Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
File:                     Quv9iRe1jwaG2T60jeQh7AE3Csk.mft (raw, json)
Hash identifier:          /aSmX0HTl2d+sTpPY5+TL+4xnJf2QWXKYYiTDkEI0hA=
Subject key identifier:   9E:F0:FE:28:70:A2:FD:A6:98:FE:DF:C8:58:C4:F8:85:2B:F7:72:88
Authority key identifier: 42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9
Certificate issuer:       /CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
Certificate serial:       019D97AA9A93EF65E3A934A2A2B3F6EBE3A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
Manifest number:          18C0
Signing time:             Thu 16 Apr 2026 19:00:33 +0000
Manifest this update:     Thu 16 Apr 2026 19:00:33 +0000
Manifest next update:     Fri 17 Apr 2026 19:00:33 +0000
Files and hashes:         1: Quv9iRe1jwaG2T60jeQh7AE3Csk.crl (hash: fBxBPkQvGQDE+oQ2WNsDzFJknAxU/zrPBn4OnfOZK6M=)
                          2: eAsQi27gOXjF_3AkuEMYU4-EJ7s.roa (hash: 0gnlaTOkuhgz//iK3cJQOoROXqgFENfW3q9eAblXZeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:aa:9a:93:ef:65:e3:a9:34:a2:a2:b3:f6:eb:e3:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
        Validity
            Not Before: Apr 16 19:00:33 2026 GMT
            Not After : Apr 17 19:00:33 2026 GMT
        Subject: CN=9ef0fe2870a2fda698fedfc858c4f8852bf77288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:75:c6:d3:54:af:e2:85:b7:d4:34:f7:25:
                    81:1f:fc:13:ca:c7:8e:1b:41:97:29:f6:5a:16:e3:
                    77:36:c5:6f:e8:cc:b9:2d:86:4d:41:25:95:ae:c3:
                    17:aa:29:93:e0:e8:ff:2a:36:98:a3:f2:ce:f3:d9:
                    fd:9d:d6:79:14:7e:fb:d7:58:db:f3:aa:f9:80:5e:
                    24:16:7d:55:18:48:b3:7a:c5:5d:0a:fe:67:94:a8:
                    bf:20:c1:96:7a:03:47:df:39:18:94:1c:0d:e3:3f:
                    bb:f5:e4:82:03:7c:7d:b9:51:9c:ab:d5:ce:78:0a:
                    d1:89:9b:64:0f:c4:ae:6c:07:ab:d3:25:97:d8:09:
                    0c:76:2a:b9:65:94:cc:91:bd:17:06:a5:f7:20:ed:
                    4a:c5:7c:aa:b0:96:c0:e5:4b:b2:0b:fe:25:63:49:
                    de:88:9d:4b:f7:9f:15:cf:eb:75:71:c9:78:da:04:
                    3f:f9:3e:b2:72:aa:2f:6b:b3:2a:f2:74:37:66:4e:
                    06:4a:90:e3:f3:0d:e5:2a:fb:4d:39:80:b5:fb:39:
                    fa:77:96:b2:84:fb:2c:81:9e:ae:83:a0:46:d9:86:
                    31:be:5f:19:85:05:40:8f:45:1a:68:72:77:4d:10:
                    1d:aa:1a:12:73:02:26:80:2f:29:1f:69:e8:42:79:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F0:FE:28:70:A2:FD:A6:98:FE:DF:C8:58:C4:F8:85:2B:F7:72:88
            X509v3 Authority Key Identifier:
                keyid:42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:03:58:29:e0:60:41:c7:81:a0:e3:02:af:f5:71:d5:ea:4d:
         50:26:2c:5c:cb:90:21:08:96:f4:22:7a:d4:d1:93:02:eb:42:
         cc:f6:5e:a9:ca:58:e9:74:a4:9f:03:d3:92:90:f0:50:d4:2d:
         97:68:a9:eb:b1:0c:d1:80:f5:37:ff:44:9d:4f:66:67:be:3c:
         8d:fe:60:b3:f7:6d:a7:07:ef:3a:96:a4:43:0a:57:f3:d7:df:
         66:90:c9:6a:b3:61:4d:94:9a:bf:36:4b:1e:b7:6d:96:4f:78:
         be:21:db:d9:98:35:32:59:ec:f2:78:af:0d:ef:38:34:87:d3:
         e2:b9:9b:50:39:87:7d:c9:ed:3d:d6:5e:70:ba:37:6e:45:c3:
         4a:6a:a1:be:98:ad:4d:8f:fe:27:0e:93:48:86:eb:ef:7a:11:
         97:93:59:60:d9:2a:73:3d:09:ec:8b:ab:c1:14:8d:61:08:a2:
         32:6d:ec:92:d1:d5:a6:55:93:bb:18:87:1b:94:61:bc:62:88:
         64:6b:c0:c0:d0:50:d2:ee:da:3b:77:83:c4:e3:42:c5:22:0b:
         1e:28:17:68:6f:a1:16:08:93:d4:26:cf:f5:ae:16:7a:b1:c4:
         92:55:db:a3:37:c1:b0:49:7c:ab:7f:8e:82:bc:ac:d6:be:f0:
         f2:7c:44:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:40:30 2026 by rpki-client