Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
File:                     fhVA_dWt1rd1SYwePyXJDiE6YS8.mft (raw, json)
Hash identifier:          ZVc7lzPbNmON5UsnDpLNvHATtf5ltXmtj49DjNfXu6c=
Subject key identifier:   3B:97:1C:75:A4:A5:04:8A:44:A8:3F:0F:8B:5E:43:88:CA:B2:FF:8A
Authority key identifier: 7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F
Certificate issuer:       /CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
Certificate serial:       019DA3E69EBB74DAA27785D905F2D7C79F1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
Manifest number:          18C8
Signing time:             Sun 19 Apr 2026 04:01:33 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:33 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:33 +0000
Files and hashes:         1: fhVA_dWt1rd1SYwePyXJDiE6YS8.crl (hash: mbPcOT5+W599SRKKzaKAbS3IHARoMe8jbsiG2xYPeU0=)
                          2: vypF4u6T8pornEd354CldlnvJ5Q.roa (hash: X/qPs2fMpklVg8cmNTWhzWpJY0nHbNqBSCIvT5rmL0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:9e:bb:74:da:a2:77:85:d9:05:f2:d7:c7:9f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
        Validity
            Not Before: Apr 19 04:01:33 2026 GMT
            Not After : Apr 20 04:01:33 2026 GMT
        Subject: CN=3b971c75a4a5048a44a83f0f8b5e4388cab2ff8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:a3:47:c2:dd:60:6c:df:8e:d4:ad:0f:d5:
                    2a:88:64:79:aa:96:82:cd:05:13:38:2d:dd:92:3a:
                    85:7f:20:83:20:82:b5:d3:57:d0:09:cd:c0:f0:c2:
                    b1:f0:e2:74:b6:a2:73:22:e2:72:c8:71:ea:7d:38:
                    d2:74:87:75:01:f9:75:8d:fa:7b:18:75:67:17:22:
                    40:63:36:7d:fd:4b:06:03:77:6d:24:e8:b8:be:a1:
                    1b:93:c4:94:9d:22:8c:94:e1:67:89:42:80:7e:48:
                    8a:cb:0c:2f:43:c7:07:c5:36:66:4b:6d:c1:a1:51:
                    ec:8c:7e:42:8f:97:34:8e:ea:e7:6d:01:6b:d2:4d:
                    ca:21:66:20:57:38:e1:23:fb:82:0f:46:86:57:dc:
                    ad:5f:2a:70:06:18:ac:2b:ee:93:d2:50:6e:24:a6:
                    44:82:b1:56:e1:6e:b0:ed:89:98:ef:c3:4c:f3:ba:
                    1b:2b:11:18:fc:c6:0d:c7:56:73:1a:16:a0:2f:5d:
                    30:6a:99:56:00:f5:31:0b:00:4f:33:fa:32:15:c5:
                    fc:28:c7:c5:58:3d:3e:c2:df:92:12:bd:60:dd:96:
                    29:e6:1a:3a:08:ea:f7:35:68:e0:3f:a2:6f:d8:89:
                    25:cc:0e:9a:4a:2d:8f:29:9c:39:17:8a:fb:c6:5a:
                    cf:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:97:1C:75:A4:A5:04:8A:44:A8:3F:0F:8B:5E:43:88:CA:B2:FF:8A
            X509v3 Authority Key Identifier:
                keyid:7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:5e:3b:df:0d:2c:8d:5e:86:97:90:f3:1c:56:d3:93:a4:8b:
         ec:89:97:81:49:68:00:ee:1b:c4:36:4f:1c:84:b8:7f:bb:7d:
         8b:53:64:4a:b9:a2:ae:1c:17:f6:94:f2:09:0c:93:0a:22:33:
         fe:96:30:8e:f6:51:54:de:94:6d:c6:b3:d5:d3:06:d5:bb:f4:
         3e:e5:1f:f8:8a:08:46:99:16:33:bf:4c:6a:74:99:8a:a1:2f:
         c9:d9:4c:3b:4a:aa:d7:62:77:05:c3:df:e6:e3:ab:13:58:2f:
         10:6a:dc:12:98:9a:4a:75:5d:2d:4a:74:cb:52:db:45:71:08:
         dc:fd:57:3d:da:a5:53:d3:2c:3d:6f:ae:46:3b:25:d8:90:c7:
         e0:a2:ed:af:a6:95:08:19:cc:09:65:70:7b:b6:58:38:cf:0d:
         8a:3f:fc:3a:a2:6a:fe:34:d2:a8:32:03:11:48:fa:12:c1:df:
         ee:18:d1:1b:31:da:b7:ce:ac:bc:50:50:6e:34:2a:13:df:83:
         7f:99:6d:f9:f3:ce:6d:4b:17:be:77:0c:16:17:5e:c8:d4:7a:
         50:3f:23:cf:fb:d8:90:d5:35:f0:11:30:18:71:e7:d0:de:5f:
         fc:02:29:7b:ce:97:83:60:83:d3:f2:0e:e8:35:b2:82:b7:a7:
         c7:41:c7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:08:25 2026 by rpki-client