Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
File:                     F0G9doUTjcUdWmsM03gPRmtX_RM.mft (raw, json)
Hash identifier:          OeAAmTMMtCrFupMovUxC9Pn/Rr9K3dFKPsTAPoBaq1k=
Subject key identifier:   ED:D2:96:43:D2:B0:D2:A1:71:7D:65:13:9C:D2:42:AE:B4:CF:69:E0
Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
Certificate issuer:       /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Certificate serial:       019D984FBB25A01B29CA9069D73831FD9855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
Manifest number:          18C5
Signing time:             Thu 16 Apr 2026 22:00:55 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:55 +0000
Manifest next update:     Fri 17 Apr 2026 22:00:55 +0000
Files and hashes:         1: F0G9doUTjcUdWmsM03gPRmtX_RM.crl (hash: LdG4HR3CcPdbe24CGET6KBvgRrc/vJzzn5nuAYepCTA=)
                          2: bZtAv7jof-AuwEu0cxY9E17KiEM.roa (hash: GmHiN36XVNHoznaH+f5s8+gOGqjQoGIfCLxDgTEZBEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:bb:25:a0:1b:29:ca:90:69:d7:38:31:fd:98:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
        Validity
            Not Before: Apr 16 22:00:55 2026 GMT
            Not After : Apr 17 22:00:55 2026 GMT
        Subject: CN=edd29643d2b0d2a1717d65139cd242aeb4cf69e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dd:67:7c:f7:99:2b:40:bc:0a:f9:22:b0:fa:
                    41:8f:62:dc:12:42:40:78:6a:a1:f4:8c:d1:3f:91:
                    3c:9a:32:93:b2:bf:93:43:51:ef:3a:f0:14:e0:74:
                    cc:84:55:cc:2e:64:f1:3f:c8:8c:12:de:c8:b1:c0:
                    7c:22:ce:7f:9c:b6:59:7f:73:bb:5f:82:27:fe:ba:
                    4a:8f:93:be:79:f4:bb:d4:18:5d:4f:e4:c8:40:52:
                    ec:88:78:88:b8:9d:23:53:e3:0a:45:96:57:15:94:
                    e7:87:ac:da:06:72:26:58:d1:0b:5a:98:e7:91:b5:
                    a9:bc:40:c6:2d:f4:b8:55:18:24:a9:bd:da:e7:b6:
                    6c:05:10:ff:87:be:7d:cb:52:ba:ba:cf:14:fa:00:
                    c0:93:12:8f:b4:95:40:66:bc:41:ab:b2:f8:2e:f7:
                    b7:40:61:b6:82:5e:af:b6:af:0e:ae:23:5a:89:f9:
                    a1:b2:83:c6:f9:a9:81:71:7f:70:06:0e:5f:67:a3:
                    25:79:a3:30:07:b3:87:ed:0a:8f:eb:2e:7b:68:7b:
                    bf:6b:bd:ec:f8:0f:dd:37:2c:84:5e:8c:08:21:5f:
                    ae:c3:a4:18:17:7b:15:5a:89:d1:d7:9b:ec:df:d0:
                    a4:a9:be:97:8c:65:a1:5b:e1:e8:43:a9:4d:e3:a3:
                    c8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D2:96:43:D2:B0:D2:A1:71:7D:65:13:9C:D2:42:AE:B4:CF:69:E0
            X509v3 Authority Key Identifier:
                keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:15:c5:c6:2f:cc:37:6b:08:c7:e2:14:3e:ec:2a:59:07:f3:
         0e:c7:94:38:34:61:04:ff:69:af:3a:26:84:06:d2:aa:11:89:
         b4:b8:a8:8c:27:fd:e7:6c:06:2d:3d:f7:3a:b5:4e:ec:fb:46:
         fb:6b:94:f1:24:92:91:be:2c:9e:82:cd:1e:35:80:01:26:35:
         e9:7d:9e:e3:c8:fa:91:c6:d3:87:89:43:67:2c:53:17:ea:27:
         05:1a:37:0b:65:d8:a3:18:8d:eb:35:e1:cf:37:eb:38:07:1f:
         93:83:92:5e:e7:9f:b1:54:aa:4f:f6:4c:1d:80:93:8d:54:c9:
         e3:1f:0a:46:aa:f9:41:4e:09:3f:e8:60:54:89:49:bc:bc:bc:
         aa:bb:b1:70:5a:80:19:a9:02:6b:7d:04:76:f2:a6:7c:b0:a8:
         2f:75:bf:76:e4:01:e1:2f:b8:d0:9b:5e:6b:0f:16:73:24:bb:
         5c:5a:ac:d0:07:b9:6f:49:62:ff:de:cc:0a:af:0f:72:e6:65:
         7c:11:17:df:99:e2:85:14:8d:16:87:40:41:3d:b2:be:d8:0b:
         b1:57:1e:95:16:05:cd:fc:5b:bd:86:1c:74:cb:cd:99:f0:37:
         c8:a0:f6:17:6c:bd:60:6a:cd:92:23:a7:88:3d:12:39:9e:a6:
         1a:a6:92:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:12:30 2026 by rpki-client