
         d9:87:a1:3b:ec:19:ac:2d:d2:87:bb:fb:4b:dd:c8:fc:74:73:
         ee:1c:cb:19:2a:a2:73:8e:6e:32:5a:95:f6:91:d2:8b:99:03:
         25:5b:e0:a1:9e:30:8a:5f:1d:8b:3f:f5:70:fa:b8:b1:81:50:
         a8:34:db:51:e8:5d:70:d3:94:da:66:85:d1:37:e4:ce:0d:00:
         ef:20:76:f2:58:be:82:62:6b:12:d2:f9:94:2c:9d:73:e9:e0:
         16:da:4f:16:0f:54:48:5f:44:5b:cd:25:ad:c6:a1:5b:8d:07:
         0a:17:11:42:48:29:f4:24:ba:96:a2:f0:58:55:58:1f:82:fe:
         e8:eb:d9:1a:ee:16:10:ce:5e:b3:e6:12:0f:66:df:8e:dc:84:
         18:06:10:cc:17:b6:6a:15:2c:a1:94:be:f1:b6:ba:4b:6e:3f:
         3a:c5:85:5a:7b:1a:af:18:d8:bd:dd:f8:3a:94:48:eb:5f:e8:
         59:a5:74:6b:db:10:d6:0d:a3:00:2b:4b:be:c7:ce:e4:b1:68:
         9d:ce:0f:98:05:b5:4f:ca:d0:d0:ab:a5:47:f2:72:2a:15:3c:
         44:6d:2c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:44 2026 by rpki-client