Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
File:                     xeP39AwQDf_bGBIccmGZ6FgExYU.mft (raw, json)
Hash identifier:          Hw36y4MoTW0oNX067ck0udNjL328NzfPGBm8UZBDz5o=
Subject key identifier:   85:77:17:39:82:C5:A5:42:91:AF:BD:60:7D:6A:27:06:84:B7:9C:87
Authority key identifier: C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85
Certificate issuer:       /CN=c5e3f7f40c100dffdb18121c726199e85804c585
Certificate serial:       019D9962FE69161B4C90D61DC288091FDCCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 03:01:34 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:34 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:34 +0000
Files and hashes:         1: nItQAnIAzb9o-_NFZpkYT1kwfQ4.roa (hash: Yl7knjFB/hvlbYhFm7QXcfKUixHSHJRe7GQrQlY6cTA=)
                          2: xeP39AwQDf_bGBIccmGZ6FgExYU.crl (hash: ArY0Lasi7MtjUO4/oNccXie1buDB5pOKHeU0RvfIXqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:fe:69:16:1b:4c:90:d6:1d:c2:88:09:1f:dc:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5e3f7f40c100dffdb18121c726199e85804c585
        Validity
            Not Before: Apr 17 03:01:34 2026 GMT
            Not After : Apr 18 03:01:34 2026 GMT
        Subject: CN=8577173982c5a54291afbd607d6a270684b79c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:89:2d:bd:ee:29:4d:c0:22:9d:7a:69:e9:69:
                    ae:83:75:84:5e:f5:22:b5:27:a9:c3:50:64:79:6f:
                    da:4d:8a:6c:51:26:57:cd:70:b9:41:e8:81:bb:54:
                    fe:95:f9:ce:4a:84:b9:78:37:d5:77:85:d1:23:0e:
                    8e:5d:91:52:4d:d8:5b:fa:07:95:80:8c:ce:4e:56:
                    d2:24:b6:9f:54:07:00:66:aa:b9:72:b2:05:9f:df:
                    51:ed:71:c4:d9:79:aa:90:66:3b:84:18:0a:69:92:
                    4e:42:1b:0e:95:50:da:44:b4:59:e0:ae:24:99:80:
                    e0:83:92:93:80:8d:93:99:69:95:38:61:e4:bc:ba:
                    d1:52:99:be:34:42:4b:f9:44:3f:b6:94:fd:53:b4:
                    ce:f9:bb:39:fa:1a:34:b4:33:a9:6e:57:39:02:e7:
                    74:78:fb:74:53:d7:7f:17:ec:f9:8a:d7:e6:6c:57:
                    99:1a:b7:22:53:b7:1a:36:51:3c:3e:73:4d:06:ef:
                    54:ec:d3:a2:45:56:0c:6a:7b:44:e1:7d:ce:8c:7e:
                    51:47:16:02:53:72:92:ed:a1:c5:47:3e:63:30:a5:
                    d3:b7:3e:8b:fa:41:83:84:41:87:47:9d:5a:a2:64:
                    6a:b2:78:20:1e:61:51:7e:28:da:0f:f0:f4:13:94:
                    50:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:77:17:39:82:C5:A5:42:91:AF:BD:60:7D:6A:27:06:84:B7:9C:87
            X509v3 Authority Key Identifier:
                keyid:C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f8:e0:9e:2c:eb:13:79:46:e4:13:35:72:a6:6f:db:87:1e:
         3c:03:5b:9e:31:53:ab:f7:31:3c:d2:53:61:12:72:89:13:7b:
         7d:b0:ea:c0:df:da:d9:cc:d2:ad:db:28:c3:d8:b5:02:92:57:
         51:47:a4:22:19:1c:8c:9b:68:d8:80:93:6b:f1:5b:ae:72:43:
         af:d8:eb:12:55:53:53:7c:93:d2:fc:6d:40:2a:dd:51:ab:1e:
         84:16:ef:ed:41:ac:a7:7b:29:c3:f1:df:48:d0:15:9e:69:68:
         06:5b:d7:e4:1f:3c:83:05:d4:b1:25:c9:24:21:6b:5d:e8:c9:
         1f:e9:c2:12:f5:9d:55:58:de:26:72:fd:e7:e2:06:9b:6c:a5:
         80:14:b1:87:ba:b3:aa:ea:9f:8e:d2:23:df:89:e1:4e:12:51:
         28:60:91:3b:eb:79:ed:d9:8b:b2:e9:7d:b4:37:4a:7a:b2:b4:
         81:71:13:f5:cf:b9:a7:36:11:85:09:b6:0f:83:7b:2d:9f:ec:
         ae:6b:b8:65:3c:d1:a1:fa:5e:eb:d6:74:9b:e1:28:de:f5:d5:
         45:88:1f:e7:0b:c3:13:42:00:6d:9a:10:0b:f0:26:73:cd:ee:
         db:47:e1:e7:d7:3f:84:10:78:6f:5f:22:6b:bb:fc:de:d8:01:
         ee:ff:13:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:26:34 2026 by rpki-client