Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
File:                     GlN6DAozEJGzByU8bwfo-ChU5rA.mft (raw, json)
Hash identifier:          SImfjfOZXN5yZWgE5/N8hIFqXyZzUCcK1Fttg9vGvOI=
Subject key identifier:   33:EF:DC:2E:6A:AA:1B:3F:5A:DF:1A:7B:C8:1F:A3:11:04:E3:F3:CA
Authority key identifier: 1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0
Certificate issuer:       /CN=1a537a0c0a331091b307253c6f07e8f82854e6b0
Certificate serial:       019D984FB572CD4BC992281CCEE161479452
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
Manifest number:          18C2
Signing time:             Thu 16 Apr 2026 22:00:53 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:53 +0000
Manifest next update:     Fri 17 Apr 2026 22:00:53 +0000
Files and hashes:         1: 3o9USRveK81MSe2kQ4zc3sxEt9w.roa (hash: IFKuL1PDKwNZHcGFxJk8ylaICmG+MyPGR58awe6xsGU=)
                          2: GlN6DAozEJGzByU8bwfo-ChU5rA.crl (hash: 0V0L6pX9HNAkZCoEXHL2x1gFp9D5B+bzDcb5uWsbEpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:b5:72:cd:4b:c9:92:28:1c:ce:e1:61:47:94:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a537a0c0a331091b307253c6f07e8f82854e6b0
        Validity
            Not Before: Apr 16 22:00:53 2026 GMT
            Not After : Apr 17 22:00:53 2026 GMT
        Subject: CN=33efdc2e6aaa1b3f5adf1a7bc81fa31104e3f3ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:02:94:62:f9:15:82:b5:0b:0a:01:10:68:5f:
                    68:7f:82:5d:2d:24:01:b8:a0:1f:18:13:40:26:5e:
                    d4:70:6c:84:46:7f:e8:9e:a2:b7:1a:ed:aa:9a:68:
                    46:ed:a3:20:87:f1:4d:2c:d8:d1:74:a3:2a:7d:1a:
                    08:61:e7:3c:4c:6e:da:df:12:4b:63:40:eb:63:63:
                    2e:b6:28:bf:08:20:c2:44:9c:87:c1:e8:3f:ad:ae:
                    c2:d5:de:32:e8:f7:ea:6a:cf:56:f2:b6:06:a1:b0:
                    64:d8:08:6a:da:a4:4a:c7:6c:45:4d:69:cd:ed:e2:
                    6d:37:5f:a6:07:63:53:7c:ca:5a:de:a3:4f:14:a4:
                    97:ac:e0:49:64:cb:5e:bf:ea:fc:9f:95:46:44:51:
                    5f:85:f1:37:30:66:2a:54:12:1d:2f:cf:93:45:46:
                    c6:9c:a0:4a:20:21:a0:b6:92:db:85:9b:68:1b:12:
                    86:6a:e6:84:9f:4e:94:38:53:dc:00:32:7f:ad:32:
                    83:f1:56:d3:2a:63:d7:24:d8:ee:c3:b9:51:d0:c7:
                    cb:30:66:de:53:71:c2:bc:33:ee:f3:df:79:07:26:
                    16:29:44:9a:c3:29:da:b2:64:7b:4d:ef:88:3b:3f:
                    c9:48:05:26:02:e4:43:ff:06:d9:33:37:13:31:4c:
                    e2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EF:DC:2E:6A:AA:1B:3F:5A:DF:1A:7B:C8:1F:A3:11:04:E3:F3:CA
            X509v3 Authority Key Identifier:
                keyid:1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:cc:db:63:c4:62:c4:43:c3:77:fc:07:74:97:3d:af:09:73:
         69:7b:0a:12:02:b5:aa:3e:5d:5c:34:ff:f1:3f:53:cb:b4:95:
         0e:2c:ad:4f:80:8f:e9:ae:34:18:51:64:c3:9e:03:5d:de:47:
         01:9f:68:7e:92:5b:bf:05:9d:0f:df:61:b3:ae:a7:36:77:a9:
         a9:91:a7:ac:df:01:22:45:65:fa:2d:b0:20:8c:81:80:dd:5e:
         67:d9:20:1f:49:90:b1:ac:f3:2d:05:72:44:86:f4:58:ed:ec:
         66:66:7f:10:65:b2:1d:33:d4:b5:94:2d:19:5f:eb:ea:81:94:
         54:d7:9c:f8:1e:ab:b2:be:31:e1:01:cb:29:97:2f:cd:d1:c2:
         ef:8d:a6:23:90:36:05:ab:bd:a1:5f:6a:fa:cd:99:7e:ad:83:
         a5:44:74:6e:cf:2a:fd:09:c9:b7:88:42:eb:b7:98:92:e2:e8:
         73:99:4e:87:fa:30:86:5a:2a:d1:eb:8b:5d:77:ec:29:29:7a:
         b6:fd:f1:2c:e3:22:e0:ce:2e:ed:15:27:bd:c8:8d:3e:d5:1f:
         e3:57:96:32:83:f6:e6:be:99:45:bb:13:3b:17:06:9f:24:20:
         57:d5:2e:04:bb:d5:77:10:28:34:c9:8e:27:9f:07:4d:8e:3b:
         b0:64:15:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:17 2026 by rpki-client